Snort mailing list archives

RE: Home_net & external_net


From: Erek Adams <erek () theadamsfamily net>
Date: Fri, 6 Dec 2002 11:29:37 -0800 (PST)

On Fri, 6 Dec 2002, Don wrote:

erek, what would be wrong with doing as I suggested, the having 3 subnets as
home_net, and only wanting to ignroe alerts from 2 of those 3 subnets,

Ugh...  Nothing--Except for me not having clue.  I didn't read your
message till after I saw your reply.  :-/

Note:  If you want some rules to check on your TRUSTED_* stuff, you'll
need to copy them into local.rules and change HOME_NET to
TRUSTED_WHATEVER.

Cheers!

-----
Erek Adams
Nifty-Type-Guy
TheAdamsFamily.Net


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: