[ossec-list] Block by destination ip

[aba3k]

It's possible? I'm using snort + ossec, but i don't want to block my
network, then they in the whitelist. But i want to block unauthorized
access (caught by snort) to the internet.