Rule History

alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET POLICY check.torproject.org IP lookup/Tor Usage check over HTTP"; flow:established,to_server; http.host; content:"check.torproject.org"; endswith; reference:md5,e87f0db605517e851d571af2e78c5966; classtype:external-ip-check; sid:2017927; rev:5; metadata:created_at 2014_01_04, confidence High, signature_severity Informational, updated_at 2020_10_08;)