Detection of class C IP range in DNS response

Rules
2

Hí,

I’ll give you an example CIDS to see if it works for you.

alert ip [0.0.0.0/8,192.0.0.0/24,192.0.2.0/24,198.18.0.0/15,198.51.100.0/24,203.0.113.0/24] any -> $HOME_NET any (msg:"...............