Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 8 replies
  • Subscribers 2 subscribers
  • Views 4517 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IPS blocking mail traffic Attempted User Privilege Gain

Aldi
Hello,

one problem with the ips Astaro System. It blocks mails from our customers. After 4 attempts the e-mail is delivered but with delay. The Logfile:

Any ideas what's going wrong?

2012:12:17-09:24:44 mail snort[5163]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="drop" reason="FILE-OFFICE Microsoft Office Excel pivot item index boundary corruption attempt" group="310" srcip="1.1.1.1" dstip="192.1.1.200" proto="6" srcport="57782" dstport="25" sid="23559" class="Attempted User Privilege Gain" priority="1"  generator="1" msgid="0"

the excel sheet ist ok... 

Thank you


This thread was automatically locked due to age.
Parents
  • 0
    It's very easy, Aldi,

    'Network Protection >> Intrusion Prevention' 'Advanced' tab, 'Manual rule modification'

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0
    It's very easy, Aldi,

    'Network Protection >> Intrusion Prevention' 'Advanced' tab, 'Manual rule modification'

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data
Cookie Information Banner