Snort mailing list archives
Re: uricontent misbehaving?
From: Chuck Morford <cmorford () dot state nc us>
Date: Fri, 02 Nov 2001 16:34:55 -0500
On a positive note, my Norton A-V Gateway did not choke on your message... Tim Kramer wrote:
Then again, just having the word the r-word with the e-extension caused various people's mail servers to spit the message back at me. I guess the rule of thumb should be to write the filter to be large enough to be minimally functional without causing false alerts. There's a least 12 mail servers out there using a commercial anti-virus program that spit my last message back at me (and they should know better). Next thing you know, we'll not be able to send e-mail because someone wrote a virus that contains the word "the". - Tim _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Attachment:
cmorford.vcf
Description: Card for Chuck Morford
Current thread:
- uricontent misbehaving? dan . ellis (Nov 02)
- Re: uricontent misbehaving? Tim Kramer (Nov 02)
- Re: uricontent misbehaving? Tim Kramer (Nov 02)
- Re: uricontent misbehaving? Chuck Morford (Nov 02)
- Re: uricontent misbehaving? Martin Roesch (Nov 02)
- Re: uricontent misbehaving? Brian (Nov 06)
- <Possible follow-ups>
- Re: uricontent misbehaving? Daniel Carroll (Nov 02)