next up previous contents
Next: Writing Snort Rules Up: Active Response Previous: React   Contents

Rule Actions

The block and sblock actions have been introduced as synonyms for drop and sdrop to help avoid confusion between packets dropped due to load (eg lack of available buffers for incoming packets) and packets blocked due to Snort's analysis.



Eugene Misnik 2013-05-08