Re: Variables and Negation

[Matt Kettler <mkettler () evi-inc com>]

That won't work. The HTTP_SERVERS you wrote is equivalent to "any" because 
the comma'ed list is an OR operation, not an AND.

(ie: it will match anything which is in HOME_NET  *OR* not 192.168.2.2)

There's no way at all to exclude a single IP from a range, other than 
writing pass rules.

At 02:47 PM 3/17/2003 -0500, you wrote:
> I cannot seem to get it right and didn't find a definitive answer on the list.
> I have a variable $HOME_NET 192.168.0.0/16
> I want to set $HTTP_SERVERS to $HOME_NET except for 192.168.2.2, my  proxy.
> Can I do:
> $HTTP_SERVERS [$HOME_NET, !192.168.2.2/32] ??
>
> Is there a better way to exclude only one IP?



-------------------------------------------------------
This SF.net email is sponsored by:Crypto Challenge is now open! 
Get cracking and register here for some mind boggling fun and 
the chance of winning an Apple iPod:
http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0031en
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users