[Snort-sigs] porn rules

Michael casale MCasale at ...263...
Tue Mar 26 08:34:05 EST 2002


I will be out of the office Monday and Tuesday, March 25 and 26, returning Wednesday, March 27.

Please forward all critical IT issues to Sony Jacques, 212-908-4431, sjacques at ...263...

Michael Casale
System's Administrator
MCM - NY
212-908-4352
mcasale at ...263...
http://www.e-mcm.com

>>> "snort-sigs at lists.sourceforge.net" 03/26/02 11:12 >>>

"Kreimendahl, Chad J" <Chad.Kreimendahl at ...361...> writes:
>
> Should the flow on porn rules be 'to_server'?

No, they shoudln't.

> wouldn't the pr0n content be
> coming 'from_server' and is that really the same as 'to_client'?

Yes they should. 
-- 
Chris Green <cmg at ...435...>
This is my signature. There are many like it but this one is mine.


_______________________________________________
Snort-sigs mailing list
Snort-sigs at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs





More information about the Snort-sigs mailing list