configurating BRO autoblock threshold question

Ken Pon pon at
Mon Sep 8 11:59:16 PDT 2003


We have our BRO systems configured to autoblock remote hosts if
several of our machines are scanned in a given day.

Question:  how does one configure BRO to autoblock if only one host
is scanned over a specified number of times per day?


Ken Pon

More information about the Bro mailing list