Snort mailing list archives

RE: Home_net & external_net


From: Erek Adams <erek () theadamsfamily net>
Date: Fri, 6 Dec 2002 11:31:36 -0800 (PST)

On Fri, 6 Dec 2002, Jeremy Finke wrote:

Hmm... that is an interesting idea...  I tried to do what Robby Desmond
suggested which was:
var HOME_NET [192.168.40.0/24,192.168.41.0/24,10.14.0.0/16]
var EXTERNAL_NET [!192.168.40.0/24,!10.14.0.0/16]

But, it still seems to have the same problem...  I might be missing
something...  My network is a little complicated how some of these
things talk to each other...  :D

I don't think that the negation operator ! works inside of a bracket.
I'll have to peruse the parser code and see to be 100% certain.

-----
Erek Adams
Nifty-Type-Guy
TheAdamsFamily.Net


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: