[Snort-users] Multiple HOME_NET IP's

Fyodor fygrave at ...121...
Fri Aug 11 13:39:18 EDT 2000


~ :Greetings,
~ :
~ :How about 2 Completely different HOME_NET subnets, such as   192.168.0.0/24 and 10.0.0.0/8, how would I get this done?   Will some sort of Boolean And work inside the variable, it seems that the rules will/should interpret correctly, but I could be wrong.   
~ :

 nope. as for the moment you will have to include ruleset twice with
different values of HOME_NET, it might be a subject to be changed though,
if we come with a `smart' idea how to do so :)





More information about the Snort-users mailing list