Re: List of IP Address

[Erek Adams <erek () theadamsfamily net>]

On Wed, 26 Jun 2002 DThomaz () flowserve com wrote:

> I would like to edit my rules by adding new list of IPs.
> Example:
>
> var DMZ_NET xxx.xxx.xxx.xxx
> var WAN_NET xxx.xxx.xxx.xxx
>
>  where do I add the lists? Is there a document to assist on rules changes?

Where?  Well...  On the docs pages of snort.org[0], there's quite a bit of
stuff.  The users manual covers all about writing rules and the order of the
config file.  The FAQ[1] has some other useful things in it.

It might sound strange but if you were to have a lot of changes/additions to
the snort.conf file--I would do it in something like a "my_addons.conf" file
and then including that.

  include /etc/snort/my_addons.conf

That way when you upgrade versions of snort, you can just include that file
with one line to 'recover' all of your local changes.  You could also put your
rules in there that you've written--But it's your choice.  Just be standard.
:)

Hope this helps!

-----
Erek Adams
Nifty-Type-Guy
TheAdamsFamily.Net


[0]     http://www.snort.org/documentation.html
[1]     http://www.snort.org/docs/faq.html



-------------------------------------------------------
This sf.net email is sponsored by: Jabber Inc.
Don't miss the IM event of the season | Special offer for OSDN members! 
JabberConf 2002, Aug. 20-22, Keystone, CO http://www.jabberconf.com/osdn
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users