Where to get Filter descriptions

2005-05-31 Thread mailsec2
Hi, where can i get an good decription for the common SA Filters like SARE_SUB_SION_OB1 ?? Thanx Peter

Re: Where to get Filter descriptions

2005-05-31 Thread Matt Kettler
At 08:07 AM 5/31/2005, [EMAIL PROTECTED] wrote: where can i get an good decription for the common SA Filters like SARE_SUB_SION_OB1 ?? Well, that's not a common SA filter, it's a SARE add-on rule. In general that should be in one of the SARE gensubj*.cf rulesets, but I can't find it. try:

Re: Where to get Filter descriptions

2005-05-31 Thread Loren Wilton
SA Filters like SARE_SUB_SION_OB1 ?? Well, that's not a common SA filter, it's a SARE add-on rule. In general that should be in one of the SARE gensubj*.cf rulesets, but I can't find it. Without looking, I would guess the obfu ruleset, probably checking for obfuscated forms of sion in the

Re: Where to get Filter descriptions

2005-05-31 Thread Robert Menschel
Hello mailsec2, Tuesday, May 31, 2005, 5:07:07 AM, you wrote: msc Hi, msc where can i get an good decription for the common msc SA Filters like SARE_SUB_SION_OB1 ?? SARE_SUB_SION_OB1 can't be a common SA filter, since a) it claims to be a SARE rule, b) I have a complete set of SARE rules, c)