brett@franklin:~/cd$ diff snort.conf.REPULSE snort.conf 45c45 < var HOME_NET [192.168.5.0/24] --- > var HOME_NET [209.96.177.0/24] 57c57 < var DNS_SERVERS $HOME_NET --- > var DNS_SERVERS [209.96.177.71, 209.96.177.77, 209.96.177.252] 60c60 < var SMTP_SERVERS $HOME_NET --- > var SMTP_SERVERS [209.96.177.100] 63c63 < var HTTP_SERVERS $HOME_NET --- > var HTTP_SERVERS [209.96.177.15] 69c69 < var TELNET_SERVERS $HOME_NET --- > var TELNET_SERVERS [209.96.177.100] 79d78 < # var HTTP_PORTS 8081 93a93 > var HTTP_PORTS 443 110c110 < var RULE_PATH /usr/local/snortrules-horizon --- > var RULE_PATH /usr/local/snortrules-ciscoE1 502,504d501 < # BRETT < # From http://www.snort.org/docs/snort_htmanuals/htmanual_2.4/rc1/node11.html#SECTION00317000000000000000 < ignore_scanners { 209.96.177.129 } 505a503,504 > #BRETT > ignore_scanners { 209.96.177.13,209.96.177.53,209.96.177.236,209.96.177.50,209.96.177.100 } 737a737,738 > # BRETT > # include $RULE_PATH/web-attacks.rules 747c748,750 < # include $RULE_PATH/multimedia.rules --- > include $RULE_PATH/multimedia.rules > #BRETT > # include $RULE_PATH/p2p.rules 757d759 < # include threshold.conf 780a783 > include $RULE_PATH/bleeding.rules 782,783c785 < < #BRETT VRT subscription rules 10/2/06 --- > #BRETT VRT 10/2/06