[Snort-sigs] VIRUS_RULES

Matt Kettler mkettler at ...189...
Mon May 19 07:45:18 EDT 2003

At 10:26 AM 5/15/2003 -0400, Bill Leinauer wrote:
>What do I need to do to maintain the VIRUS_RULE?

# If you would like to MAINTAIN these rules, e-mail
# snort-sigs at lists.sourceforge.net

The mention of this list at the top of the virus.rules file is if you want 
to sign up as a developer to be responsible for writing new rules and 
maintaining the file.

It's not a "mail here to get updates".

So if you're interested in doing signature development, well, state that 
you're interested in being a maintainer.

Developers: It might be worth modding the top of virus.rules to say:

# If you would like to DEVELOP and MAINTAIN these rules, e-mail
# snort-sigs at ...1245...
# If you want updates to these rules, these rules are officially not being
# maintained, but updates will be in with the snort ruleset updates on
# the website when any updates are made.

Since to a sysadmin type "maintain" means "keep up to date", instead of the 
meaning that software types mean by it, "work as the primary software 
developer for".

More information about the Snort-sigs mailing list