Cyber Risks · Cisco Talos

IMPORTANT Rule Download Change

Summary: The Snort Web Team changed how Snort rules are downloaded from snort.org, ending the "snortrules-snapshot-CURRENT" format that was discontinued in June 2010 in favor of releases tied to specific Snort versions. The new file naming requires a four-digit version, and Oinkmaster users must edit oinkmaster.conf to point at their installed version, with continued attempts to download outdated versions resulting in being banned.

What's compelling: Anyone still pulling the deprecated CURRENT or 2.8 rules through Oinkmaster will be banned for repeated attempts to download outdated versions, so an unedited oinkmaster.conf can silently cut off your rule updates.

Read the original at Cisco Talos ↗

Topics
Malware
Related