[Snort-sigs] Sourcefire VRT Certified Snort Rules Update 2010-04-06

L0rd Ch0de1m0rt l0rdch0de1m0rt at ...2420...
Tue Apr 6 15:21:29 EDT 2010

Hello, after applying the latest VRT ruleset I seem to be blocking about 50%
of e-mail traffic and it doesn't look like it is due to spam.  I think there
could be something wrong with it ... does anybody know what is going on?
The heat is really getting turned up on me as they think this is my fault so
hopefully we can identify the cause soon.


-L0rd Ch0de1m0rt

On Tue, Apr 6, 2010 at 12:57 PM, Research <research at ...435...> wrote:

> Hash: SHA1
> Sourcefire VRT Certified Snort Rules Update
> Synopsis:
> This release adds and modifies rules in several categories.
> Details:
> As a result of ongoing research, the Sourcefire VRT has added multiple
> rules to the web-client, oracle, smtp, chat and sql rule sets to
> provide coverage for emerging threats from these technologies.
> For a complete list of new and modified rules please see:
> http://www.snort.org/vrt/docs/ruleset_changelogs/changes-2010-04-06.html
> Version: GnuPG v1.2.6 (GNU/Linux)
> iD8DBQFLu3YcQcQOxItLLaMRAqdIAKCPCt0/U8Q26qEO0ur1PVi2wv9ABwCgiB0Y
> 8L4jWTndZb2cazB345D1htg=
> =irbw
> ------------------------------------------------------------------------------
> Download Intel® Parallel Studio Eval
> Try the new software tools for yourself. Speed compiling, find bugs
> proactively, and fine-tune applications for parallel performance.
> See why Intel Parallel Studio got high marks during beta.
> http://p.sf.net/sfu/intel-sw-dev
> _______________________________________________
> Snort-sigs mailing list
> Snort-sigs at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/snort-sigs
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20100406/551aa4c4/attachment.html>

More information about the Snort-sigs mailing list