blocking rules snort 3

Hello,

Totally new, to snort 3 and learning how to use it, ( need to make a small presentation at my training center).

I would like to have a few tips or hints on my case.

I’m using 3 vms on gns3, 1 for snort, and the 2 others as clients for test pings.

Rules to trigger alerts seems to work, but not those for blocking.

Any help will be appreciated

Here is a printscreen of one my various attempts, and below the rule file

If more informations are required, please let me know, also i’m not an expert at all at this.

Thanks you in advance for your time.

Yvan

Sent from Mail for Windows

_______________________________________________
Snort-sigs mailing list
[email protected]
https://lists.snort.org/mailman/listinfo/snort-sigs

Please visit http://blog.snort.org for the latest news about Snort!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette

Visit the Snort.org to subscribe to the official Snort ruleset, make sure to stay up to date to catch the most <a href=" https://snort.org/downloads/#rule-downloads">emerging threats</a>!