[Snort-devel] [ snort-Bugs-470002 ] SMTP relaying in policy rules

noreply at ...12... noreply at ...12...
Mon Oct 15 19:30:34 EDT 2001


Bugs item #470002, was opened at 2001-10-10 14:19
You can respond by visiting: 
http://sourceforge.net/tracker/?func=detail&atid=103357&aid=470002&group_id=3357

Category: None
Group: None
>Status: Closed
>Resolution: Fixed
Priority: 5
Submitted By: Nobody/Anonymous (nobody)
>Assigned to: Brian Caswell (cazz)
Summary: SMTP relaying in policy rules

Initial Comment:
The rule to catch denied mail relaying doesn't match
properly.  I created a rule where the traffic portion
is reversed along with the direction of the arrow, and
everything seems to work as expected.  So:
alert tcp $SMTP 25 -> $EXTERNAL_NET
works where:
alert tcp $EXTERNAL_NET any <- $SMTP 25
doesn't.

----------------------------------------------------------------------

You can respond by visiting: 
http://sourceforge.net/tracker/?func=detail&atid=103357&aid=470002&group_id=3357




More information about the Snort-devel mailing list