bugfix: snort on red aliases

snort was not working on red aliases.
make snort protect the whole red subnet if red IP configuration is static (including all aliases) and not only main red IP.