[Snort-sigs] Snort Community Rules Update
research at ...435...
Thu Feb 23 11:27:04 EST 2006
Sourcefire would like to thank David Bianco, whose name was inaverdently
omitted from the original announcement e-mail, for submitting this rule.
As a reminder, anyone who wishes to submit rules may do so at
Community Rules Maintainer
> This message is to announce the availability of an update for the
> Sourcefire community rule set, which can be downloaded free of cost or
> registration from http://www.snort.org/pub-bin/downloads.cgi.
> The new rule in this release is identified as SID 100000237. This rule
> detects attempts to bypass filtering proxies/content monitors via
> Google's translation service, specifically by finding cases where the
> "to" and "from" languages are the same.
> The new rule and its SID follows.
> Alex Kirk
> Community Rules Maintainer
> Sourcefire, Inc.
> 100000237 || COMMUNITY WEB-MISC Proxy Bypass Via Google Translation
> Same To And From Language
> This SF.Net email is sponsored by xPML, a groundbreaking scripting
> that extends applications into web and mobile media. Attend the live
> and join the prime developer group breaking into this new coding
> Snort-sigs mailing list
> Snort-sigs at lists.sourceforge.net
More information about the Snort-sigs