From b2447d05bb64548815b4d0f72d0069e057162d9a Mon Sep 17 00:00:00 2001 From: bmeeks8 Date: Tue, 11 Aug 2015 18:43:18 -0400 Subject: Include proxy arp VIPs in default HOME_NET and PASS LIST. --- config/snort/snort.inc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'config/snort') diff --git a/config/snort/snort.inc b/config/snort/snort.inc index 027207b1..24804461 100755 --- a/config/snort/snort.inc +++ b/config/snort/snort.inc @@ -471,7 +471,7 @@ function snort_build_list($snortcfg, $listname = "", $whitelist = false, $extern /* iterate all vips and add to whitelist */ if (is_array($config['virtualip']) && is_array($config['virtualip']['vip'])) { foreach($config['virtualip']['vip'] as $vip) { - if ($vip['subnet'] && $vip['mode'] != 'proxyarp') { + if ($vip['subnet']) { if (!in_array("{$vip['subnet']}/{$vip['subnet_bits']}", $home_net)) $home_net[] = "{$vip['subnet']}/{$vip['subnet_bits']}"; } -- cgit v1.2.3