From 498d1d928794d12d58128b53bd1b562f9e410191 Mon Sep 17 00:00:00 2001 From: Victor Julien Date: Tue, 25 Oct 2011 21:42:14 +0200 Subject: [PATCH] Update default suricata.yaml to use more sane settings for EXTERNAL_NET and AIM_SERVERS. --- suricata.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/suricata.yaml b/suricata.yaml index 03c4d1d3ee..6c5003a13a 100644 --- a/suricata.yaml +++ b/suricata.yaml @@ -679,7 +679,7 @@ vars: HOME_NET: "[192.168.0.0/16,10.0.0.0/8,172.16.0.0/12]" - EXTERNAL_NET: any + EXTERNAL_NET: "!$HOME_NET" HTTP_SERVERS: "$HOME_NET" @@ -691,7 +691,7 @@ vars: TELNET_SERVERS: "$HOME_NET" - AIM_SERVERS: any + AIM_SERVERS: "$EXTERNAL_NET" # Holds the port group vars that would be passed in a Signature. # These would be retrieved during the Signature port parsing stage.