[Snort-users] How to exclude alerts from within my home network.
peter at ...3373...
Fri Sep 14 08:29:04 EDT 2001
In my snort.conf file I have set HOME_NET to the IP address and mask of
my internal LAN and then set EXTERNAL_NET to !$HOME_NET
I was hoping this would avoid recording alerts from machines within my
home network. However, I am still seeing numerous alerts from these
machines being recorded in the database. Have I done something wrong?
More information about the Snort-users