Snort mailing list archives
RE: defining $external_net
From: "Wirth, Jeff" <WirthJe () DNB com>
Date: Thu, 25 Apr 2002 09:41:58 -0400
Tim,
Hope this hasn't been addresses a million times but..... is it legit to have the following in your snort.conf: var EXTERNAL_NET !$HOME_NET
Sure is... Well as long as $HOME_NET != any ;-)
this would keep me from replacing alot of $EXTERNAL_NET's with !$HOME_NET's in my ruleset
- Jeff _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- defining $external_net Metz, Tim (Apr 25)
- Re: defining $external_net Erek Adams (Apr 25)
- <Possible follow-ups>
- RE: defining $external_net Wirth, Jeff (Apr 25)
- RE: defining $external_net Tom Sevy (Apr 25)
- RE: defining $external_net Metz, Tim (Apr 25)