Proper Syntax -- Src-Addr Filter IPS Signature Tuning

Answered Question
Aug 27th, 2007
User Badges:

Anyone know what the proper syntax to define Src and Dest addresses within a Signature? I am trying to define the default Private IP ranges as src addresses in signature 3030 and keep getting errors regarding the syntax.


I have tried ip/netmask and defining the netmask as 255.255.0.0 and so on.

Correct Answer by mhellman about 9 years 10 months ago

Use a hyphen. So to filter all 192.168.0.0/16 address:


192.168.0.0-192.168.255.255

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
mhellman Mon, 08/27/2007 - 09:46
User Badges:
  • Blue, 1500 points or more

Use a hyphen. So to filter all 192.168.0.0/16 address:


192.168.0.0-192.168.255.255

brobertson@lwcky.com Mon, 08/27/2007 - 11:22
User Badges:

Many Thanks for the reply!


I searched the manual and this site up and down for that information and didn't find it documented anywhere.

Actions

This Discussion