Re: SMTP RCPT TO overflow
On Mon, Jul 22, 2002 at 18:11:48 +0100, Dale Amon <amon@vnl.com> wrote:
> Does anyone know what causes the snort warning about
>
> SMTP RCPT TO overflow
There has been recent talk about this siganture on snort-signatures
mailing list, actually.
> I presume it is not an actual attack because I've seen
> it happening between almost all of my mail systems, even
> isolated ones. I use exim of course. I would presume
> this is a false positive, but what tweaks it and is
> there a way to untweak it?
Take a look at:
http://marc.theaimsgroup.com/?w=2&r=1&s=SMTP+RCPT+TO+overflow&q=t
or more specifcally:
http://marc.theaimsgroup.com/?l=snort-sigs&m=102704170806018&w=2
--
"It's God. No, not Richard Stallman, or Linus Torvalds, but God."
(By Matt Welsh)
--
To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Reply to: