[Snort-users] Porn.rules dont work?

This is a discussion on [Snort-users] Porn.rules dont work? within the Snort forums, part of the System Security and Security Related category; I all, I'v look around and read multiples thread's about the porn.rules. I run a box with ...


Go Back   Usenet Forums > System Security and Security Related > Snort

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 07-12-2007
FRANCIS PROVENCHER
 
Posts: n/a
Default [Snort-users] Porn.rules dont work?

I all,

I'v look around and read multiples thread's about the porn.rules.

I run a box with snort ( Version 2.6.1.5 (Build 59) FreeBSD).

I uncomment it on the snort.conf =

....
include $RULE_PATH/nntp.rules
include $RULE_PATH/other-ids.rules
include $RULE_PATH/web-attacks.rules
include $RULE_PATH/backdoor.rules
include $RULE_PATH/shellcode.rules
include $RULE_PATH/policy.rules
include $RULE_PATH/porn.rules
.....

I look on the $RULE_PATH/ to see if the rules is here;

Porn.rules exist.

I browse the web via google with a proxy set to the port 8080, i search for=
upskirt, XXX, Free PORN and lot's of expression list on the rules but i ne=
ver received alert on my BASE Console.

I have to change something in the rule (like $HTTP_PORTS) to work?

Some one have an idea.





Francis Provencher
Minist=E8re de la S=E9curit=E9 publique du Qu=E9bec
Direction des technologies de l'information
Division de la s=E9curit=E9 informatique
T=E9l: 1 418 646-3258
Courriel: Francis.provencher@Msp.gouv.qc.ca
=

CEH - Certified Ethical Hackers
SSCP - System Security Certified Practitionner
Sec+ - Security +

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...=3Dsnort-users
Reply With Quote
Reply
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 01:28 AM.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0