alert tcp $HOME_NET any -> any !$HTTP_PORTS (msg:"ET DELETED Anonymous Proxy Traffic from Inside"; flow:from_client,established; flags:*AP,12; content:"GET http|3a|//"; depth:11; content:"HTTP/1.0"; within:50; classtype:policy-violation; sid:2003069; rev:4; metadata:created_at 2010_07_30, signature_severity Unknown, updated_at 2019_07_26;)