configurating BRO autoblock threshold question

Ken Pon pon at es.net
Mon Sep 8 11:59:16 PDT 2003


Hi,

We have our BRO systems configured to autoblock remote hosts if
several of our machines are scanned in a given day.

Question:  how does one configure BRO to autoblock if only one host
is scanned over a specified number of times per day?

Thanks,

Ken Pon





More information about the Bro mailing list