Re: single ip address

[Phil Wood <cpw () lanl gov>]

On Thu, Feb 21, 2002 at 05:33:00PM -0800, Scott Taylor wrote:
> Hello all,
>   I'm having a hard time finding info on 
> applying rules to a single IP addy. For instance 
> if I want to ignore a single IP address what 
> would the pass rule look like?
>
> pass tcp 192.168.12.4 -> any any
  pass tcp 192.168.12.4 any <> any any

or

  pass tcp 192.168.12.4/32 any <> any any

> or do I need a /24 on the end of the IP?
>
> Would this work in the snort.conf under home_net?
>
> Cheers,
> take 1 chug and kiss the person on your right.
>
> Scott

-- 
Phil Wood, cpw () lanl gov

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users