Proper Syntax -- Src-Addr Filter IPS Signature Tuning

Answered Question

Anyone know what the proper syntax to define Src and Dest addresses within a Signature? I am trying to define the default Private IP ranges as src addresses in signature 3030 and keep getting errors regarding the syntax.

I have tried ip/netmask and defining the netmask as 255.255.0.0 and so on.

I have this problem too.
0 votes
Correct Answer by mhellman about 9 years 3 months ago

Use a hyphen. So to filter all 192.168.0.0/16 address:

192.168.0.0-192.168.255.255

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
mhellman Mon, 08/27/2007 - 09:46

Use a hyphen. So to filter all 192.168.0.0/16 address:

192.168.0.0-192.168.255.255

Actions

This Discussion