Snort mailing list archives

Question regarding $HOME_NET


From: Charlie Egan <chas5873 () gmail com>
Date: Tue, 24 Jun 2014 20:34:18 +0100

Hi guys,

I'm having some trouble when it comes to using $HOME_NET & $EXTERNAL_NET in
my rule header.

In my snort.conf file, I have my settings as;

ipvar HOME_NET 192.168.207.0/24

ipvar EXTERNAL_NET any

For some reason though, when I'm using these in my rules, my rules don't
work at all. I'm able to use the EXTERNAL_NET option in my rules, although
the HOME_NET isn't working whatsoever.

If anyone has any idea to what could be causing this, it would be greatly
appreciated.

Cheers
------------------------------------------------------------------------------
Open source business process management suite built on Java and Eclipse
Turn processes into business applications with Bonita BPM Community Edition
Quickly connect people, data, and systems into organized workflows
Winner of BOSSIE, CODIE, OW2 and Gartner awards
http://p.sf.net/sfu/Bonitasoft
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Please visit http://blog.snort.org for the latest news about Snort!

Current thread: