[Oisf-users] host-os-policy and $home_net

[Todor Petkov]

On Thu, Jul 21, 2016 at 4:31 PM, Peter Manev <petermanev at gmail.com> wrote:
> On Tue, Jul 19, 2016 at 8:17 PM, Todor Petkov <petkovptodor at gmail.com> wrote:
>> Hello,
>>
>
> Hi!
>
>> I am using suricata 3.1.1 on Centos7 from the epel repo.
>> I have defined the $HOME_NET variable and I am trying to use it in
>> host-os-policy like this:
>> linux: [ $HOME_NET]
>
> It should work.You should add quotes like so -
> linux: " [ $HOME_NET] "
>
> Can you confirm if this fixes the issue ?
>
> For example this works for me -
> linux: "[ !$L_B,172.16.0.0/12 ]"
>

It's working, thanks. I was using quotes in the block, should have
tried around the block as as well.