[7.911][BUG][FIXED] Possible bad IPS rule

I just happened to take a look at the IPS report for today on my V8 beta test box and saw something interesting.

Rule ID:  16460
Rule Description:  WEB-MISC text/html content-type without HTML - possible malware C&C
Rule Group:  Server / HTTP / Common
Packets:  412

The source IP's of these attacks are 64.191.223.35 and 64.191.223.36, which just so happen to be addresses for Commtouch. Due to this, I'm not sure if the AntiSpam reputation information is getting updated or not. Just thought I'd let somebody know.

Parents

0 Scott_Klassen over 15 years ago

I'll poke back in my logs a couple of days and get it to you kbr.

BTW, I thought today was a holiday in Germany and Astaro employees had the day off. kbr: slowly back away from the computer and go have fun for a day. [:)]
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 kbr over 15 years ago in reply to Scott_Klassen

kbr: slowly back away from the computer and go have fun for a day. [:)]

Fun is exactly the right term, because i'm currently reading Helle Barden (the english original is called Men at Arms), a novel by my favorite authorTerry Pratchett.
And yes, it's a real book (you know, the thing made out of dead trees). ;-)
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 BrucekConvergent over 15 years ago in reply to kbr

KBR, here's the case info (I was having problems with this rule back on April 15th; all of my customers were affected):

[Ticket#2010041510000427] CaseID 00120444
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Sascha Paris over 15 years ago in reply to BrucekConvergent

This rule also will be triggered by dropbox (File synchronization / sharing tool)
==> Dropbox - Home - Online backup, file sync and sharing made easy.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Reply

0 Sascha Paris over 15 years ago in reply to BrucekConvergent

This rule also will be triggered by dropbox (File synchronization / sharing tool)
==> Dropbox - Home - Online backup, file sync and sharing made easy.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Children

No Data