This is a discussion on [Snort-users] Porn.rules dont work? within the Snort forums, part of the System Security and Security Related category; I all, I'v look around and read multiples thread's about the porn.rules. I run a box with ...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
|
|||
|
I all,
I'v look around and read multiples thread's about the porn.rules. I run a box with snort ( Version 2.6.1.5 (Build 59) FreeBSD). I uncomment it on the snort.conf = .... include $RULE_PATH/nntp.rules include $RULE_PATH/other-ids.rules include $RULE_PATH/web-attacks.rules include $RULE_PATH/backdoor.rules include $RULE_PATH/shellcode.rules include $RULE_PATH/policy.rules include $RULE_PATH/porn.rules ..... I look on the $RULE_PATH/ to see if the rules is here; Porn.rules exist. I browse the web via google with a proxy set to the port 8080, i search for= upskirt, XXX, Free PORN and lot's of expression list on the rules but i ne= ver received alert on my BASE Console. I have to change something in the rule (like $HTTP_PORTS) to work? Some one have an idea. Francis Provencher Minist=E8re de la S=E9curit=E9 publique du Qu=E9bec Direction des technologies de l'information Division de la s=E9curit=E9 informatique T=E9l: 1 418 646-3258 Courriel: Francis.provencher@Msp.gouv.qc.ca = CEH - Certified Ethical Hackers SSCP - System Security Certified Practitionner Sec+ - Security + ------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ _______________________________________________ Snort-users mailing list Snort-users@lists.sourceforge.net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/...fo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.p...=3Dsnort-users |