Project

General

Profile

Actions
Copy link

Feature #1140

open

IP-Address white list implementation for IPS mode (without disable a rule global)

Added by Stefan Sabolowitsch almost 11 years ago. Updated over 2 years ago.

Status:
New
Priority:
Normal
Assignee:
OISF Dev
Target version:
TBD
Effort:
Difficulty:
Label:

Description

Similar to the threshold.conf list, it would be good to have a white list for IPS mode.
Without such a white list for each IP address, you must disable the rule currently "global" and this is not helpful.

Please check this discussion:
https://lists.openinfosecfoundation.org/pipermail/oisf-users/2014-March/003394.html

Actions
Copy link
 #1

Updated by Andreas Herz almost 9 years ago

  • Assignee set to OISF Dev
  • Target version set to TBD
Actions
Copy link
 #2

Updated by Victor Julien over 2 years ago

Not sure I understand what the goal is here. But would a "pass" rule not just be enough?

Actions
Copy link

Also available in: Atom PDF