[Snort-users] rules.base question

Max Vision vision at ...4...
Thu Sep 21 00:56:45 EDT 2000

INTERNAL is the IP space you want to monitor, for a single host use /32.
EXTERNAL is usually just set to "!$INTERNAL" or "any"


On Wed, 20 Sep 2000, it was written:
> However, I haven't been able to find much of =anything= at all about the two
> aforementioned parameters.

More information about the Snort-users mailing list