OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [Snort-users] http_inspect question.

From: Jeremy Hewlett (jhsourcefire.com)
Date: Mon Jan 05 2004 - 16:40:30 CST


On Fri, Jan 02, A.L. wrote:
> Is there any way to configre http_inspect to only alert on
> $EXTERNAL_NET -> $HOME_NET:$HTTP_PORTS traffic (without me having to
> collect the IP addresses of all local webservers, and type in a bunch of
> config stuff for each server).

This is not currently doable - but is on the list of functionality to
be added.

-------------------------------------------------------
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills. Sign up for IBM's
Free Linux Tutorials. Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
_______________________________________________
Snort-users mailing list
Snort-userslists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users