[Snort-users] Home_net & external_net

Erek Adams erek at ...577...
Fri Dec 6 11:34:10 EST 2002


On Fri, 6 Dec 2002, Don wrote:

> erek, what would be wrong with doing as I suggested, the having 3 subnets as
> home_net, and only wanting to ignroe alerts from 2 of those 3 subnets,

Ugh...  Nothing--Except for me not having clue.  I didn't read your
message till after I saw your reply.  :-/

Note:  If you want some rules to check on your TRUSTED_* stuff, you'll
need to copy them into local.rules and change HOME_NET to
TRUSTED_WHATEVER.

Cheers!

-----
Erek Adams
Nifty-Type-Guy
TheAdamsFamily.Net




More information about the Snort-users mailing list