[Snort-sigs] Avoidance of 2183.5 (SMTP Content-Transfer-Encoding overflow attempt)

nnposter at ...592... nnposter at ...592...
Fri Jul 2 20:30:07 EDT 2004


From: "Brian" <bmc at ...95...>
> On Fri, Jul 02, 2004 at 06:00:00PM -0600, nnposter at ...592... wrote:
> > 
> > Rule:  SMTP Content-Transfer-Encoding overflow attempt
> > 
> 
> <snip lots of template data that is left blank>
> 
> You know, instead of sending tons of extra stuff, you could just send
> an email that says "rule X should have a nocase after content y
> because of z" and we'll get the picture.

I am sorry.

nnposter




More information about the Snort-sigs mailing list