Re: Home_net & external_net

[Jens Krabbenhoeft <tschenz-snort-users () noris net>]

Jeremy,

> var EXTERNAL_NET [!192.168.40.0/24,!10.14.0.0/16]

Try using: ![192.168.40./24,10.14.0.0/16].

The explanation for this can be found in these two previous posts to the
list:
* http://marc.theaimsgroup.com/?l=snort-users&m=103418842114017&w=2
* http://marc.theaimsgroup.com/?l=snort-users&m=103426392919247&w=2

Summing the two posts up, you list i s'not 192.168.40/24 OR not 10.14/16'
which effectively is 'any' :).

HTH,
        Jens


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users