[Oisf-users] How do I get IPF mode to, well, P?

[Andreas Herz]

Please reply to the list.

On 09/03/16 at 17:50, James Moe wrote:
> On 03/09/2016 12:33 PM, Andreas Herz wrote:
> >> >   Looking at this more I realize I do not know what you mean by
> >> > "converting" the rule. It is not simply changing the word "alert" to
> >> > "drop"; the rules file would be overwritten each time it is updated.
> >> >   How do I permanently convert a rule from alert to drop?
> >
> > What do you use to update them?
> > I have a small script, others use pulledpork or oinkmaster for that
> > purpose.
> >
>   Oinkmaster.

Look into oinkmaster.conf where you should configure that:

see http://oinkmaster.sourceforge.net/features.shtml

-- 
Andreas Herz