[Snort-sigs] web-frontpage.rules; web-iis.rules ordering issue
cmg at ...26...
Thu Jan 17 11:44:09 EST 2002
last line of frontpage
(msg:"WEB-FRONTPAGE /_vti_bin/ access";flags: A+; uricontent:"/_vti_bin/"; nocase; classtype:web-application-activity; sid:1288; rev:2;)
will set that off ( rightly so ) but I tend to think of that more as
Perhaps we should invert the rules ordering in snort.conf to
Chris Green <cmg at ...26...>
"I'm beginning to think that my router may be confused."
More information about the Snort-sigs