Re: home_net and external_net: how to use ! with multiple subnets ?

[Edin Dizdarevic <edin.dizdarevic () interActive-Systems de>]

Tom Van Overbeke wrote:
> Hi,
>
> [...]
> is there a way to define external_net as 'everything that is not home_net',
> and if yes, what's the correct syntax ?
> if this is not possible, is it possible in the rules to replace  the
> external_net -> home_net by specific subnets ?

var HOME_NET [10.1.1.0/24,192.168.1.0/24]

var EXTERNAL_NET !$HOME_NET

should do the thing...

Regards,

Edin

> thx,
>
>
> Tom.
-- 
Edin Dizdarevic



-------------------------------------------------------
This SF.net email is sponsored by Dice.com.
Did you know that Dice has over 25,000 tech jobs available today? From
careers in IT to Engineering to Tech Sales, Dice has tech jobs from the
best hiring companies. http://www.dice.com/index.epl?rel_code=104
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users