[Snort-sigs] Sendmail Signature

Bennett Todd bet at ...654...
Fri Apr 4 05:44:16 EST 2003


On Fri, Apr 04, 2003 at 12:41:54AM -0800, linux snort wrote:
> Is Sendmail Signature is released? 

Here you go, hope this helps.

alert tcp $EXTERNAL_NET any -> $HOME_NET any (msg:"He said sendmail!";
	content:"sendmail"; nocase; flow:to_client,established;
	classtype:kickass-porn; sid:1000666; rev:1;)

-Bennett




More information about the Snort-sigs mailing list