Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi,I'm having an issue with a particular spam email. It never comes from the same domain, but always include a .gif file with a stock quote attached. I looked at the internet header to try and find something unique to base a custom signature. Here...
I'm getting hundreds of triggers on signature 5748 Non-SMTP Session Start. When I put a block host on this signature I stop getting e-mail. Should this be considered normal traffic.
Hi Everyone,I would like to create a signature to look for SMTP "command mail from:<>". Is this the right regex statement to look for this traffic?[Mm][Aa][Ii][Ll] [Ff][Rr][Oo][Mm][:][<>]
Hi,Today the signature was triggered 2698 times, from 349 hosts (90% public addesses). I am also seeing this triggered by local addresses, but I suppose the public one's are what I should be concerned with. As I stated before I did try and block ho...
Here are the commands I used to create the object groups: pdm group Baptist_outside outsideobject-group network Baptist_outsidedescription IP address for Baptist Health system Web and mainfrainnetwork-object 10.x.x.x 255.255.255.255network-object 10....
