[Oisf-users] Supressing rules by http host name, best method?

Jay M. jskier at gmail.com
Fri Dec 5 13:37:16 UTC 2014


Greetings,

I hope this is the correct place to ask this. I'm trying to suppress a
rule I created by http host name. I prefer to use IPs however this
particular host name uses several dynamic IPs in Akamai cloud, so
supressing an ever growing list of IPs on that network is not
something I want to do.

I don't see any options for track by hostname in the threshold.conf
documentation, so I assume (please correct me if I'm mistaken) that
this is not an option? My next thought was to do a pcre rule, however
I'm open to other suggestions if they exist.

Regards,

--
Jay
jskier at gmail.com


More information about the Oisf-users mailing list