This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

[9.103] IPS blocks again Websites!

Hello BB,

Since version 9.103 IPS blocks again many Websites! 
For example:mcseboard.de; golem.de..

This pages cant be displayed... It will load and load and load.... Until i click the cancel button in my browser!

In the IPS Log i always found this error:

INDICATOR-OBFUSCATION Javascript indexOf rename attempt


What is this? I don't want exclude everything from IPS... [8-)]

Any ideas?


This thread was automatically locked due to age.
Parents
  • IPS Rule 26616 is now disabled and everything works fine!

    This rule was added to snort on 09-05-2013 - Snort :: Changes 2013-05-09

    In a completely different network with a ASG 220 v 9.103 the same problem exists!


    All I can say at this point is get support involved..

    Sent from my Galaxy Nexus using Astaro.org

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

Reply
  • IPS Rule 26616 is now disabled and everything works fine!

    This rule was added to snort on 09-05-2013 - Snort :: Changes 2013-05-09

    In a completely different network with a ASG 220 v 9.103 the same problem exists!


    All I can say at this point is get support involved..

    Sent from my Galaxy Nexus using Astaro.org

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

Children
No Data