Re: [Snort-sigs] Sendmail Signature

From: Bennett Todd <bet(at)rahul.net>
Date: Fri Apr 04 2003 - 08:41:30 EST

On Fri, Apr 04, 2003 at 12:41:54AM -0800, linux snort wrote:
> Is Sendmail Signature is released?

Here you go, hope this helps.

alert tcp $EXTERNAL_NET any -> $HOME_NET any (msg:"He said sendmail!";

	content:"sendmail"; nocase; flow:to_client,established;
	classtype:kickass-porn; sid:1000666; rev:1;)

-Bennett

---

This SF.net email is sponsored by: ValueWeb: Dedicated Hosting for just $79/mo with 500 GB of bandwidth! No other company gives more support or power for your dedicated server http://click.atdmt.com/AFF/go/sdnxxaff00300020aff/direct/01/

---

Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs Received on Fri Apr 4 09:29:53 2003