Snort mailing list archives

RE: I'd rather not get the message


From: "Jeff Anderson" <janderso () pgsavings bc ca>
Date: Mon, 3 Jun 2002 10:31:53 -0700

Sorry Phil,

I've got a mail gateway that notifies users when their messages get blocked,
usually for obscene content, executable attachments, etc.  It was
misconfigured and started sending out notifications to senders of mail
coming in.  My goof.  Looks like it picked up on your attachment, scan-msgs,
because there was no file extension.  Anyway, there should be no more
notifications sent out.  Again, I apologize for the misconfiguration and
wasting your time,

I'll pick option 2, thanks

Jeff Anderson
Computer Services Manager
===================================================
"Don't worry about people stealing your ideas. If your ideas are any good,
you'll have to ram them down people's throats."
                        -- Howard Aiken

-----Original Message-----
From: matt [mailto:mkettler () evi-inc com]
Sent: June 3, 2002 9:19 AM
To: Phil Wood; snort () pgsavings bc ca
Cc: snort-users () lists sourceforge net
Subject: Re: [Snort-users] I'd rather not get the message


If you are referring to the message "Re: [Snort-users] portscsan.log 
summary." I'd agree, that attachment is perfectly valid. There is no 
suspicious extension, and no virus code present, no reason other than 
accidental misconfiguration or blatant "wrong headedness" to block the 
attachment.

I personally suspect accidental misconfiguration (ie: a list of allowed and 
denied extensions that is buggy when there is no extension at all.) as I 
find it hard to believe any mail admin intentionally block text-formatted 
perl script attachments. There are a lot of wrong-headed sysadmins out 
there (ie myself) but I find that one more wrong-headed than I would belive.


At 09:28 PM 6/1/2002 -0600, Phil Wood wrote:
I sent a perfectly valid message and attachment to the snort list in reply
to a query for help.  Apparently, your software will not let this type of
mail in.  So, it would seem to me you have two options:

  1. unsubscribe from the snort-users () lists sourceforge net mailing list.

  2. Don't bother sending us helpful folks messages we can do nothing
about
     and are completely, and utterley uninterested in.

Thanks, but no thanks.

--
Phil Wood, cpw () lanl gov


_______________________________________________________________

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


_______________________________________________________________

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users




Current thread: