Proper Syntax -- Src-Addr Filter IPS Signature Tuning

Answered Question
Aug 27th, 2007
User Badges:

Anyone know what the proper syntax to define Src and Dest addresses within a Signature? I am trying to define the default Private IP ranges as src addresses in signature 3030 and keep getting errors regarding the syntax.

I have tried ip/netmask and defining the netmask as and so on.

Correct Answer by mhellman about 9 years 10 months ago

Use a hyphen. So to filter all address:

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Correct Answer
mhellman Mon, 08/27/2007 - 09:46
User Badges:
  • Blue, 1500 points or more

Use a hyphen. So to filter all address: Mon, 08/27/2007 - 11:22
User Badges:

Many Thanks for the reply!

I searched the manual and this site up and down for that information and didn't find it documented anywhere.


This Discussion