On Mon, Jul 22, 2002 at 18:11:48 +0100, Dale Amon <[EMAIL PROTECTED]> wrote: > Does anyone know what causes the snort warning about > > SMTP RCPT TO overflow
There has been recent talk about this siganture on snort-signatures mailing list, actually. > I presume it is not an actual attack because I've seen > it happening between almost all of my mail systems, even > isolated ones. I use exim of course. I would presume > this is a false positive, but what tweaks it and is > there a way to untweak it? Take a look at: http://marc.theaimsgroup.com/?w=2&r=1&s=SMTP+RCPT+TO+overflow&q=t or more specifcally: http://marc.theaimsgroup.com/?l=snort-sigs&m=102704170806018&w=2 -- "It's God. No, not Richard Stallman, or Linus Torvalds, but God." (By Matt Welsh) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
