How can I specify mutliple ports to exclude from shellcode rules? I'm using the latest version of snort. I'm also interested in knowing which ports should generally be excluded.
Asked
Active
Viewed 1,151 times
1 Answers
0
For example:
portvar SHELLCODE_PORTS [!80,!25]
Works for me on snort 2.9.1.2.
HopelessN00b
- 53,385
- 32
- 133
- 208
randomcontrol
- 231
- 2
- 4