#<1>
var HOME_NET 10.1.0.0/32
var EXTERNAL_NET any
var RULE_PATH ./rules
#<1>

#<2>
preprocessor frag2
preprocessor stream4: detect_scans, disable_evasion_alerts
preprocessor stream4_reassemble
#<2>

#<3>
config order: pass alert log
#<3>

#<4>
include $RULE_PATH/permit.rules
#<4>