[Snort-users] Remove Home_NET from EXTERNAL_NET any
erek at ...577...
Tue Jul 2 14:15:44 EDT 2002
On Tue, 2 Jul 2002 DThomaz at ...6151... wrote:
> My logs are getting home_net users as external_net.
> How do I make a statement on snort.conf that will not apply internal users
> as external.
> Here is my variables:
> var HOME_NET 172.16.0.0/12
> var EXTERNAL_NET any !$HOME_NET
Change that to:
var EXTERNAL_NET !$HOME_NET
More information about the Snort-users