Skip to content

Commit

Permalink
added IGNORE_PROTOCOL
Browse files Browse the repository at this point in the history
git-svn-id: file:///home/mbr/svn/psad_repos/psad/trunk@1251 91a0a83b-1414-0410-bf9a-c3dbc33e90b6
  • Loading branch information
mrash committed Dec 17, 2004
1 parent efca96c commit c47b1e2
Showing 1 changed file with 6 additions and 2 deletions.
8 changes: 6 additions & 2 deletions psad.conf
Original file line number Diff line number Diff line change
Expand Up @@ -75,7 +75,7 @@ DANGER_LEVEL5 10000;

### Set the interval (in seconds) psad will use to sleep before
### checking for new iptables log messages
CHECK_INTERVAL 5;
CHECK_INTERVAL 5;

### Search for snort "sid" values generated by fwsnort
### or snort2iptables
Expand Down Expand Up @@ -123,6 +123,10 @@ IGNORE_CONNTRACK_BUG_PKTS Y;
### IGNORE_PORTS tcp/61000-61356, udp/53, udp/5000;
IGNORE_PORTS NONE;

### allow entire protocols to be ignored (comma separated list).
### IGNORE_PROTOCOL TCP,UDP;
IGNORE_PROTOCOL NONE;

### Send email alert if danger level >= to this value.
EMAIL_ALERT_DANGER_LEVEL 1;

Expand All @@ -131,7 +135,7 @@ EMAIL_ALERT_DANGER_LEVEL 1;
### alerts for real attacks to not be generated if an attack is sent
### after the email threshold has been reached for an IP address.
### This is why the default is set to "0".
EMAIL_LIMIT 0;
EMAIL_LIMIT 0;

### If "Y", send a status email message when an IP has reached the
### EMAIL_LIMIT threshold.
Expand Down

0 comments on commit c47b1e2

Please sign in to comment.