Mark Powell said:
> Ooops. That rule should of course be:
>
> header FAKE_HELO_YAHOO
> eval:check_for_rdns_helo_mismatch("yahoo\.com","yahoo\.com")
> describe FAKE_HELO_YAHOO Host HELO did not match rDNS: yahoo.com
>
> BTW This is stock SA v2.63
Are you saying the stock rule is wrong?-- Luke Computer Science System Administrator Security Administrator,College of Engineering Montana State University-Bozeman,Montana
