Snort mailing list archives

single ip address


From: "Scott Taylor" <scottt () soccer com>
Date: Thu, 21 Feb 2002 17:33:00 -0800

Hello all,
  I'm having a hard time finding info on 
applying rules to a single IP addy. For instance 
if I want to ignore a single IP address what 
would the pass rule look like?

pass tcp 192.168.12.4 -> any any

or do I need a /24 on the end of the IP?

Would this work in the snort.conf under home_net?

Cheers,
take 1 chug and kiss the person on your right.

Scott

THERE IS ONLY ONE... 
SOCCER.COM, The Center of the Soccer Universe
http://www.soccer.com

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: