Snort mailing list archives
RE: defining $external_net
From: "Metz, Tim" <TMetz () PanAmSat com>
Date: Thu, 25 Apr 2002 11:48:14 -0400
Thanks to all who responded, it sounded like a good idea but I didn't remember ever hearing anyone talk about it (and I didn't feel like breaking my IDS). Tim -----Original Message----- From: Tom Sevy [mailto:tsevy () epx com] Sent: Thursday, April 25, 2002 10:09 AM To: 'Metz, Tim'; 'snort-users () lists sourceforge net' Subject: RE: [Snort-users] defining $external_net Yes. -----Original Message----- From: Metz, Tim [mailto:TMetz () PanAmSat com] Sent: Thursday, April 25, 2002 8:19 AM To: snort-users () lists sourceforge net Subject: [Snort-users] defining $external_net All, Hope this hasn't been addresses a million times but..... is it legit to have the following in your snort.conf: var EXTERNAL_NET !$HOME_NET this would keep me from replacing alot of $EXTERNAL_NET's with !$HOME_NET's in my ruleset Thanks, Tim Metz PanAmSat Atlanta +1-404-381-2828 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- defining $external_net Metz, Tim (Apr 25)
- Re: defining $external_net Erek Adams (Apr 25)
- <Possible follow-ups>
- RE: defining $external_net Wirth, Jeff (Apr 25)
- RE: defining $external_net Tom Sevy (Apr 25)
- RE: defining $external_net Metz, Tim (Apr 25)