Snort.org home  
Got Source? About Snort About Sourcefire Snort FAQ
Sourcefire Network Security - the creators of Snort

Snort Forums Archive

Archive Home » Rules » Rule reporting pages broken

Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.

[ Notice: Full Version of This Topic ]

Rule reporting pages broken


Posted by gbobeck on April 11, 2005 01:14:49

I realize that this is a general n00b type of question...

I wish to report a false positive for a rule, however the link provided ( http://www.snort.org/snort-db/help.html ) for reporting false positives/negatives is broken. Is there a corrected link for reporting this?

B.T.W. rules 884 and 1610 (WEB-CGI formmail access and WEB-CGI formmail arbitrary command execution attempt) throw false positives if you are running Zope and Plone (read: you are running a Plone site on your server) and a user of the Plone site logs into the site.