[Snort-sigs] Crusoe Researches offer new rule for detecting FTP Apache mod_proxy_ftp EPSV reply DoS

rmkml rmkml at ...324...
Sat Oct 24 06:57:21 EDT 2009


Hi,

Crusoe Researches offering a new rule for detecting FTP Apache mod_proxy_ftp EPSV reply DoS (not detected by ftp preprocessor):
  http://www.Crusoe-Researches.com/en/ftpapachemodproxyftpepsvreplydos.txt
remember to adjust the src/dst ips/ports variables!

Credits:
Crusoe Researches
http://www.Crusoe-Researches.com
contact at ...3281...
=> Crusoe Researches have more than 4254 UNIQ 'snort' rules for Commercial Access
             (Contact me directly if you are interested)

Crusoe Researches support Bro idps v1.5.0.prerelease project format rules (http://www.bro-ids.org/):
  ftp analyzer detect incorrect ftp reply without modification! (FTP_BadPort)

Happy Detect
Regards
Rmkml
Crusoe-Researches.com




More information about the Snort-sigs mailing list