<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>Is there a way to use threshold.conf to suppress all signatures coming from unique source IP address?<br><br>Something like this:<br>suppress gen_id 0, sig_id 0, track by_src, ip 111.222.111.222<br><br>Or is there another way of doing this? I want basically to whitelist some IPs so no rules apply to them.<br><br>Thanks.<br> </div></body>
</html>