[Oisf-users] (no subject)

[mouna amani]

here is the deal I am a beginner with ips and everything
I have a host A with ip 192.168.50.3
an Host B with ip 192.168.50.1
the HostB sometimes sends good traffic and sometimes attacks .
I set HOME_NET:192.168.50.0/24
and EXTERNAL_NET: "!$HOME_NET"
if my hostB decides to send bad traffic the ips will generate an alert??
 (I did not change the rules to drop)
or should I set EXTERNAL_NET to any


*
*
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20130614/991f8c26/attachment-0002.html>