Snort mailing list archives
Blacklist Rule Error 22
From: Rameez Qureshi <rameez_q () hotmail co uk>
Date: Fri, 11 Apr 2014 23:35:30 +0100
Here it the problem Reputation config: WARNING: Can't find any whitelist/blacklist entries. Reputation Preprocessor disabled. +++++++++++++++++++++++++++++++++++++++++++++++++++ Initializing rule chains... ERROR: /usr/src/rules/blacklist.rules(22) Unknown ClassType: trojan-activity Fatal Error, Quitting. The actual rule inside the blacklist.rule file is as follows: alert udp $HOME_NET any -> any 53 (msg:"BLACKLIST DNS request for known malware domain datajunction.org - Gauss "; flow:to_server; byte_test:1,!&,0xF8,2; content:"|0C|datajunction|03|org|00|"; fast_pattern:only; metadata:impact_flag red, policy balanced-ips drop, policy security-ips drop, service dns; reference:url,gauss.crysys.hu/; reference:url,www.securelist.com/en/blog/208193767/Gauss_Nation_state_cyber_surveillance_meets_banking_Trojan; classtype:trojan-activity; sid:23802; rev:2;) Any help greatly appreciated! Thanks Rameez
------------------------------------------------------------------------------ Put Bad Developers to Shame Dominate Development with Jenkins Continuous Integration Continuously Automate Build, Test & Deployment Start a new project now. Try Jenkins in the cloud. http://p.sf.net/sfu/13600_Cloudbees
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- Blacklist Rule Error 22 Rameez Qureshi (Apr 11)
- Re: Blacklist Rule Error 22 waldo kitty (Apr 11)
- Re: Blacklist Rule Error 22 Rameez Qureshi (Apr 12)
- Re: Blacklist Rule Error 22 waldo kitty (Apr 12)
- Re: Blacklist Rule Error 22 Rameez Qureshi (Apr 13)
- Re: Blacklist Rule Error 22 waldo kitty (Apr 13)
- Re: Blacklist Rule Error 22 Rameez Qureshi (Apr 13)
- Re: Blacklist Rule Error 22 Rameez Qureshi (Apr 13)
- Re: Blacklist Rule Error 22 Joel Esler (jesler) (Apr 13)
- Re: Blacklist Rule Error 22 Rameez Qureshi (Apr 13)
- Re: Blacklist Rule Error 22 Rameez Qureshi (Apr 12)
- Re: Blacklist Rule Error 22 waldo kitty (Apr 13)
- Re: Blacklist Rule Error 22 waldo kitty (Apr 11)