This ruleset takes a daily list of known spammers and spam networks as researched by Spamhaus and converts them into Snort signatures, Bro Signatures, and Firewall rules.
Source is
http://www.spamhaus.org/drop/index.lasso
Rules are available here:
Spamhaus.org DROP List (SpamHausDROPList)
Sid Range info:
2400000-2400999 SpamHaus? DROP List — Updated Daily
2401000-2401999 SpamHaus? DROP List with fwsam Drop Statements– Updated Daily
Firewall Ruleshttp://www.emergingthreats.net/fwrules
-- MattJonkman - 26 Jun 2008