Snort.conf variables

["Remus" <rmocius () auste elnet lt>]

Hi folks,

Just my small confusion regarding HOME_NET and EXTERNAL_NET variables.

I have a Linux firewall which one runs Snort as well:

eth0 - external network
eth1 - local network

And it has port forwards to web, smtp servers in the local network.

Now my question is which one variables I have to use for my eth0 and eth1?

And which one variable I have to use for my web and smtp server:
var SMTP_SERVERS $HOME_NET or EXTERNAL_NET?


Regards

Remus