diff options
| author | Ermal <eri@pfsense.org> | 2011-09-05 20:15:47 +0000 |
|---|---|---|
| committer | Ermal <eri@pfsense.org> | 2011-09-05 20:27:23 +0000 |
| commit | a2abce189906560e0de865d839083adc8f9bc59f (patch) | |
| tree | 37bd4add7a552a7977f2d98fa58ea66bcae280ee /config/snort | |
| parent | 0fe793d06b64a01ddfbf0773270e757629961e39 (diff) | |
| download | pfsense-packages-a2abce189906560e0de865d839083adc8f9bc59f.tar.gz pfsense-packages-a2abce189906560e0de865d839083adc8f9bc59f.tar.bz2 pfsense-packages-a2abce189906560e0de865d839083adc8f9bc59f.zip | |
Try to fix the portscan not working
Diffstat (limited to 'config/snort')
| -rw-r--r-- | config/snort/snort.inc | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/config/snort/snort.inc b/config/snort/snort.inc index 0b30a8c9..7f53d7c8 100644 --- a/config/snort/snort.inc +++ b/config/snort/snort.inc @@ -2355,9 +2355,9 @@ dynamicdetection directory /usr/local/lib/snort/dynamicrules preprocessor frag3_global: max_frags 8192 preprocessor frag3_engine: policy bsd detect_anomalies -preprocessor stream5_global: max_tcp 8192, track_tcp yes, \ -track_udp yes, track_icmp yes -preprocessor stream5_tcp: policy BSD, ports both all,{$def_max_queued_bytes_type}{$def_max_queued_segs_type} use_static_footprint_sizes +preprocessor stream5_global: track_tcp yes, track_udp yes, track_icmp yes + +preprocessor stream5_tcp: policy BSD, ports both all, protocol both all, {$def_max_queued_bytes_type}{$def_max_queued_segs_type} use_static_footprint_sizes preprocessor stream5_udp: preprocessor stream5_icmp: |