Crusoe Researches offer new rule for detecting FTP Apache mod_proxy_ftp EPSV reply DoS

[rmkml <rmkml () free fr>]

Hi,

Crusoe Researches offering a new rule for detecting FTP Apache mod_proxy_ftp EPSV reply DoS (not detected by ftp 
preprocessor):
  http://www.Crusoe-Researches.com/en/ftpapachemodproxyftpepsvreplydos.txt
remember to adjust the src/dst ips/ports variables!

Credits:
Crusoe Researches
http://www.Crusoe-Researches.com
contact () Crusoe-Researches com
=> Crusoe Researches have more than 4254 UNIQ 'snort' rules for Commercial Access
             (Contact me directly if you are interested)

Crusoe Researches support Bro idps v1.5.0.prerelease project format rules (http://www.bro-ids.org/):
  ftp analyzer detect incorrect ftp reply without modification! (FTP_BadPort)

Happy Detect
Regards
Rmkml
Crusoe-Researches.com

------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay 
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs