alert tcp $EXTERNAL_NET any -> $HOME_NET $SMTP_PORT (msg:"[SENDMAIL] Rejected by access list"; pcre: "/reject=550 5.0.0|reject=553 5.3.0/"; classtype: suspicious-traffic; program: sm-mta|sendmail; reference: url,wiki.quadrantsec.com/bin/view/Main/5000137; sid: 5000137; rev:2;)
-- Main.Sagan-Wiki-Add - 2015-10-21
New revisions of 5000137 will be below...