|
|
|
|
Snort Forums Archive
Archive Home » Snort Newbies » EXTERNAL_NET variable
Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.
[ Notice: Full Version of This Topic ]
EXTERNAL_NET variable
Posted by Zorro on March 08, 2005 05:17:22
In my snort.conf i've set up my HOME_NET as
var HOME_NET [192.168.255.0/24,192.168.0.0/24,192.168.3.0/24,192.168.4.0/24]
when i set my EXTERNAL_NET to
var EXTERNAL_NET !HOME_NET or var EXTERNAL_NET=!HOME_NET
snort shuts down with an error saying
Mar 8 10:13:32 ns1 snort: FATAL ERROR: ERROR /etc/snort/rules/bad-traffic.rules(12): Couldn't resolve hostname HOME_NET
This is the version of snort
Snort Version 2.3.0RC2 (Build 9)
I'm guessing i have the syntax wrong. |
|
Posted by roesch on March 08, 2005 06:00:49
Hi Zorro,
You did get the variable line wrong, it should be:
var EXTERNAL_NET !$HOME_NET
Try that.
-Marty |
|
Posted by Zorro on March 08, 2005 09:04:29
Thanx Dude works like a charm |
|
|
|
|
|
