Sophos naked security blog

Submitting the ruleset provided on their blog post.