[Snort-users] Home_net & external_net

Erek Adams erek at ...577...
Fri Dec 6 11:36:06 EST 2002


On Fri, 6 Dec 2002, Jeremy Finke wrote:

> Hmm... that is an interesting idea...  I tried to do what Robby Desmond
> suggested which was:
> var HOME_NET [192.168.40.0/24,192.168.41.0/24,10.14.0.0/16]
> var EXTERNAL_NET [!192.168.40.0/24,!10.14.0.0/16]
>
> But, it still seems to have the same problem...  I might be missing
> something...  My network is a little complicated how some of these
> things talk to each other...  :D

I don't think that the negation operator ! works inside of a bracket.
I'll have to peruse the parser code and see to be 100% certain.

-----
Erek Adams
Nifty-Type-Guy
TheAdamsFamily.Net




More information about the Snort-users mailing list