| 5.2 |  | Setting up the Cisco IOS Firewall IDS |
| 5.2.3 |  | Configuring, disabling, and excluding signatures |

| This section covers the commands to set the spam attack threshold, disable signatures globally, and exclude signatures by host or network. The ip audit smtp spam global configuration command is used to specify the number of recipients in a mail message over which a Spam attack is suspected . Use the no version of this command to set the number of recipients to the default setting.

Use the ip audit signature global configuration command to globally disable a signature . Use the no form of this command to re-enable the signature.

Use the ip audit signature and the access-list global configuration commands to attach a signature to an access list and stop the signature from triggering when generated from a given host or network . Use the no form of this command to remove the signature from the access list.