[Oisf-users] Supressing rules by http host name, best method?
Jay M.
jskier at gmail.com
Fri Dec 5 13:37:16 UTC 2014
Greetings,
I hope this is the correct place to ask this. I'm trying to suppress a
rule I created by http host name. I prefer to use IPs however this
particular host name uses several dynamic IPs in Akamai cloud, so
supressing an ever growing list of IPs on that network is not
something I want to do.
I don't see any options for track by hostname in the threshold.conf
documentation, so I assume (please correct me if I'm mistaken) that
this is not an option? My next thought was to do a pcre rule, however
I'm open to other suggestions if they exist.
Regards,
--
Jay
jskier at gmail.com
More information about the Oisf-users
mailing list