Remove hosts/network in analyst via so-allow #5657
-
|
how can I remove hosts/networks added in so-allow by mistake? |
Beta Was this translation helpful? Give feedback.
Answered by
clairmont32
Sep 26, 2021
Replies: 1 comment 1 reply
-
|
You can do this with https://docs.securityonion.net/en/latest/firewall.html?highlight=so-firewall |
Beta Was this translation helpful? Give feedback.
1 reply
-
|
Added: |
Beta Was this translation helpful? Give feedback.
Answer selected by
dougburks
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
You can do this with
sudo so-firewall excludehost analyst 192.168.1.255. The docs dont explicitly cover this so it likely would be a good addition to the example section.https://docs.securityonion.net/en/latest/firewall.html?highlight=so-firewall