## tkooda : 2004-11-29 : sample sarulesupdate rules file ## ## - http://devsec.org/software/sarulesupdate/ ## ## - just uncomment the rules you'd like to use ## - don't use the same rule filename (col1) more than once ## - warning: rulesemporium.com currently has a limit on the ## number of downloads allowed per day ## ## ## - warning, these sa-blacklists can be quite large: ## #sa-blacklist.current http://www.stearns.org/sa-blacklist/sa-blacklist.current # William Stearn's sa-blacklist #sa-blacklist.current.uri.cf http://www.stearns.org/sa-blacklist/sa-blacklist.current.uri.cf # William Stearn's URI blacklist ## ## - see http://www.rulesemporium.com/rules.htm for more info: ## #70_sare_adult.cf http://www.rulesemporium.com/rules/70_sare_adult.cf #70_sare_bayes_poison_nxm.cf http://www.rulesemporium.com/rules/70_sare_bayes_poison_nxm.cf #70_sare_genlsubj.cf http://www.rulesemporium.com/rules/70_sare_genlsubj.cf #70_sare_genlsubj0.cf http://www.rulesemporium.com/rules/70_sare_genlsubj0.cf #70_sare_genlsubj1.cf http://www.rulesemporium.com/rules/70_sare_genlsubj1.cf #70_sare_genlsubj2.cf http://www.rulesemporium.com/rules/70_sare_genlsubj2.cf #70_sare_genlsubj3.cf http://www.rulesemporium.com/rules/70_sare_genlsubj3.cf #70_sare_genlsubj_arc.cf http://www.rulesemporium.com/rules/70_sare_genlsubj_arc.cf #70_sare_genlsubj_eng.cf http://www.rulesemporium.com/rules/70_sare_genlsubj_eng.cf #70_sare_genlsubj_x30.cf http://www.rulesemporium.com/rules/70_sare_genlsubj_x30.cf #70_sare_header.cf http://www.rulesemporium.com/rules/70_sare_header.cf #70_sare_header0.cf http://www.rulesemporium.com/rules/70_sare_header0.cf #70_sare_header1.cf http://www.rulesemporium.com/rules/70_sare_header1.cf #70_sare_header2.cf http://www.rulesemporium.com/rules/70_sare_header2.cf #70_sare_header3.cf http://www.rulesemporium.com/rules/70_sare_header3.cf #70_sare_header_arc.cf http://www.rulesemporium.com/rules/70_sare_header_arc.cf #70_sare_header_eng.cf http://www.rulesemporium.com/rules/70_sare_header_eng.cf #70_sare_header_x264_x30.cf http://www.rulesemporium.com/rules/70_sare_header_x264_x30.cf #70_sare_header_x30.cf http://www.rulesemporium.com/rules/70_sare_header_x30.cf #70_sare_highrisk.cf http://www.rulesemporium.com/rules/70_sare_highrisk.cf #70_sare_html.cf http://www.rulesemporium.com/rules/70_sare_html.cf #70_sare_html0.cf http://www.rulesemporium.com/rules/70_sare_html0.cf #70_sare_html1.cf http://www.rulesemporium.com/rules/70_sare_html1.cf #70_sare_html2.cf http://www.rulesemporium.com/rules/70_sare_html2.cf #70_sare_html3.cf http://www.rulesemporium.com/rules/70_sare_html3.cf #70_sare_html4.cf http://www.rulesemporium.com/rules/70_sare_html4.cf #70_sare_html_arc.cf http://www.rulesemporium.com/rules/70_sare_html_arc.cf #70_sare_html_eng.cf http://www.rulesemporium.com/rules/70_sare_html_eng.cf #70_sare_html_x30.cf http://www.rulesemporium.com/rules/70_sare_html_x30.cf #70_sare_oem.cf http://www.rulesemporium.com/rules/70_sare_oem.cf #70_sare_random.cf http://www.rulesemporium.com/rules/70_sare_random.cf #70_sare_specific.cf http://www.rulesemporium.com/rules/70_sare_specific.cf #70_sare_spoof.cf http://www.rulesemporium.com/rules/70_sare_spoof.cf #70_sare_unsub.cf http://www.rulesemporium.com/rules/70_sare_unsub.cf #70_sare_uri.cf http://www.rulesemporium.com/rules/70_sare_uri.cf #70_sc_top200.cf http://www.rulesemporium.com/rules/70_sc_top200.cf #71_sare_bml_pre25x.cf http://www.rulesemporium.com/rules/71_sare_bml_pre25x.cf #71_sare_redirect_pre3.0.0.cf http://www.rulesemporium.com/rules/71_sare_redirect_pre3.0.0.cf #72_sare_bml_post25x.cf http://www.rulesemporium.com/rules/72_sare_bml_post25x.cf #72_sare_redirect_post3.0.0.cf http://www.rulesemporium.com/rules/72_sare_redirect_post3.0.0.cf #99_sare_fraud_post25x.cf http://www.rulesemporium.com/rules/99_sare_fraud_post25x.cf #99_sare_fraud_pre25x.cf http://www.rulesemporium.com/rules/99_sare_fraud_pre25x.cf #bigevil.cf http://www.rulesemporium.com/rules/bigevil.cf #evilnumbers.cf http://www.rulesemporium.com/rules/evilnumbers.cf