Snort Rule Question

["Nick Patellis" <NPatellis () TheFund com>]

I am trying to stop an alert on specific rules against specific http
servers.  How is this done?  Assume the alert starts with:  alert tcp
$EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS.....  if http_servers =
home_network, how do I stop this from alerting on certain servers?  Can
I use a list of ip addresses for the HTTP_SERVERS variable?

 

Thanks