int13h/squert

Feature Request - IP ranges in AUTOCAT

std0ut opened this issue · 2 comments

autocat.conf allows src_ip and dest_ip values to be entered in CIDR notation, but this doesn't appear to be the case for the AUTOCAT feature in the Squert gui. It would be helpful to be able to auto-categorize certain events based on IP ranges. It's currently either tedious, or impractical to whitelist a /24, for example.

dm-17 commented

I'm having the same problem, and would appreciate to get a workaround, fix or patch for this.
I tried to autocat a x.y.0.0/24 without luck:
“ Input error! IP values must be valid IPv4 addresses or “any” “