Leonardo Rodrigues Magalhães wrote: > > i would like to give some score for messages that came from IP > addresses that does not have the reverse correctly configured. I have > seen a lot of IPs that have some reverse name, but that name does not > point back to the IP address. > > is it possible to score no reverse at all and/or no complete > reverse in SA rules ? > I could be mistaken, but I think the botnet add-on plugin does this kind of thing... (among others)
- question on reverse DNS Leonardo Rodrigues Magalhães
- Sa rule broken, fix with bugzilla id575... Michael Scheidell
- Re: Sa rule broken, fix with bugzil... Leonardo Rodrigues Magalhães
- Re: question on reverse DNS Matt Kettler
- Re: question on reverse DNS Leonardo Rodrigues Magalhães
- Re: question on reverse DNS Bob Proulx