<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-2">
<META content="MSHTML 5.50.4134.600" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>Zdravim, panstvo,</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>pred par dnami som spustil snort a o par hodin som
mal v /var/log/snort radovo desiatky IP adries (teda adresarov) s udajnymi
atakmi. Pri blizsom pohlade su to obycajne pripojenia mailovych serverov,
napriklad aj lists.linux.sk (147.175.66.133), s obycajnymi mailami.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>V /etc/snort/smtp.rules je to hned prve pravidlo,
podla references je to akysi pokus o ziskanie roota na LotusNotes mail serveri.
Kedze tento soft mi tam nebezi, uvazujem o zakomentovani toho pravidla.
</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Chcem sa spytat skusenejsich, ci je zakomentovanie
takychto pravidiel to spravne riesenie tohto problemu.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Prijemny den.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Miro Cabarka</FONT></DIV>
<DIV><FONT face=Arial size=2>ARKA, a.s.</FONT></DIV></BODY></HTML>