Hi All, Change "var SMTP" in firestorm.rules and snort-rules/*.rules on "var SMTP_SERVERS" used by snort current rules ... I use firestorm snapshort 053pre and snort 191b234 Regard.