Snort mailing list archives

Re: Sourcefire VRT Certified Snort Rules Update 2010-04-06


From: L0rd Ch0de1m0rt <l0rdch0de1m0rt () gmail com>
Date: Tue, 6 Apr 2010 15:21:29 -0400

Hello, after applying the latest VRT ruleset I seem to be blocking about 50%
of e-mail traffic and it doesn't look like it is due to spam.  I think there
could be something wrong with it ... does anybody know what is going on?
The heat is really getting turned up on me as they think this is my fault so
hopefully we can identify the cause soon.

Cheers,

-L0rd Ch0de1m0rt


On Tue, Apr 6, 2010 at 12:57 PM, Research <research () sourcefire com> wrote:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Sourcefire VRT Certified Snort Rules Update

Synopsis:
This release adds and modifies rules in several categories.

Details:
As a result of ongoing research, the Sourcefire VRT has added multiple
rules to the web-client, oracle, smtp, chat and sql rule sets to
provide coverage for emerging threats from these technologies.

For a complete list of new and modified rules please see:

http://www.snort.org/vrt/docs/ruleset_changelogs/changes-2010-04-06.html
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (GNU/Linux)

iD8DBQFLu3YcQcQOxItLLaMRAqdIAKCPCt0/U8Q26qEO0ur1PVi2wv9ABwCgiB0Y
8L4jWTndZb2cazB345D1htg=
=irbw
-----END PGP SIGNATURE-----



------------------------------------------------------------------------------
Download Intel&#174; Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs

------------------------------------------------------------------------------
Download Intel&#174; Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs

Current thread: