[Snort-users] Multiple HOME_NET IP's

Daniel van Balen vdaniel at ...191...
Fri Aug 11 05:58:20 EDT 2000


On Fri, Aug 11, 2000 at 12:04:41PM -0500, Andy Beal wrote:
> Greetings,
> 
> How about 2 Completely different HOME_NET subnets, such as   192.168.0.0/24 and 10.0.0.0/8, how would I get this done?   Will some sort of Boolean And work inside the variable, it seems that the rules will/should interpret correctly, but I could be wrong.   
> 
> 

	This is what you want:

var HOME_NET 192.168.0.0/24
include <the rule file>
var HOME_NET 10.0.0.0/8
include <the rule file>
... and so on and so forth...


-spiff





More information about the Snort-users mailing list