No subject


Thu Nov 23 16:36:19 EST 2017


09:57:24 snort1 snort: FATAL ERROR: ERROR /usr/local/snort/dos.rules (22)
=> Invalid port: [80,443]



These rules only apply the first instance:

alert tcp $EXTERNAL_NET !80 -> $HOME_NET 3372 (msg:"DOS MSDTC attempt";
flags:A+; dsize:>1023; reference:bugtraq,4006; classtype:attempted-dos;
sid:1408; rev:2;)
alert tcp $EXTERNAL_NET !443 -> $HOME_NET 3372 (msg:"DOS MSDTC attempt";
flags:A+; dsize:>1023; reference:bugtraq,4006; classtype:attempted-dos;
sid:1408; rev:2;)


Alan Kloster
alan_kloster at ...5725...





More information about the Snort-users mailing list