[Snort-users] SMTP Backscatter

waldo kitty wkitty42 at ...14940...
Sat Feb 15 19:48:18 EST 2014


On 2/15/2014 6:44 PM, Jason Haar wrote:
[...]
> Of course, you have probably decided your smtp environment can't do that
> and have turned to snort in desperation, but then my take on that would
> be that this should be a good justification for "re-evaluating" (ie
> ditching) your current smtp solution ;-)

+1

with a caveat... are we talking about sending or receiving this SMTP 
backscatter? if receiving, are we talking about backscatter responses aimed at 
valid email accounts? the solutions may be different for each... especially 
considering joejobs...

-- 
NOTE: No off-list assistance is given without prior approval.
       Please keep mailing list traffic on the list unless
       private contact is specifically requested and granted.




More information about the Snort-users mailing list