<html><head></head><body><div class="ydpbedda781yahoo-style-wrap" style="font-family:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:16px;"><div></div>
<div>Thank you.</div><div>Thus, "HOME_NET" is my Local IP address and "EXTERNAL_NET" is my Global IP address? Is it true?</div><div><br></div>
<div id="ydpbedda781yahoo_quoted_0444654114" class="ydpbedda781yahoo_quoted">
<div style="font-family:'Helvetica Neue', Helvetica, Arial, sans-serif;font-size:13px;color:#26282a;">
<div>
On Friday, February 8, 2019, 1:50:47 AM GMT+3:30, Andreas Herz <aherz@oisf.net> wrote:
</div>
<div><br></div>
<div><br></div>
<div>Hi Jason,<br clear="none"><div class="ydpbedda781yqt9190742617" id="ydpbedda781yqtfd15696"><br clear="none">On 06/02/19 at 09:06, Jason Long wrote:<br clear="none">> Hello,I installed "" on CentOS 7.6 x86_64 and I want to configure it. In "suricata.yaml" I see:<br clear="none">> HOME_NET: "[ 192.168.1.2]" #HOME_NET: "[192.168.0.0/16]" #HOME_NET: "[10.0.0.0/8]" #HOME_NET: "[172.16.0.0/12]" #HOME_NET: "any"<br clear="none">> EXTERNAL_NET: "!$HOME_NET" #EXTERNAL_NET: "any"<br clear="none">> My CentOS is a VM that running a web server and its Local IP address is "192.168.1.2" and Global IP address is "X.X.X.X", which values I must set for "HOME_NET" and " EXTERNAL_NET"?I see that " EXTERNAL_NET" have a "!$HOME_NET" value, what is it? If I set "HOME_NET" to "192.168.1.2" then all of "!$HOME_NET" refer to this IP?<br clear="none">> Thank you.</div><br clear="none"><br clear="none">!$HOME_NET means that it's all IPs except those defined in $HOME_NET<br clear="none"><br clear="none">-- <br clear="none">Andreas Herz<br clear="none">_______________________________________________<br clear="none">Suricata IDS Users mailing list: <a shape="rect" href="mailto:oisf-users@openinfosecfoundation.org" rel="nofollow" target="_blank">oisf-users@openinfosecfoundation.org</a><br clear="none">Site: <a shape="rect" href="http://suricata-ids.org " rel="nofollow" target="_blank">http://suricata-ids.org </a>| Support: <a shape="rect" href="http://suricata-ids.org/support/" rel="nofollow" target="_blank">http://suricata-ids.org/support/</a><br clear="none">List: <a shape="rect" href="https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users" rel="nofollow" target="_blank">https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users</a><br clear="none"><br clear="none">Conference: <a shape="rect" href="https://suricon.net" rel="nofollow" target="_blank">https://suricon.net</a><br clear="none">Trainings: <a shape="rect" href="https://suricata-ids.org/training/" rel="nofollow" target="_blank">https://suricata-ids.org/training/</a></div>
</div>
</div></div></body></html>