""GPL CHAT IRC Channel join""

SID: 2101729

Revision: 11

Class Type: policy-violation

Metadata: created_at 2010_09_23, updated_at 2021_07_07

Reference:

Protocol: tcp

Source Network: $HOME_NET

Source Port: any

Destination Network: $EXTERNAL_NET

Destination Port: 6666:7000

Flow: to_server,established

Contents:

  • Value: "JOIN|20 3a 20 23|"

Within:

PCRE:

Special Options:

  • nocase

source