[Snort-sigs] Porn Rules Priority

larosa, vjay larosa_vjay at ...375...
Wed Feb 4 21:02:06 EST 2004


Come on guy's, take a look at the classification for the porn rules,

config classification: kickass-porn,SCORE! Get the lotion!,1

Obviously the person(s) writing these rules did not have Intrusion Detection
on their minds, it was probably more like intrusion perversion :)

HAHA!!


vjl

-----Original Message-----
From: snort-sigs-admin at lists.sourceforge.net
[mailto:snort-sigs-admin at lists.sourceforge.net] On Behalf Of Kreimendahl,
Chad J
Sent: Wednesday, February 04, 2004 11:31 AM
To: Edin Dizdarevic; snort-sigs at lists.sourceforge.net
Subject: RE: [Snort-sigs] Porn Rules Priority

I'd agree... We actually set our class for those down to three the first
day we used them.

-----Original Message-----
From: Edin Dizdarevic [mailto:edin.dizdarevic at ...2020...] 
Sent: Wednesday, February 04, 2004 3:57 AM
To: snort-sigs at lists.sourceforge.net
Subject: [Snort-sigs] Porn Rules Priority


Hello everybody,

I was wondering why do the porn rules have the priority of 1?
For me priority one should only have possible system compromising
events, not false positives like Virginia -> virgin. Finally it
is almost always a simple policy violation and they have the
priority 3.

Any comments on that?

Regards,
Edin

-- 
Edin Dizdarevic


-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Snort-sigs mailing list
Snort-sigs at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs


-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Snort-sigs mailing list
Snort-sigs at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs




More information about the Snort-sigs mailing list