Back to Rule

Rule History

SID: 2012141 • Source: et/open

Versions (3)

Version DetailsCurrent

Rev: 2Jan 5, 2011, 12:00 PM

ET POLICY Protocol 41 IPv6 encapsulation potential 6in4 IPv6 tunnel active

alert ip $HOME_NET any -> $EXTERNAL_NET any (msg:"ET POLICY Protocol 41 IPv6 encapsulation potential 6in4 IPv6 tunnel active"; ip_proto:41; threshold:type both,track by_dst, count 1, seconds 60; reference:url,en.wikipedia.org/wiki/6in4; classtype:policy-violation; sid:2012141; rev:2; metadata:created_at 2011_01_05, confidence High, signature_severity Informational, updated_at 2019_07_26;)

Jan 5, 2011, 12:00 PM

Jul 26, 2019, 12:00 PM

Sep 21, 2024, 3:00 AM

May 30, 2025, 12:04 AM

rules/emerging-policy.rules