Generated by : ../snort_rule_urlchecker version Thu Dec 1 22:06:24 PST 2005

Which may be found at http://www.grotto-group.com/~gulfie/projects... maybe


./snortrules-COMM-2.4/rules/community-inappropriate.rules Fri Dec 2 01:23:23 2005
Filename : line Rules
./snortrules-COMM-2.4/rules/community-inappropriate.rules : 1 # Copyright 2005 Sourcefire, Inc. All Rights Reserved.
./snortrules-COMM-2.4/rules/community-inappropriate.rules : 2 # These rules are licensed under the GNU General Public License.
./snortrules-COMM-2.4/rules/community-inappropriate.rules : 3 # Please see the file LICENSE in this directory for more details.
./snortrules-COMM-2.4/rules/community-inappropriate.rules : 4 # $Id: community-inappropriate.rules,v 1.8 2005/04/01 17:16:23 akirk Exp $
./snortrules-COMM-2.4/rules/community-inappropriate.rules : 5
./snortrules-COMM-2.4/rules/community-inappropriate.rules : 6 alert tcp $EXTERNAL_NET $HTTP_PORTS -> $HOME_NET any (msg:"COMMUNITY INAPPROPRIATE lolita sex"; content:"lolita"; nocase; content:"sex"; nocase; flow:to_client,established; classtype:kickass-porn; sid:100000105; rev:1;)
./snortrules-COMM-2.4/rules/community-inappropriate.rules : 7 alert tcp $EXTERNAL_NET $HTTP_PORTS -> $HOME_NET any (msg:"COMMUNITY INAPPROPRIATE preteen sex"; content:"teen"; nocase; pcre:"/pre-?teen/i"; flow:to_client,established; classtype:kickass-porn; sid:100000123; rev:1;)
./snortrules-COMM-2.4/rules/community-inappropriate.rules : 8 alert tcp $EXTERNAL_NET $HTTP_PORTS -> $HOME_NET any (msg:"COMMUNITY INAPPROPRIATE girls gone wild"; content:"girls"; nocase; content:"gone"; nocase; content:"wild"; nocase; flow:to_client,established; classtype:kickass-porn; sid:100000124; rev:1;)