Snort mailing list archives

Excluding particular IP address ranges from scans


From: "Kaplan, Andrew H." <AHKAPLAN () PARTNERS ORG>
Date: Wed, 29 Oct 2003 11:29:35 -0500

I am configuring Snort to monitor two of our servers which are outside the
firewall. The last bit of tinkering I need 
to do is to prevent network traffic from systems within three different ip
address ranges from being monitored. The 
reasoning behind this is that the above groups of ip addresses are part of
our internal network. The idea behind 
this configuration is to monitor traffic coming exclusively from the
Internet and not from our internal network. 

How would I configure the snort.conf file to exclude the internal network
address ranges? Thanks.


-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?   SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: