Solved: Proper Syntax -- Src-Addr Filter IPS Signature Tuning

brobertson · ‎08-27-2007

Anyone know what the proper syntax to define Src and Dest addresses within a Signature? I am trying to define the default Private IP ranges as src addresses in signature 3030 and keep getting errors regarding the syntax.

I have tried ip/netmask and defining the netmask as 255.255.0.0 and so on.

mhellman · ‎08-27-2007

Use a hyphen. So to filter all 192.168.0.0/16 address:

192.168.0.0-192.168.255.255

View solution in original post

mhellman · ‎08-27-2007

Use a hyphen. So to filter all 192.168.0.0/16 address:

192.168.0.0-192.168.255.255

brobertson · ‎08-27-2007

Many Thanks for the reply!

I searched the manual and this site up and down for that information and didn't find it documented anywhere.