[Snort-users] EXTERNAL_NET ?
joshua.fritsch at ...1253...
Wed Jan 31 18:23:29 EST 2001
EXTERNAL_NET = !$HOME_NET
EXTERNAL_NET = any (if you want to see what your internal network is doing
> -----Original Message-----
> From: Andrew.Zielinski at ...1252...
> [mailto:Andrew.Zielinski at ...1252...]
> Sent: Wednesday, January 31, 2001 5:51 PM
> To: Snort-users at lists.sourceforge.net
> Subject: [Snort-users] EXTERNAL_NET ?
> Stupid question, how do I define EXTERNAL_NET. Basically I am
> running Snort
> in a corporate envionment where our IPs are all class C
> private addresses
> and the EXTERNAL NET, would be the entire Internet. I'm not sure how I
> should define this. Any help is appreciated.
> Andrew Zielinski
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
More information about the Snort-users