[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: firestorm and snort rules ...



No patch,
I copied files *.rules snort to firestorm directory ...
I add/change in firestorm.rules :
var SMTP_SERVERS        $HOME_NET
var DNS_SERVERS          $HOME_NET
var TELNET_SERVERS   $HOME_NET
var AIM_SERVERS          $HOME_NET

I have many broken rules ... and commented them

I use snort 191b234 and firestorm snapshot25Mar2003.

Regard


Gianni Tedesco wrote:

> On Tue, 2003-04-01 at 14:20, rmkml wrote:
> > Hi All,
> >
> > Change "var SMTP" in firestorm.rules and snort-rules/*.rules
> > on "var SMTP_SERVERS" used by snort current rules ...
>
> A rules update is very much overdue, are you able to provide a patch to
> update them?
>
> --
> // Gianni Tedesco (gianni at scaramanga dot co dot uk)
> lynx --source www.scaramanga.co.uk/gianni-at-ecsc.asc | gpg --import
> 8646BE7D: 6D9F 2287 870E A2C9 8F60 3A3C 91B5 7669 8646 BE7D
>
>   ------------------------------------------------------------------------
>                        Name: signature.asc
>    signature.asc       Type: application/pgp-signature
>                 Description: This is a digitally signed message part