cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
557
Views
0
Helpful
2
Replies

Proper Syntax -- Src-Addr Filter IPS Signature Tuning

brobertson
Level 1
Level 1

Anyone know what the proper syntax to define Src and Dest addresses within a Signature? I am trying to define the default Private IP ranges as src addresses in signature 3030 and keep getting errors regarding the syntax.

I have tried ip/netmask and defining the netmask as 255.255.0.0 and so on.

1 Accepted Solution

Accepted Solutions

mhellman
Level 7
Level 7

Use a hyphen. So to filter all 192.168.0.0/16 address:

192.168.0.0-192.168.255.255

View solution in original post

2 Replies 2

mhellman
Level 7
Level 7

Use a hyphen. So to filter all 192.168.0.0/16 address:

192.168.0.0-192.168.255.255

Many Thanks for the reply!

I searched the manual and this site up and down for that information and didn't find it documented anywhere.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: