Snort mailing list archives

Snort Rules & Variables


From: "Pennell, Ronald B." <rpennell () ida org>
Date: Thu, 7 Jul 2005 15:01:09 -0400

When using a variable to specify specific IP addresses can you just list
the IP addresses themselves without the range?

 

Ie:  MAIL_SOURCES:  [111.222.222.24, 111.222.225.10] - or do you need to
specify the CIDR as part of the address?

 

Ron


Current thread: