I show 3 posting (including this one) do you mean answered? I would
help you out but I suck at rule writing and I have never done any
flexresp rules. Are you compiled with flexresp support?
Patrick S. Harper | CISSP RHCT MCSE
Information Security Engineer
patrick.harper@phns.com
-----Original Message-----
From: Andrews Carl 448 [mailto:Carl.Andrews@crackerbarrel.com]
Sent: Friday, August 27, 2004 8:07 AM
To: Andrews Carl 448; 'snort-sigs@lists.sourceforge.net'
Subject: [Snort-sigs] RE: Snort Rule Howto
Why do my questions not get posted? I am a member of the list.
-----Original Message-----
From: Andrews Carl 448
Sent: Friday, August 20, 2004 12:30 PM
To: Andrews Carl 448; 'snort-sigs@lists.sourceforge.net'
Subject: RE: Snort Rule Howto
-----Original Message-----
From: Andrews Carl 448
Sent: Thursday, August 19, 2004 2:10 PM
To: snort-sigs@lists.sourceforge.net
Subject: Snort Rule Howto
Hi! If anyone can help, it would be much appreciated.
I need to write a rule(s) to block certain types of files from crossing
the network to/from a computer. For instance, I would like to use the
FLEXRESP option to terminate a connection if and EXE,DLL,ZIP, etc is
copied to or from this server. My goal is to setup a server for web
proxying that does not allow anything even remotely executable to pass
through it. I have searched and have not found any viable proxy server
software that does mime type filtering.
Thanks in advance,
Carl
Disclaimer:
This electronic message, including any attachments, is confidential and
intended solely for use of the intended recipient(s). This message may contain
information that is privileged or otherwise protected from disclosure by
applicable law. Any unauthorized disclosure, dissemination, use or reproduction
is strictly prohibited. If you have received this message in error, please
delete it and notify the sender immediately.
-------------------------------------------------------
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_idP47&alloc_id808&opÌk
_______________________________________________
Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
