Re: [Snort-sigs] false positives for attack-response rules (and suggested fix)

From: Brian <bmc(at)snort.org>
Date: Fri Mar 19 2004 - 12:02:10 EST

On Fri, Mar 19, 2004 at 01:56:10PM +0100, Milani Paolo wrote:
> In some environments it can be normal to have telnet traffic in the

If they go off in your enviornment and its acceptable, tune them. In most enviornments these days, these rules are just fine.

-brian

---

This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click

---

Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs Received on Fri Mar 19 13:03:37 2004