Snort mailing list archives
Re: List of IP Address
From: Erek Adams <erek () theadamsfamily net>
Date: Wed, 26 Jun 2002 11:42:03 -0700 (PDT)
On Wed, 26 Jun 2002 DThomaz () flowserve com wrote:
I would like to edit my rules by adding new list of IPs. Example: var DMZ_NET xxx.xxx.xxx.xxx var WAN_NET xxx.xxx.xxx.xxx where do I add the lists? Is there a document to assist on rules changes?
Where? Well... On the docs pages of snort.org[0], there's quite a bit of stuff. The users manual covers all about writing rules and the order of the config file. The FAQ[1] has some other useful things in it. It might sound strange but if you were to have a lot of changes/additions to the snort.conf file--I would do it in something like a "my_addons.conf" file and then including that. include /etc/snort/my_addons.conf That way when you upgrade versions of snort, you can just include that file with one line to 'recover' all of your local changes. You could also put your rules in there that you've written--But it's your choice. Just be standard. :) Hope this helps! ----- Erek Adams Nifty-Type-Guy TheAdamsFamily.Net [0] http://www.snort.org/documentation.html [1] http://www.snort.org/docs/faq.html ------------------------------------------------------- This sf.net email is sponsored by: Jabber Inc. Don't miss the IM event of the season | Special offer for OSDN members! JabberConf 2002, Aug. 20-22, Keystone, CO http://www.jabberconf.com/osdn _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- List of IP Address DThomaz (Jun 26)
- Re: List of IP Address Erek Adams (Jun 26)
- <Possible follow-ups>
- RE: List of IP Address McCammon, Keith (Jun 26)