[Snort-sigs] Bleeding Snort updates and a new ruleset

The custom ruleset we enabled a week or so ago was orogonally just a 
grep of all rules that had been disabled by default. The idea was to 
give folks a way to easily look at everything that's disabled and decide 
if they want to use it themselves. There was a lot of interest there, 
and some new rules that do need that consideration. So we're turning it 
into a real ruleset. That's done now. You'll need to add to your snort.conf:

include $RULE_PATH/bleeding-custom.rules

Unless you're just running the full ruleset. These will all be disabled 
by default. You can view what's there now at
http://www.bleedingsnort.com/bleeding-custom.rules

We will be slowly moving more of the disabled rules there as we go. The 
goal being that every rule in other rulesets is active and safe to use 
by default. Anything that can't fit that criteria will move to the 
custom set where you'll have to take a look yourself.

You'll see a lot of junk in today's update, ignore most of it, that 
reflects the change here.

Feedback welcome as always.

Matt


-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now. 
http://productguide.itmanagersjournal.com/
_______________________________________________
Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs