Re: Remove Home_NET from EXTERNAL_NET any

[Chris Green <cmg () sourcefire com>]

DThomaz () flowserve com writes:

> My logs are getting  home_net users as external_net.
> How do I make a statement on snort.conf that will not apply internal users
> as external.
>
> Here is my variables:
>
> var HOME_NET 172.16.0.0/12
>
> var EXTERNAL_NET any !$HOME_NET

var EXTERNAL_NET $HOME_NET

Cheers,
Chris
-- 
Chris Green <cmg () sourcefire com>
Laugh and the world laughs with you, snore and you sleep alone.


-------------------------------------------------------
Sponsored by:
ThinkGeek at http://www.ThinkGeek.com/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users