[Snort-users] Remove Home_NET from EXTERNAL_NET any

Chris Green cmg at ...1935...
Tue Jul 2 14:18:28 EDT 2002


DThomaz at ...6151... writes:

> My logs are getting  home_net users as external_net.
> How do I make a statement on snort.conf that will not apply internal users
> as external.
>
> Here is my variables:
>
> var HOME_NET 172.16.0.0/12
>
> var EXTERNAL_NET any !$HOME_NET

var EXTERNAL_NET $HOME_NET

Cheers,
Chris
-- 
Chris Green <cmg at ...1935...>
Laugh and the world laughs with you, snore and you sleep alone.




More information about the Snort-users mailing list