[Snort-users] Snort.conf variables
This is a discussion on [Snort-users] Snort.conf variables within the Snort forums, part of the System Security and Security Related category; This is a multi-part message in MIME format. ------=_NextPart_000_0277_01C3A7A5.F3CFCC30 Content-Type: text/plain; charset="iso-8859-1&...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
11-10-2003
|
|||
|
|||
[Snort-users] Snort.conf variables
This is a multi-part message in MIME format.
------=_NextPart_000_0277_01C3A7A5.F3CFCC30 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi folks, Just my small confusion regarding HOME_NET and EXTERNAL_NET variables. I have a Linux firewall which one runs Snort as well: eth0 - external network eth1 - local network And it has port forwards to web, smtp servers in the local network. Now my question is which one variables I have to use for my eth0 and = eth1? And which one variable I have to use for my web and smtp server: var SMTP_SERVERS $HOME_NET or EXTERNAL_NET? Regards Remus ------=_NextPart_000_0277_01C3A7A5.F3CFCC30 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML><HEAD> <META http-equiv=3DContent-Type content=3D"text/html; = charset=3Diso-8859-1"> <META content=3D"MSHTML 6.00.2800.1264" name=3DGENERATOR> <STYLE></STYLE> </HEAD> <BODY bgColor=3D#ffffff> <DIV><FONT face=3DArial size=3D2>Hi folks,</FONT></DIV> <DIV><FONT face=3DArial size=3D2></FONT> </DIV> <DIV><FONT face=3DArial size=3D2>Just my small confusion regarding = HOME_NET and=20 EXTERNAL_NET variables.</FONT></DIV> <DIV><FONT face=3DArial size=3D2></FONT> </DIV> <DIV><FONT face=3DArial size=3D2>I have a Linux firewall which one runs = Snort as=20 well:</FONT></DIV> <DIV><FONT face=3DArial size=3D2></FONT> </DIV> <DIV><FONT face=3DArial size=3D2>eth0 - external network</FONT></DIV> <DIV><FONT face=3DArial size=3D2>eth1 - local network</FONT></DIV> <DIV><FONT face=3DArial size=3D2></FONT> </DIV> <DIV><FONT face=3DArial size=3D2>And it has port forwards to web, smtp=20 servers in the local network.</FONT></DIV> <DIV><FONT face=3DArial size=3D2></FONT> </DIV> <DIV><FONT face=3DArial size=3D2>Now my question is which one variables = I have to=20 use for my eth0 and eth1?</FONT></DIV> <DIV><FONT face=3DArial size=3D2></FONT> </DIV> <DIV><FONT face=3DArial size=3D2>And which one variable I have to use = for my web and=20 smtp server:</FONT></DIV> <DIV><FONT face=3DArial size=3D2>var SMTP_SERVERS $HOME_NET or=20 EXTERNAL_NET?</FONT></DIV> <DIV><FONT face=3DArial size=3D2></FONT> </DIV> <DIV><FONT face=3DArial size=3D2></FONT> </DIV> <DIV><FONT face=3DArial size=3D2>Regards</FONT></DIV> <DIV><FONT face=3DArial size=3D2></FONT> </DIV> <DIV><FONT face=3DArial size=3D2>Remus</FONT></DIV> <DIV><FONT face=3DArial size=3D2></FONT> </DIV></BODY></HTML> ------=_NextPart_000_0277_01C3A7A5.F3CFCC30-- ------------------------------------------------------- This SF.Net email sponsored by: ApacheCon 2003, 16-19 November in Las Vegas. Learn firsthand the latest developments in Apache, PHP, Perl, XML, Java, MySQL, WebDAV, and more! http://www.apachecon.com/ _______________________________________________ Snort-users mailing list Snort-users@lists.sourceforge.net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/...fo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.p...st=snort-users 
|
Linear Mode
