Snort mailing list archives
Excluding particular IP address ranges from scans
From: "Kaplan, Andrew H." <AHKAPLAN () PARTNERS ORG>
Date: Wed, 29 Oct 2003 11:29:35 -0500
I am configuring Snort to monitor two of our servers which are outside the firewall. The last bit of tinkering I need to do is to prevent network traffic from systems within three different ip address ranges from being monitored. The reasoning behind this is that the above groups of ip addresses are part of our internal network. The idea behind this configuration is to monitor traffic coming exclusively from the Internet and not from our internal network. How would I configure the snort.conf file to exclude the internal network address ranges? Thanks. ------------------------------------------------------- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more productive? Does it help you create better code? SHARE THE LOVE, and help us help YOU! Click Here: http://sourceforge.net/donate/ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Excluding particular IP address ranges from scans Kaplan, Andrew H. (Oct 29)
- Re: Excluding particular IP address ranges from scans Ralf Spenneberg (Oct 29)
