[Snort-users] I'd rather not get the message

matt mkettler at ...4108...
Mon Jun 3 09:17:08 EDT 2002

If you are referring to the message "Re: [Snort-users] portscsan.log 
summary." I'd agree, that attachment is perfectly valid. There is no 
suspicious extension, and no virus code present, no reason other than 
accidental misconfiguration or blatant "wrong headedness" to block the 

I personally suspect accidental misconfiguration (ie: a list of allowed and 
denied extensions that is buggy when there is no extension at all.) as I 
find it hard to believe any mail admin intentionally block text-formatted 
perl script attachments. There are a lot of wrong-headed sysadmins out 
there (ie myself) but I find that one more wrong-headed than I would belive.

At 09:28 PM 6/1/2002 -0600, Phil Wood wrote:
>I sent a perfectly valid message and attachment to the snort list in reply
>to a query for help.  Apparently, your software will not let this type of
>mail in.  So, it would seem to me you have two options:
>   1. unsubscribe from the snort-users at lists.sourceforge.net mailing list.
>   2. Don't bother sending us helpful folks messages we can do nothing about
>      and are completely, and utterley uninterested in.
>Thanks, but no thanks.
>Phil Wood, cpw at ...440...
>Don't miss the 2002 Sprint PCS Application Developer's Conference
>August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm
>Snort-users mailing list
>Snort-users at lists.sourceforge.net
>Go to this URL to change user options or unsubscribe:
>Snort-users list archive:

More information about the Snort-users mailing list