[Snort-users] Home_net & external_net

Erek Adams erek at ...577...
Thu Dec 5 17:36:03 EST 2002


On Thu, 5 Dec 2002, Jeremy Finke wrote:

> I have something that is driving me crazy.
>
> I have alerts going off from within two different segments of my
> HOME_NET.  I don't understand why I am seeing these.  Here are the 2
> lines from my snort.conf:
>
> var HOME_NET [192.168.40.0/24,192.168.41.0/24,10.14.0.0/16]
> var EXTERNAL_NET [any,!192.168.40.0/24,!10.14.0.0/16]

[...snip...]

Make your life simple.

	var HOME_NET [192.168.40.0/24,192.168.41.0/24,10.14.0.0/16]
	var EXTERNAL_NET !$HOME_NET

Cheers!


-----
Erek Adams
Nifty-Type-Guy
TheAdamsFamily.Net




More information about the Snort-users mailing list