[Snort-sigs] Snort Community Rules Update

Sourcefire VRT research at ...435...
Thu Feb 23 11:27:04 EST 2006


Sourcefire would like to thank David Bianco, whose name was inaverdently 
omitted from the original announcement e-mail, for submitting this rule. 
As a reminder, anyone who wishes to submit rules may do so at 
http://www.snort.org/reg-bin/rulesubmit.cgi.

Alex Kirk
Community Rules Maintainer
Sourcefire, Inc.

> This message is to announce the availability of an update for the 
> Sourcefire community rule set, which can be downloaded free of cost or 
> registration from http://www.snort.org/pub-bin/downloads.cgi.
>
> The new rule in this release is identified as SID 100000237. This rule 
> detects attempts to bypass filtering proxies/content monitors via 
> Google's translation service, specifically by finding cases where the 
> "to" and "from" languages are the same.
>
> The new rule and its SID follows.
>
> Alex Kirk
> Community Rules Maintainer
> Sourcefire, Inc.
>
> 100000237 || COMMUNITY WEB-MISC Proxy Bypass Via Google Translation 
> Same To And From Language
>
>
> -------------------------------------------------------
> This SF.Net email is sponsored by xPML, a groundbreaking scripting 
> language
> that extends applications into web and mobile media. Attend the live 
> webcast
> and join the prime developer group breaking into this new coding 
> territory!
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
> _______________________________________________
> Snort-sigs mailing list
> Snort-sigs at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/snort-sigs






More information about the Snort-sigs mailing list