[Snort-sigs] Porn Rules Priority

Johnathan Norman jnorman at ...1256...
Thu Feb 5 23:46:01 EST 2004


While we are on the subject... ive noticed some porn rules are
classtype:kickass-porn..

what does sourcefire decide what porn kicks ass and what porn does not? :)
jh? brian? anyone?

Johnathan Norman, SCNA,CCSP,ISSP,GCIA
Network Security Analyst
Alert Logic, Inc.
Office: 713-484-8383

On Wed, 4 Feb 2004, Edin Dizdarevic wrote:

> Hello everybody,
>
> I was wondering why do the porn rules have the priority of 1?
> For me priority one should only have possible system compromising
> events, not false positives like Virginia -> virgin. Finally it
> is almost always a simple policy violation and they have the
> priority 3.
>
> Any comments on that?
>
> Regards,
> Edin
>
> --
> Edin Dizdarevic
>
>
> -------------------------------------------------------
> The SF.Net email is sponsored by EclipseCon 2004
> Premiere Conference on Open Tools Development and Integration
> See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
> http://www.eclipsecon.org/osdn
> _______________________________________________
> Snort-sigs mailing list
> Snort-sigs at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/snort-sigs
>




More information about the Snort-sigs mailing list