[Snort-users] snort.conf & commandline.

Sergio Aldo Casas sergio_casasar at ...6283...
Wed Jul 10 12:25:05 EDT 2002


 SOMEONE HAVE IS THERE THE MANUAL THE INSTALATION OF SNORT, AND WHAT VERSION THE SNORT IS RECOMENDADED  FOR INSTALL IN RED HAT 7.2 OR 7.1 WHICH PROPOSIT THE RUNNING IN FIREWALL?.
 
REGARDS
 
SERGIO CASAS
  Don <Don at ...5881...> escribió: there seems to be some confusion here, i am anyway,
the following variables, will set External_net == equal to Home_net
var EXTERNAL_NET = $HOME_NET doesn't work (I tried it yesterday)
var EXTERNAL_NET $HOME_NET is ok (I tried it now)

you dont want that!!
the following will set External_Net to anything BUT home_net

var EXTERNAL_NET !$HOME_NET

this is what you want, unless you are only wanting to detect your home_net
traffic, and of course you need to make sure home_net is not set to ""any""
so your home_net variable should be set to your IP like so

var Home_Net 192.168.0.0/24
or whatever your ip address/range is
var Home_Net [192.168.0.25/32,192.168.0.30/32]
etc...



> >-----Original Message-----
> >From: snort-users-admin at lists.sourceforge.net
> >[mailto:snort-users-admin at lists.sourceforge.net]On Behalf Of Sander
> >Smeenk
> >Sent: Wednesday, July 10, 2002 12:44 AM
> >To: Francesca Milanini
> >Cc: Rich Adamson; snort-users at lists.sourceforge.net
> >Subject: Re: [Snort-users] snort.conf & commandline.
> >
> >
> >Quoting Francesca Milanini (francesca.milanini at ...6264...):
> >> var EXTERNAL_NET = $HOME_NET doesn't work (I tried it yesterday)
> >> var EXTERNAL_NET $HOME_NET is ok (I tried it now)
> >
> >So 'var EXTERNAL_NET !$HOME_NET' is ok too ? =)
> >
> >Regards,
> >Sander.
> >
> >--
> >| Love comes back to you <-=|=-> you to back comes Love
> >| 1024D/08CEC94D - 34B3 3314 B146 E13C 70C8 9BDB D463 7E41 08CE C94D
> >
> >
> >-------------------------------------------------------
> >This sf.net email is sponsored by:ThinkGeek
> >Two, two, TWO treats in one.
> >http://thinkgeek.com/sf
> >_______________________________________________
> >Snort-users mailing list
> >Snort-users at lists.sourceforge.net
> >Go to this URL to change user options or unsubscribe:
> >https://lists.sourceforge.net/lists/listinfo/snort-users
> >Snort-users list archive:
> >http://www.geocrawler.com/redir-sf.php3?list=snort-users
> >



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Two, two, TWO treats in one.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


---------------------------------
Cobertura especial de la Copa Mundial de la FIFA Corea-Japón 2002, sólo en Yahoo! Deportes
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20020710/073304b5/attachment.html>


More information about the Snort-users mailing list