[Snort-sigs] Avoidance of 2183.5 (SMTP Content-Transfer-Encoding overflow attempt)

Brian bmc at ...95...
Fri Jul 2 18:47:07 EDT 2004


On Fri, Jul 02, 2004 at 06:00:00PM -0600, nnposter at ...592... wrote:
> 
> Rule:  SMTP Content-Transfer-Encoding overflow attempt
> 

<snip lots of template data that is left blank>

You know, instead of sending tons of extra stuff, you could just send
an email that says "rule X should have a nocase after content y
because of z" and we'll get the picture.

Brian




More information about the Snort-sigs mailing list