Re: Rate limits on MD5s for snort rules

["Joel Esler \(jesler\) via Snort-users" <snort-users () lists snort org>]

Hello Francis,

First, we only publish rules two or three times a week (at most once a day for the community rules), and when we 
publish more than that, we make an announcement about it.

Second, once an hour is plenty sufficient.  The rule is if you make more than 7 requests in 5 minutes, you are blocked 
for a period of time.  

--
Joel Esler
Manager, Communities Division
Cisco Talos Intelligence Group
http://www.talosintelligence.com

> On Jul 11, 2019, at 9:57 AM, Francis Booth via Snort-users <snort-users () lists snort org> wrote:
>
> Hello all,
>
> Just reaching out as I wasn't sure what the consensus was on how often you could fetch the md5s for snort rules and 
> not fall into the abuse page.
>
> I'm aware that downloading of the rules is requested to be once in a given hour but didn't know if that was also the 
> case on MD5s checks as well.

Attachment: smime.p7s
Description:

_______________________________________________
Snort-users mailing list
Snort-users () lists snort org
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

        To unsubscribe, send an email to:
        snort-users-leave () lists snort org

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette