[Oisf-users] "HOME_NET" and "EXTERNAL_NET: "!$HOME_NET"".

Andreas Herz aherz at oisf.net
Thu Feb 7 22:20:39 UTC 2019


Hi Jason,

On 06/02/19 at 09:06, Jason Long wrote:
> Hello,I installed "" on CentOS 7.6 x86_64 and I want to configure it. In "suricata.yaml" I see:
> HOME_NET: "[ 192.168.1.2]"    #HOME_NET: "[192.168.0.0/16]"    #HOME_NET: "[10.0.0.0/8]"    #HOME_NET: "[172.16.0.0/12]"    #HOME_NET: "any"
>     EXTERNAL_NET: "!$HOME_NET"    #EXTERNAL_NET: "any"
> My CentOS is a VM that running a web server and its Local IP address is "192.168.1.2" and Global IP address is "X.X.X.X", which values I must set for "HOME_NET" and " EXTERNAL_NET"?I see that " EXTERNAL_NET" have a "!$HOME_NET" value, what is it? If I set "HOME_NET" to "192.168.1.2" then all of "!$HOME_NET" refer to this IP?
> Thank you.

!$HOME_NET means that it's all IPs except those defined in $HOME_NET

-- 
Andreas Herz


More information about the Oisf-users mailing list