|
No HOME_NET In SMTP/FTPTELNET Preprocs: msg#00021security.ids.snort.devel
One thing I've noticed is there doesn't seem to be a way to define a HOME_NET (or SMTP_SERVERS or FTP/TELENET_SERVERS) in these two preprocessors. Many of the benign triggers I am seeing are outbound and it'd be nice to ignore those w/o having to use suppress. Bammkkkk -- sguil - The Analyst Console for NSM http://sguil.sf.net ------------------------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 |
|
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| Previous by Date: | Re: FTP PrePreproc Alerts: 00021, Steven Sturges |
|---|---|
| Next by Date: | Re: No HOME_NET In SMTP/FTPTELNET Preprocs: 00021, Steven Sturges |
| Previous by Thread: | FTP PrePreproc Alertsi: 00021, Bamm Visscher |
| Next by Thread: | Re: No HOME_NET In SMTP/FTPTELNET Preprocs: 00021, Steven Sturges |
| Indexes: | [Date] [Thread] [Top] [All Lists] |
| News | FAQ | advertise |