Untitled

brett@franklin:~/cd$ diff snort.conf.REPULSE snort.conf
45c45
< var HOME_NET [192.168.5.0/24]
---
> var HOME_NET [209.96.177.0/24]
57c57
< var DNS_SERVERS $HOME_NET
---
> var DNS_SERVERS [209.96.177.71, 209.96.177.77, 209.96.177.252]
60c60
< var SMTP_SERVERS $HOME_NET
---
> var SMTP_SERVERS [209.96.177.100]
63c63
< var HTTP_SERVERS $HOME_NET
---
> var HTTP_SERVERS [209.96.177.15]
69c69
< var TELNET_SERVERS $HOME_NET
---
> var TELNET_SERVERS [209.96.177.100]
79d78
< # var HTTP_PORTS 8081
93a93
> var HTTP_PORTS 443
110c110
< var RULE_PATH /usr/local/snortrules-horizon
---
> var RULE_PATH /usr/local/snortrules-ciscoE1
502,504d501
< # BRETT
< # From http://www.snort.org/docs/snort_htmanuals/htmanual_2.4/rc1/node11.html#SECTION00317000000000000000
< ignore_scanners { 209.96.177.129 }
505a503,504
> #BRETT
> ignore_scanners { 209.96.177.13,209.96.177.53,209.96.177.236,209.96.177.50,209.96.177.100 }
737a737,738
> # BRETT
> # include $RULE_PATH/web-attacks.rules
747c748,750
< # include $RULE_PATH/multimedia.rules
---
> include $RULE_PATH/multimedia.rules
> #BRETT
> # include $RULE_PATH/p2p.rules
757d759
< # include threshold.conf
780a783
> include $RULE_PATH/bleeding.rules
782,783c785
< 
< #BRETT VRT subscription rules 10/2/06
---
> #BRETT VRT 10/2/06