#<1> var HOME_NET 10.1.0.0/32 var EXTERNAL_NET any var RULE_PATH /rules #<1> #<2> preprocessor frag2 preprocessor stream4: detect_scans, disable_evasion_alerts preprocessor stream4_reassemble #<2> #<3> config order: pass alert log #<3> #<4> include $RULE_PATH/permit.rules #<4>