TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems!
----------------------------------------------------------------------------
Sameh et al:
Depending on the version of RealSecure you are using, you have done as much
as you can do.
In RS 3.0, any RS Mask number between 0-32 works
In RS 3.1, ONLY 0 or 32 works
In RS 3.2, ONLY 0,8,16,24,32 work
In all subsequent versions (RS 3.2.1+), any number between 0-32 works in
both connection events and filters. But RS does not recognize either
sequential or non-sequential ranges (e.g. 10.10.10.10-10.10.10.100 or
10.10.10.10,10.10.10.12). Think of the mask as somewhat equivalent to an IP
subnet mask, even though the RS mask usage is different. The RS mask
determines how many bits of the 32 bit IP address space is significant for
matching and would thus trigger the event being defined.
James R Lindley
Anomaly Detection Xpert
X-Force Surveillance and Reconnaissance Group
Special Operations Group
Managed Security Services
Internet Security Systems Inc
Vox: 678-443-6323
Fax: 678-443-6482
An unquenchable thirst for Pierian Waters.
Internet Security Systems - The Power To Protect.
-----Original Message-----
From: Sameh Y. Farag [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, September 20, 2000 10:12 AM
To: [EMAIL PROTECTED]
Subject: Filtering a group of addresses
TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any
problems!
----------------------------------------------------------------------------
I have a question regarding Real Secure Network Engine. If I want to add a
range of addresses to be filtered, how can I do this. The only thing I found
was to
filter on classes of addresses by adding 0,8,16,24 or 32 as the mask to the
network asset and then I filter this asset. Also, I reached a way by
resolving the ips in binary. By using this, I can make a range by entering a
number between 24 and 32 in the mask but it doesn't give me exactly all the
ips I want in the range. Can any one help me on specifying a range of
addresses to be filtered.
Sameh Y. Farag
