title: snort ips rule - reject work but drop and sdrop dont work
body: <p>i try to run snort as an IPS. so i install snort on ubuntu server via apt-get and config <strong>daq_type</strong> as <strong>afpacket</strong> and <strong>daq_mode</strong> as <strong>inline</strong>. and <strong>2 interface</strong> like <strong>eth1:eth2</strong>
  then i write a rule for test</p>
  
  <pre><code>reject tcp any any -&gt; any any (sid: 1000005;)
  </code></pre>
  
  <p>it work but when i change it to </p>
  
  <pre><code>drop tcp any any -&gt; any any (sid: 1000005;)
  </code></pre>
  
  <p>it does not work. and when i change action to sdrop the result is same. 
  and i install snort from source but the result was same.
  can you help to to write true rule?</p>