rule modify
Except on the first page, right running head:
Heading1 or Heading1NewPage text (automatic)
853
Alcatel-Lucent
Beta Beta
OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide
RULE MODIFY
rule modify <1-4294967295> content <rule-content>
DESCRIPTION
This command is entered in the Intrusion Snort Configuration Mode. Use this
command to modify Snort rule.
PARAMETER
EXAMPLE
To modify the rule given below, use the rule modify command:
Original rule: alert tcp $HOME_NET any -> $EXTERNAL_NET any
(msg:"ATTACK-RESPONSES directory listing";
flow:from_server,established; content:"Volume Serial
Number"; classtype:bad-unknown; sid:1292; rev:8;)
Modification of rule to $EXTERNAL_NET is shown below:
ALU(config-firewall-intrusion-snort)#rule modify 1292
content alert tcp $EXTERNAL_NET any -> $EXTERNAL_NET any
(msg:"ATTACK-RESPONSES directory listing";
flow:from_server,established; content:"Volume Serial
Number"; classtype:bad-unknown; sid:1292; rev:8;)
Parameter Description
1-4294967295 Snort rule ID.
rule-content The modified rule content.
To Next Page
Loading...
Need help?
General
