Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security ISSForum
[Top] [All Lists]

Re: [ISSForum] ISSForum Digest, Vol 28, Issue 9

Subject: Re: [ISSForum] ISSForum Digest, Vol 28, Issue 9
Date: Mon, 22 May 2006 16:06:59 -0400
My proventia-G appliance has started blocking HTML attachments. Has anybody
seen this behavior?



-----Original Message-----
From: issforum-bounces@iss.net [mailto:issforum-bounces@iss.net] On Behalf
Of issforum-request@iss.net
Sent: Wednesday, May 17, 2006 12:00 PM
To: issforum@iss.net
Subject: ISSForum Digest, Vol 28, Issue 9

Send ISSForum mailing list submissions to
        issforum@iss.net

To subscribe or unsubscribe via the World Wide Web, visit
        https://atla-mm1.iss.net/mailman/listinfo/issforum
or, via email, send a message with subject or body 'help' to
        issforum-request@iss.net

You can reach the person managing the list at
        issforum-owner@iss.net

When replying, please edit your Subject line so it is more specific
than "Re: Contents of ISSForum digest..."


Today's Topics:

   1. Pam.tcpprobe.issueID.portN filter (Soldatov, Sergey V.)


----------------------------------------------------------------------

Message: 1
Date: Tue, 16 May 2006 18:08:07 +0400
From: "Soldatov, Sergey V." <SVSoldatov@tnk-bp.com>
Subject: [ISSForum] Pam.tcpprobe.issueID.portN filter
To: <issforum@iss.net>
Message-ID: <ATLMAIEXCP07n5VSSFc000482fb@atlmaiexcp07.iss.local>
Content-Type: text/plain;       charset="us-ascii"

Hi,
Does anybody know if it's possible to create event filters for
user-defined TCP_Probe_* signatures?
I have a lot of signatures created by pam.tcpprobe.<issueID>.<portN>
param. Is event filter configured for that signatures working? Now I'm
not sure, because sometimes it seems that filters are working and
sometimes not.

Thanks.

---
Best regards, Sergey V. Soldatov.
Information security department.




------------------------------

_______________________________________________
ISSForum mailing list
ISSForum@iss.net

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to
https://atla-mm1.iss.net/mailman/listinfo/issforum

TO CONTACT THE ISSForum MODERATOR, send email to mod-issforum@iss.net

The ISSForum mailing list is hosted and managed by Internet Security
Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.

End of ISSForum Digest, Vol 28, Issue 9
***************************************

_______________________________________________
ISSForum mailing list
ISSForum@iss.net

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to 
https://atla-mm1.iss.net/mailman/listinfo/issforum

To contact the ISSForum Moderator, send email to mod-issforum@iss.net

The ISSForum mailing list is hosted and managed by Internet Security Systems, 
6303 Barfield Road, Atlanta, Georgia, USA 30328.

<Prev in Thread] Current Thread [Next in Thread>