[Snort-users] AOL Mail relay scanning rule

Avleen Vig avleen at ...396...
Thu May 3 11:31:07 EDT 2001


FYI, in case anyone wants to add this in.
It should let you know if / when AOL's mail relay checker goes through
your systems:

Alert tcp any any -> any 25 (msg:"AOL Mail Relay Checker";
content:"mailrelay%aol.net";)

--

Avleen Vig, Systems Administrator
Email: avleen at ...396...               Mobile: (07974) 100 573

Internet Vision                                Tel: 020 7589 4500
60 Albert Court                                Fax: 020 7589 4522
Prince Consort Road                            info at ...396...
London. SW7 2BE                         http://www.ivision.co.uk/





More information about the Snort-users mailing list