This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Rule settings

hi,

today i set new ips rules and it have me with the fact you asks placed does whether it would not be more meaningful everything on drop to set, which means it in addition?

This thread was automatically locked due to age.

Parents

0 William Warren over 21 years ago

I am not quite following you. ARe you asking if the order of placement matters? AFAIK no it does not..if the rule is on then it gets check. If the ips is on all packets that go through get checked against every active rule before they are allowed to continue to their destinations.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 William Warren over 21 years ago

I am not quite following you. ARe you asking if the order of placement matters? AFAIK no it does not..if the rule is on then it gets check. If the ips is on all packets that go through get checked against every active rule before they are allowed to continue to their destinations.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 synopex over 21 years ago in reply to William Warren

no, all rules are aktiv. i mean that all set to drop (not only detect, inform with email and allow).
Cancel
Vote Up 0 Vote Down

Cancel
0 Simon Shaw over 21 years ago in reply to William Warren

Packet filter rules are evaluated in the order listed in webmin. So if traffic matches say Rule 5 it won't see Rule 6 onwards.
Cancel
Vote Up 0 Vote Down

Cancel
0 William Warren over 21 years ago in reply to Simon Shaw

the order iof IPS rules does not matter. If you set it to drop it will drop the packets..it will log anything it drops. If you wnat mail notification jsut change the notification levels and you cna hae dropping, logging and notification all at the same time in IPS/IDS.
Cancel
Vote Up 0 Vote Down

Cancel