Snort mailing list archives
Re: Sourcefire VRT Certified Snort Rules Update 2010-04-06
From: L0rd Ch0de1m0rt <l0rdch0de1m0rt () gmail com>
Date: Tue, 6 Apr 2010 15:21:29 -0400
Hello, after applying the latest VRT ruleset I seem to be blocking about 50% of e-mail traffic and it doesn't look like it is due to spam. I think there could be something wrong with it ... does anybody know what is going on? The heat is really getting turned up on me as they think this is my fault so hopefully we can identify the cause soon. Cheers, -L0rd Ch0de1m0rt On Tue, Apr 6, 2010 at 12:57 PM, Research <research () sourcefire com> wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Sourcefire VRT Certified Snort Rules Update Synopsis: This release adds and modifies rules in several categories. Details: As a result of ongoing research, the Sourcefire VRT has added multiple rules to the web-client, oracle, smtp, chat and sql rule sets to provide coverage for emerging threats from these technologies. For a complete list of new and modified rules please see: http://www.snort.org/vrt/docs/ruleset_changelogs/changes-2010-04-06.html -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.6 (GNU/Linux) iD8DBQFLu3YcQcQOxItLLaMRAqdIAKCPCt0/U8Q26qEO0ur1PVi2wv9ABwCgiB0Y 8L4jWTndZb2cazB345D1htg= =irbw -----END PGP SIGNATURE----- ------------------------------------------------------------------------------ Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev _______________________________________________ Snort-sigs mailing list Snort-sigs () lists sourceforge net https://lists.sourceforge.net/lists/listinfo/snort-sigs
------------------------------------------------------------------------------ Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev
_______________________________________________ Snort-sigs mailing list Snort-sigs () lists sourceforge net https://lists.sourceforge.net/lists/listinfo/snort-sigs
Current thread:
- Sourcefire VRT Certified Snort Rules Update 2010-04-06 Research (Apr 06)
- Re: Sourcefire VRT Certified Snort Rules Update 2010-04-06 L0rd Ch0de1m0rt (Apr 06)
- Re: Sourcefire VRT Certified Snort Rules Update 2010-04-06 Eoin Miller (Apr 06)
- Re: Sourcefire VRT Certified Snort Rules Update 2010-04-06 L0rd Ch0de1m0rt (Apr 06)
