bug 454 - Provide better error message when the user supplies a NULL address range

diff --git a/src/detect-engine-address.c b/src/detect-engine-address.c
index c10d2cd20af204284e4279e1548b2ba0c82f5d60..621d20592a78ad46c06e95ffba827618561fce8b 100644 (file)
--- a/src/detect-engine-address.c
+++ b/src/detect-engine-address.c
@@ -1100,7 +1100,9 @@ int DetectAddressMergeNot(DetectAddressHead *gh, DetectAddressHead *ghn)
     /* check if the negated list covers the entire ip space. If so
      * the user screwed up the rules/vars. */
     if (DetectAddressIsCompleteIPSpace(ghn) == 1) {
-        SCLogDebug("DetectAddressMergeNot: complete IP space negated");
+        SCLogError(SC_ERR_INVALID_SIGNATURE, "Complete IP space negated.  "
+                   "Rule address range is NIL.  Probably have a !any or "
+                   "a address range that supplies a NULL address range");
         goto error;
     }