Re: [Snort-inline-users] http inspect alerting on client traffic

[Will M. <wil...@gm...>]

Hmmmmm I think it would be better to specify var HTTP_SERVERS and var
HOME_NET to  just include the subnet of your local lan.  That should
fix your problem.

Regards,

Will

On 7/18/05, tut...@pa... <tut...@pa...> wrote:
> Hi,
>=20
> I've had snort-inline running on my home network for a while now,
> and I've just noticed that http_inspect is alerting, (and presumably
> dropping) packets from client machines on my local network to
> public internet sites.
>=20
> Is the correct way to prevent this to replace my default
> http_inspect_server entry with entries for the ip address for my http
> server ?
>=20
> Thanks
> tut.
>=20
>=20
> -------------------------------------------------------
> SF.Net email is sponsored by: Discover Easy Linux Migration Strategies
> from IBM. Find simple to follow Roadmaps, straightforward articles,
> informative Webcasts and more! Get everything you need to get up to
> speed, fast. http://ads.osdn.com/?ad_id=3D7477&alloc_id=3D16492&op=3Dclic=
k
> _______________________________________________
> Snort-inline-users mailing list
> Sno...@li...
> https://lists.sourceforge.net/lists/listinfo/snort-inline-users
>