Snort.org home  
Got Source? About Snort About Sourcefire Snort FAQ
Sourcefire Network Security - the creators of Snort
Snort News Downloads Snort Docs Rules Snort Community Snort Forums Snort Training
Search Site
Search Rules
Account
email
password
not registered?
user preferences

Snort Forums Archive

Archive Home » Snort Advanced » Can Snort detect email proxy abuse?

Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.

[ Notice: Full Version of This Topic ]

Can Snort detect email proxy abuse?


Posted by doubleohh7 on July 13, 2005 21:11:27

I successfully have snort monitoring a 100mbit backbone connection (hanging off of a port mirror) and I cannot find any rule examples for detecting email proxy abuse activity. Does anybody have any suggestions as I am desperate for a way to proactively find and disable such activity. Many, many, many thanks.

Posted by chris on July 14, 2005 02:42:48

Hi, have a look at bleedingsnort, or turbosnort, you might be able to find some rules there..
Cheers
Chris
site feedback | Terms of Use | Privacy Policy | forum archives ©2008 Snort and Sourcefire are registered trademarks of Sourcefire, Inc. All rights reserved.