Snort mailing list archives

Re: Why is this rule still being tripped?


From: Orion Poplawski <orion () cora nwra com>
Date: Mon, 19 Jan 2004 13:47:12 -0700

Martin Roesch wrote:

Hi Orion,

Can you try:

var PUBLIC_NET [!65.171.192.0/24,!192.168.0.0/24,!65.104.69.192/27,!207.202.149.0/24,! 12.105.80.64/27,!69.9.9.160/27]

There might might be an issue with the way the lists are processed. Try that and let me know how it goes.

     -Marty

That doesn't seem to work either.

--
Orion Poplawski
System Administrator                   303-415-9701 x222
Colorado Research Associates/NWRA      FAX: 303-415-9702
3380 Mitchell Lane, Boulder CO 80301   http://www.co-ra.com




-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: