Rule for Sobig

[Timm Schneider <timm () mdmarkt de>]

Hi Folks,


i got an Mailserver(official) behind my Iptables+Snort FW.

I would like to filter the Sobig Worm on my Snort.
How should i do that?
Where i can find any rule for that?
I become in an hour about 50 Mails with sobig on my
Mailserver.

Thank's


Timm Schneider
-------------------
Musik-digital-Markt
Siegesstr.22a
80802 München
Voice: 089/ 51997011
Fax: 089/ 51997012
www.mdmarkt.de
HD-Recording
Netzwerktechnik
Studiotechnik
Unsere Mails werden mit Kaspersky AVP Virenscan geprüft.



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users