HOME_NET any -> $HOME_NET 1337 (flags: PA; content: “LOGIN ”; activates: 1; msg: “Backdoor Login Detected”;) ? When this rule is triggered, it activates any .