[Snort-users] home_net and ext_net question

Everist, Benjamin S. (NASWI) EveristB at ...8190...
Thu Apr 24 14:29:24 EDT 2003


<snip>
>Having HOME_NET encapsulate two or more networks can do funny things to the
>Snort rules when one simply negates EXTERNAL_NET (i.e., var EXTERNAL_NET
>!$HOME_NET, or some variant).  

What kinds of funny things?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20030424/98c6ba5a/attachment.html>


More information about the Snort-users mailing list