[Snort-sigs] porn rules

Michael casale MCasale at ...263...
Tue Mar 26 08:34:05 EST 2002

I will be out of the office Monday and Tuesday, March 25 and 26, returning Wednesday, March 27.

Please forward all critical IT issues to Sony Jacques, 212-908-4431, sjacques at ...263...

Michael Casale
System's Administrator
mcasale at ...263...

>>> "snort-sigs at lists.sourceforge.net" 03/26/02 11:12 >>>

"Kreimendahl, Chad J" <Chad.Kreimendahl at ...361...> writes:
> Should the flow on porn rules be 'to_server'?

No, they shoudln't.

> wouldn't the pr0n content be
> coming 'from_server' and is that really the same as 'to_client'?

Yes they should. 
Chris Green <cmg at ...435...>
This is my signature. There are many like it but this one is mine.

Snort-sigs mailing list
Snort-sigs at lists.sourceforge.net

More information about the Snort-sigs mailing list