Skip to content

Instantly share code, notes, and snippets.

@jasonish
Created February 9, 2014 17:55
Show Gist options
  • Save jasonish/8903058 to your computer and use it in GitHub Desktop.
Save jasonish/8903058 to your computer and use it in GitHub Desktop.
YAML based rule variables (translated by Suricata into rule-variable form)
vars:
address-groups:
HOME_NET: &HOME_NET
- 192.168.0.0/16
- 10.0.0.0/8
- 172.16.0.0/12
- not:
- 10.1.1.1/32
EXTERNAL_NET:
- not: *HOME_NET
port-groups:
HTTP_PORTS: [80]
SHELLCODE_PORTS:
- not: [80]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment