[Snort-users] subnets and rules

John Tran snort at ...360...
Tue Sep 26 20:35:21 EDT 2000


While reading through the rules.cfg, the section that states :

 CHANGE THE NEXT LINE TO REFLECT YOUR NETWORK
# (Single system = 0.0.0.0/0)
var HOME_NET 0.0.0.0/0 

Says that the 0.0.0.0/0 subnet is for a single system?  Shouldn't that subnet specify EVERYTHING and not a single system?  If I'm incorrect, what is the correct way for specifying "EVERYTHING"?



More information about the Snort-users mailing list