[Snort-users] uricontent misbehaving?

Chuck Morford cmorford at ...3733...
Fri Nov 2 13:36:03 EST 2001

On a positive note, my Norton A-V Gateway did not choke on your

Tim Kramer wrote:

> Then again, just having the word the r-word with the
> e-extension caused various people's mail servers to
> spit the message back at me.  I guess the rule of
> thumb should be to write the filter to be large
> enough to be minimally functional without causing
> false alerts.  There's a least 12 mail servers out
> there using a commercial anti-virus program that
> spit my last message back at me (and they should
> know better).  Next thing you know, we'll not be
> able to send e-mail because someone wrote a virus
> that contains the word "the".
> - Tim
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
-------------- next part --------------
A non-text attachment was scrubbed...
Name: cmorford.vcf
Type: text/x-vcard
Size: 366 bytes
Desc: Card for Chuck Morford
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20011102/a581f79e/attachment.vcf>

More information about the Snort-users mailing list