[Snort-users] (no subject)
sectech at ...136...
Sat Jul 22 20:53:11 EDT 2000
Has anyone been able to get the resp: to work in snort, I`ve tried it on
numerous versions and have yet to get it to work..
example with the last one I tried it with, this is with snort 1.6.3
ERROR: smtp-lib (2) => Unknown keyword "resp" in rule!
alert tcp !$HOME_NET any -> $HOME_NET 25 (msg:"IDS032 -
SMTP-expn-decode";flags:PA; resp:rst_snd; content:"expn decode";)
More information about the Snort-users