[Snort-users] Dynamic Addresses

Brian Caswell bmc at ...312...
Tue Apr 10 13:11:16 EDT 2001


Phil wrote:
> 
> Given the new info that if you specify you're external
> interface your HOME_NET var needs to be you're extrnal
> IP and your EXTERNAL_NET var needs to be everything
> else... how do you handle dynamic IPs?

Let snort handle it.

var HOME_NET $eth0_ADDRESS
var EXTERNAL_NET !$HOME_NET

-brian




More information about the Snort-users mailing list