FWD: Re: [Snort-users] Snort complains about rules file

Joe Magee lists at ...297...
Mon Apr 2 14:54:44 EDT 2001


I have the snort.conf that comes with the 1.7 package... I didn't change anything... hmmmm... 

I'm plagued by old rules... help! ; >

People are trying to dot dot me and cross-site-script me.. I can feel it... ; >

---------- Original Message ----------------------------------
From: Joe McAlerney <joey at ...155...>
Date: Mon, 02 Apr 2001 10:52:31 -0700

>lists wrote:
>> 
>> I'm also having this problem with the new rulesets... I have my EXTERNAL_NET defined in snort.conf as:
>> 
>> var EXTERNAL_NET any
>> 
>> This is no good with the new rules?
>> 
>> Joe
>
>Joe,
>
>There were a few other variables added to the recent snort.conf file
>(SMTP, SQL_SERVERS).  My guess is that you are using an older snort.conf
>with new snort rulesets.  You may want to check to see if those
>variables are defined.
>
>Hope this helps,
>
>-Joe M.
>
>-- 
>|   Joe McAlerney     joey at ...155...   |
>| Silicon Defense - Technical Support for Snort |
>|       http://www.silicondefense.com/          |
>+--                                           --+
>





More information about the Snort-users mailing list