logo       

No HOME_NET In SMTP/FTPTELNET Preprocs: msg#00021

security.ids.snort.devel

Subject: No HOME_NET In SMTP/FTPTELNET Preprocs

One thing I've noticed is there doesn't seem to be a way to define a
HOME_NET (or SMTP_SERVERS or FTP/TELENET_SERVERS) in these two
preprocessors. Many of the benign triggers I am seeing are outbound
and it'd be nice to ignore those w/o having to use suppress.

Bammkkkk


--
sguil - The Analyst Console for NSM
http://sguil.sf.net

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642


<Prev in Thread] Current Thread [Next in Thread>
Google Custom Search

News | FAQ | advertise