Forum Discussion
Hurting eyes, could someone check this?
Hey all,
Running 9.0.5, I have these rules in place:
rule cyclone_ftp_hhtp_request {
when HTTP_REQUEST {
if { [HTTP::uri] contains "ftp" } {
node 192.168.250.144...
JRahm
Admin
Adminthat will work on the clientside events, and it might work on serverside events, depending on whether you are using standard ports or not
