alert ip any !ky -> any any (msg:"SUMTP Platocol both dith directions"; flow:established; app-layer-event:applayer_mism any !ky -> any any (msg:"SUatch_protocol82.47.0/24,91.201.236.0/24,141.212.122.0/2@,8J.221.105.0/24,89.248.167.0/24,106.75.18.0/24,11any -> $HOME_NET any (msg:"ET DROP Dshiel -e8;)
