This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

adding OS X Snort rules

I want to add some OS X snort rules that I assume are not active in the UTM. If I get the snort number and add then into the same box in Astaro that you use to disallow and put the new rule to "allow" will this load the OS X snort rules into Astaros IPS and, work?

This thread was automatically locked due to age.

Parents

0 BarryG over 11 years ago

Hi, that won't work unfortunately.

There are some OSX rules installed, there is a list of all UTM rules:
http://www.astaro.com/lists/

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 Bluedog over 11 years ago in reply to BarryG

How do you add a rule or are you stuck with what Sophos feeds you?

I saw on the Snort site that they had an OSX.Imuler.B that was disabled by Snort and a month later they enabled it. Does that mean Sophos enables it too?

I went to the link you posted and went to the 9.0 IPS, are all those listed active?

Thanks for your help.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Bluedog over 11 years ago in reply to BarryG

How do you add a rule or are you stuck with what Sophos feeds you?

I saw on the Snort site that they had an OSX.Imuler.B that was disabled by Snort and a month later they enabled it. Does that mean Sophos enables it too?

I went to the link you posted and went to the 9.0 IPS, are all those listed active?

Thanks for your help.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data