[Snort-sigs] Snort Community Rules Update
research at ...435...
Thu Feb 23 11:03:05 EST 2006
This message is to announce the availability of an update for the
Sourcefire community rule set, which can be downloaded free of cost or
registration from http://www.snort.org/pub-bin/downloads.cgi.
The new rule in this release is identified as SID 100000237. This rule
detects attempts to bypass filtering proxies/content monitors via
Google's translation service, specifically by finding cases where the
"to" and "from" languages are the same.
The new rule and its SID follows.
Community Rules Maintainer
100000237 || COMMUNITY WEB-MISC Proxy Bypass Via Google Translation Same
To And From Language
More information about the Snort-sigs