Open std0ut opened 9 years ago
I'm having the same problem, and would appreciate to get a workaround, fix or patch for this. I tried to autocat a x.y.0.0/24 without luck: “ Input error! IP values must be valid IPv4 addresses or “any” “
I'd like to bring that topic up again and would also like to add lists as a feature!
autocat.conf allows src_ip and dest_ip values to be entered in CIDR notation, but this doesn't appear to be the case for the AUTOCAT feature in the Squert gui. It would be helpful to be able to auto-categorize certain events based on IP ranges. It's currently either tedious, or impractical to whitelist a /24, for example.