[Snort-users] SMTP Backscatter

Jason Haar Jason_Haar at ...15306...
Sat Feb 15 18:44:22 EST 2014

Hi Dave

You really need to look to your mail server for such protection. It
requires application and environment-specific knowledge, and mail
systems should be inherently more capable of dealing with this than a
"mere" NIDS

Of course, you have probably decided your smtp environment can't do that
and have turned to snort in desperation, but then my take on that would
be that this should be a good justification for "re-evaluating" (ie
ditching) your current smtp solution ;-)


Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +1 408 481 8171
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1

More information about the Snort-users mailing list