Re: Download rules

[Joel Esler <joel.esler () sourcefire com>]

I suggest you register with Snort.org (it's free), and then you can 
download the Certified Rules.

The first set of rules "subscription release", requires the purchase of 
a VRT license in order to get them the day they are released. 
Sourcefire VRT Certified Rules are the official rules of snort.org. Each 
rule has been rigorously tested against the same standards the VRT uses 
for Sourcefire customers.

After 5 days, the rules are available to download for non-subscription 
holders for free under the second option. (Note the date under the word 
"RELEASED").

The third set of rules are only updated when a major release of Snort is 
released.

The fourth set of rules the 'Community Set', contain rules submitted by 
members of the open source community. While these rules are available 
'as is', the VRT performs basic tests to ensure that new rules will not 
break Snort. These rules are distributed under the GPL and are freely 
available to all open source Snort users.

Joel

Aguiar Magalhaes wrote:
> List,
>
> I´ve installed 2.4 version on FreeBSD 6.0 and I'd like
> to know which ruleset is recommended... What is the
> best ?
>
> Sourcefire VRT Certified Rules (subscription release)
> ?
>
> Sourcefire VRT Certified Rules ?
>
> Sourcefire VRT Certified Rules (unregistered user
> release) ?
>
> Community Snort Rules ?
>
> Thanks,
>
> Aguiar
>
>
>                 
> _______________________________________________________ 
> Abra sua conta no Yahoo! Mail: 1GB de espaço, alertas de e-mail no celular e anti-spam realmente eficaz. 
> http://br.info.mail.yahoo.com/
>
>
> -------------------------------------------------------
> This SF.Net email is sponsored by xPML, a groundbreaking scripting language
> that extends applications into web and mobile media. Attend the live webcast
> and join the prime developer group breaking into this new coding territory!
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users



-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid0944&bid$1720&dat1642
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users