[Esd-l] RE: Detection rule for sendmail header exploit

John D. Hardin jhardin at impsec.org
Mon Mar 10 06:41:47 PST 2003

On Mon, 10 Mar 2003, Mike Loiterman wrote:

> Where are you keeping the most up to date version of this rule?  
> I can't seem to find it.  The one on the site is dated 3/5/03.  
> Is this the most recent?

The sample local-rules file.


The development snapshot is at:


All of the mirrors should have these files as well.

 John Hardin KA7OHZ    ICQ#15735746    http://www.impsec.org/~jhardin/
 jhardin at impsec.org                        pgpk -a jhardin at impsec.org
 key: 0xB8732E79 - 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
 ...voice or no voice, the people can always be brought to the bidding
 of the leaders. That is easy. All you have to do is tell them they
 are being attacked and denounce the pacifists for lack of patriotism
 and exposing the country to danger. It works the same way in any
                                            -- Hermann Goering
   73 days until The Matrix Reloaded

More information about the esd-l mailing list