|
|||||||||||
|
Re: [Snort-sigs] Sendmail Signature
From: Bennett Todd <bet(at)rahul.net>
Date: Fri Apr 04 2003 - 08:41:30 EST On Fri, Apr 04, 2003 at 12:41:54AM -0800, linux snort wrote:
Here you go, hope this helps. alert tcp $EXTERNAL_NET any -> $HOME_NET any (msg:"He said sendmail!"; content:"sendmail"; nocase; flow:to_client,established; classtype:kickass-porn; sid:1000666; rev:1;) -Bennett This SF.net email is sponsored by: ValueWeb: Dedicated Hosting for just $79/mo with 500 GB of bandwidth! No other company gives more support or power for your dedicated server http://click.atdmt.com/AFF/go/sdnxxaff00300020aff/direct/01/ Snort-sigs mailing list Snort-sigs@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/snort-sigs Received on Fri Apr 4 09:29:53 2003 This archive was generated by hypermail 2.1.8 : Wed Aug 23 2006 - 14:08:26 EDT |
||||||||||
|
|||||||||||