[Snort-sigs] Netsky.c + others? attachment sid

John B. cybergolfing at ...144...
Wed Mar 3 12:43:02 EST 2004

Sorry for the confusion Hugo.
When I say Trusted_Smtp_Server, I don't mean that the
only thing it does is send _and_ receive email. Yes, I
have application servers that send email via SMTP but
never have a reason to receive email.  And, 9 chances
out of 10, they would not show up on a network scan
looking for port 25 open because SMTP is not static on

I consider those as trusted because I'm expecting
email from them. I'm not familiar with "hosting
networks" so I guess my view is somewhat

John B.

--- Hugo van der Kooij <hvdkooij at ...481...>
> On Wed, 3 Mar 2004, John B. wrote:
> > If normally sends logrotate emails to
> >, would it not then be a trusted SMTP
> > server also?
> Frankly? No. It will use SMTP to forward daily
> reports but it will not
> receive SMTP at all. This is a common setup in many
> hosting networks as
> well.
> Hugo.
> -- 
>  All email sent to me is bound to the rules
> described on my homepage.
>     hvdkooij at ...481...	
> http://hvdkooij.xs4all.nl/
> 	    Don't meddle in the affairs of sysadmins,
> 	    for they are subtle and quick to anger.
> SF.Net is sponsored by: Speed Start Your Linux Apps
> Now.
> Build and deploy apps & Web services for Linux with
> a free DVD software kit from IBM. Click Now!
> _______________________________________________
> Snort-sigs mailing list
> Snort-sigs at lists.sourceforge.net

Do you Yahoo!?
Yahoo! Search - Find what you’re looking for faster

More information about the Snort-sigs mailing list