[Snort-sigs] pass rules

John B. cybergolfing at ...144...
Wed Mar 3 09:05:12 EST 2004


If the src _and_ dest is 192.168.0.0/16, then try
pass ip 192.168.0.0/16 any -> 192.168.0.0/16.

John B.

--- "Rowland, Krisa W ERDC-ITL-MS Contractor"
<Krisa.W.Rowland at ...2112...> wrote:
> Example:
> I have created these pass rules - but for some
> reason I am still receiving
> alerts on 192.168 traffic as source and
> destination??  Any advice??
>  
> # CRREL
> pass ip 192.168.0.0/16 any -> 143.146.0.0/16 any
> pass ip 143.146.0.0/16 any -> 192.168.0.0/16 any
> 
> Krisa Rowland 
> ERDC Information Assurance Team 
> (SAIC Contractor) 
> 3909 Halls Ferry Rd.,  Bldg. 8000 
> Vicksburg, MS 39180 
> 601-634-2493 
> krisa.w.rowland at ...2112... 
>  
> 


__________________________________
Do you Yahoo!?
Yahoo! Search - Find what you’re looking for faster
http://search.yahoo.com




More information about the Snort-sigs mailing list