Re: [Snort-users] Please post a good Nachi.B Signature

On Sat, 21 Feb 2004, Dan wrote:

> If anyone has a confirmed working Nachi.B Snort signature, please post it.

I'd like to stress two things--One personal, one non-personal.

* For signatures, check the snort-sigs mailing list [0]. You can find a
rather good set of archives here [1].

* (personal, so no flames needed)--NEVER, EVER, EVER, EVER consider an
IDS as something to deal with/help with/mitigate a virus problem.
Firewalls, AV filters, Scanning, etc... That's the way to go. BUT!!!!
Yes, they are good to have for what you miss with the others. If you rely
on them as your only protection, then you're going to be stiffed--IMHO.

Cheers!

-----
Erek Adams

"It looks just like a Telefunken U-47. You'll love it..." -- Frank Zappa


[0] https://lists.sourceforge.net/mailma...nfo/snort-sigs
[1] http://marc.theaimsgroup.com/?l=snort-sigs&r=1&w=2


-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users