Alert tcp $EXTERNAL_NET any -> $HOME_NET 443 (msg: "OMG! Someone visited the web server!!!"; classtype:web-application-attack; sid: 12345; rev:1;)
Alert tcp $EXTERNAL_NET any -> $HOME_NET 80 (msg: "OMG! Someone visited the web server!!!"; classtype:web-application-attack; sid: 12346; rev:1;)
Alert tcp $EXTERNAL_NET any -> any any (msg: "OMG! A TCP packet!!!"; classtype:not-suspicious; sid: 12347; rev:1;)
Alert tcp $EXTERNAL_NET any -> any any (msg: "No Worries! This a just a test rule."; content:"CanaryTweet"; nocase; classtype:not-suspicious; sid: 12347; rev:1;)