diff options
author | robiscool <robrob2626@yahoo.com> | 2009-10-06 15:13:43 -0700 |
---|---|---|
committer | robiscool <robrob2626@yahoo.com> | 2009-10-06 15:13:43 -0700 |
commit | a39d18d35f155660bcba150985a330285d6df6cf (patch) | |
tree | 2bd40b4b5e3b2ea1cf95fc8cf67553755f3eb874 /config/snort/snort.inc | |
parent | 9fa04cd2b2e77a32bee61d5ebb64295ff05b7e8c (diff) | |
download | pfsense-packages-a39d18d35f155660bcba150985a330285d6df6cf.tar.gz pfsense-packages-a39d18d35f155660bcba150985a330285d6df6cf.tar.bz2 pfsense-packages-a39d18d35f155660bcba150985a330285d6df6cf.zip |
snort snort-dev, do not clear snort2c table on filter reloads, add icmp packets
Diffstat (limited to 'config/snort/snort.inc')
-rwxr-xr-x | config/snort/snort.inc | 5 |
1 files changed, 2 insertions, 3 deletions
diff --git a/config/snort/snort.inc b/config/snort/snort.inc index 7320db00..575192b9 100755 --- a/config/snort/snort.inc +++ b/config/snort/snort.inc @@ -1184,15 +1184,14 @@ preprocessor frag3_engine: policy first preprocessor frag3_engine: policy bsd detect_anomalies preprocessor stream5_global: max_tcp 8192, track_tcp yes, \ -track_udp yes -# track_icmp yes +track_udp yes, track_icmp yes preprocessor stream5_tcp: bind_to any, policy windows preprocessor stream5_tcp: bind_to any, policy linux preprocessor stream5_tcp: bind_to any, policy vista preprocessor stream5_tcp: bind_to any, policy macos preprocessor stream5_tcp: policy BSD, ports both all, use_static_footprint_sizes preprocessor stream5_udp -# preprocessor stream5_icmp +preprocessor stream5_icmp ########################## # |