[Snort-users] Snort IGNORES var HOME_NET

Erek Adams erek at ...577...
Tue May 7 10:49:01 EDT 2002


On Tue, 7 May 2002, Vadim Pushkin wrote:

> So then EXTERNAL_NET would be written as
> EXTERNAL_NET any !HOME_NET

Nope.  Just use:

	var EXTERNAL_NET !$HOME_NET

That defines it as "anything but what I've defined $HOME_NET as", which is
_usually_ what you want.

Cheers!

-----
Erek Adams
Nifty-Type-Guy
TheAdamsFamily.Net





More information about the Snort-users mailing list