Re: nessusd.rules

On Tue, Oct 24, 2006 at 02:38:33PM -0500, Jeff T wrote:

> I'm trying to be creative and deny close to 60 host from being scanned
> during our audits. 
...
> I'm trying to figure out why my scan is hanging with error "E2002 -
> These hosts could not be tested because you are not allowed to do
> so." after adding deny addresses to the nessusd.rules file. 

I could be wrong, but I think NessusWX is still performing the scans
against the hosts that it can. [Check the nessusd.messages log to be
sure.] You'll need to acknowledge the message box and then click "Stop
entire test", but then you should get to the results viewer and have
results for those hosts that you were able to test.

By the way, an alternative approach is to write a custom plugin that
marks selected hosts as "dead" (see what dont_scan_prints.nasl does).
For extra credit, you could even add a preference that accepts a list of
hosts to be marked as dead at run-time.


George
-- 
theall@tenablesecurity.com
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus