pfsense snort suppress list
This is my current snort suppress list. The reason why they were added was because basic functionality was prevented and represents a compromise between security and usability. These suppress rules were added when I determined that they prevented legitimate use (email, ssh server access, etc). I may one of these days regret the chooses made. The last two additions were made because they limited functionality at jcpenny.com:
1:17232 FILE-IMAGE Microsoft Kodak Imaging large offset malformed tiff - big-endian
1:17232 FILE-IMAGE Microsoft Kodak Imaging large offset malformed tiff - big-endian
Without further ado, here is the list: