[Snort-users] EXTERNAL_NET ?

Joshua Fritsch joshua.fritsch at ...1253...
Wed Jan 31 18:23:29 EST 2001


EXTERNAL_NET = !$HOME_NET

or

EXTERNAL_NET = any (if you want to see what your internal network is doing
as well)

> -----Original Message-----
> From: Andrew.Zielinski at ...1252... 
> [mailto:Andrew.Zielinski at ...1252...]
> Sent: Wednesday, January 31, 2001 5:51 PM
> To: Snort-users at lists.sourceforge.net
> Subject: [Snort-users] EXTERNAL_NET ?
> 
> 
> Stupid question, how do I define EXTERNAL_NET. Basically I am 
> running Snort
> in a corporate envionment where our IPs are all class C 
> private addresses
> and the EXTERNAL NET, would be the entire Internet. I'm not sure how I
> should define this. Any help is appreciated.
> Andrew Zielinski
> 
> 
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> http://lists.sourceforge.net/lists/listinfo/snort-users
> 




More information about the Snort-users mailing list