Snort mailing list archives
Re: EXTERNAL_NET definition in Snort
From: Erek Adams <erek () snort org>
Date: Thu, 9 Oct 2003 09:39:04 -0400 (EDT)
On Thu, 9 Oct 2003, Jukka Juslin wrote:
Does anybody know, how I can define EXTERNAL_NET to be anything else, but the address spaces set in the HOME_NET directive? Or what about other way around - if I want Snort to look into outbound packets and I swap the definition of these directives, how can make HOME_NET to be anything, but the addresses in the EXTERNAL_NET? Meaning, I would like to have !not_this exclusion in the network definition. I suppose it is needed to define these this way?
var EXTERNAL_NET !$HOME_NET ----- Erek Adams "When things get weird, the weird turn pro." H.S. Thompson ------------------------------------------------------- This SF.net email is sponsored by: SF.net Giveback Program. SourceForge.net hosts over 70,000 Open Source Projects. See the people who have HELPED US provide better services: Click here: http://sourceforge.net/supporters.php _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Rule to exclude a specific IP in Snort Juan M. Rivera (Oct 09)
- EXTERNAL_NET definition in Snort Jukka Juslin (Oct 09)
- Re: EXTERNAL_NET definition in Snort Erek Adams (Oct 09)
- Re: Rule to exclude a specific IP in Snort Chris Green (Oct 09)
- RE: Rule to exclude a specific IP in Snort Juan M. Rivera (Oct 09)
- Re: Rule to exclude a specific IP in Snort Chris Green (Oct 09)
- RE: Rule to exclude a specific IP in Snort Juan M. Rivera (Oct 14)
- RE: Rule to exclude a specific IP in Snort Juan M. Rivera (Oct 09)
- <Possible follow-ups>
- RE: Rule to exclude a specific IP in Snort Hutchinson, Andrew (Oct 09)
- RE: Rule to exclude a specific IP in Snort Jason (Oct 09)
- RE: Rule to exclude a specific IP in Snort Grime, Richard S (Oct 09)
- FW: Rule to exclude a specific IP in Snort grant (Oct 16)
- Re: FW: Rule to exclude a specific IP in Snort Erek Adams (Oct 16)
- Re: Rule to exclude a specific IP in Snort Nordwall, Douglas J (Oct 20)
- EXTERNAL_NET definition in Snort Jukka Juslin (Oct 09)