Re: [Snort-sigs] ftp rules question - why only external to internal?

From: Brian <bmc(at)snort.org>
Date: Fri Apr 25 2003 - 13:08:56 EDT

On Fri, Apr 25, 2003 at 09:35:29AM -0500, Jerry.L.Rose@saj02.usace.army.mil wrote:
> I see there are several "bad" sections in the ftp rules ("bad files" section

This is a user specific configuration. Again, like most of the rules, you probably want to run setting EXTERNAL_NET and HOME_NET to any.

Thats a policy thing. You decide how you want to run it. We keep the rules so its easy to tune one way or the other rapidly.

-brian

---

This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven.
http://thinkgeek.com/sf

---

Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs Received on Fri Apr 25 13:34:57 2003