diff options
| author | robiscool <robrob2626@yahoo.com> | 2010-04-29 11:56:05 -0700 |
|---|---|---|
| committer | robiscool <robrob2626@yahoo.com> | 2010-04-29 11:56:44 -0700 |
| commit | 893ca7808324f0b3fc25f9d0261d713828455e92 (patch) | |
| tree | 277a2c91917b8dbcecd0c445b4c42d7c1bbd2875 /config/snort/snort.inc | |
| parent | d7b891f2d9351dbb961b94ff758ad6a1bc000b4b (diff) | |
| download | pfsense-packages-893ca7808324f0b3fc25f9d0261d713828455e92.tar.gz pfsense-packages-893ca7808324f0b3fc25f9d0261d713828455e92.tar.bz2 pfsense-packages-893ca7808324f0b3fc25f9d0261d713828455e92.zip | |
snort, update download rules for ne version of snort, new version
Diffstat (limited to 'config/snort/snort.inc')
| -rw-r--r-- | config/snort/snort.inc | 18 |
1 files changed, 17 insertions, 1 deletions
diff --git a/config/snort/snort.inc b/config/snort/snort.inc index ea5554cc..e03ec5d6 100644 --- a/config/snort/snort.inc +++ b/config/snort/snort.inc @@ -1033,6 +1033,13 @@ function sync_snort_package_empty() { global $config, $g; conf_mount_rw(); + +/* RedDevil suggested code */ +/* TODO: more testing needs to be done */ +exec("/sbin/sysctl net.bpf.bufsize=8388608"); +exec("/sbin/sysctl net.bpf.maxbufsize=4194304"); +exec("/sbin/sysctl net.bpf.maxinsns=512"); +exec("/sbin/sysctl net.inet.tcp.rfc1323=1"); /* do not start config build if rules is empty */ if (!empty($config['installedpackages']['snortglobal']['rule'])) @@ -1096,6 +1103,13 @@ function sync_snort_package_config() { global $config, $g; conf_mount_rw(); + +/* RedDevil suggested code */ +/* TODO: more testing needs to be done */ +exec("/sbin/sysctl net.bpf.bufsize=8388608"); +exec("/sbin/sysctl net.bpf.maxbufsize=4194304"); +exec("/sbin/sysctl net.bpf.maxinsns=512"); +exec("/sbin/sysctl net.inet.tcp.rfc1323=1"); /* do not start config build if rules is empty */ if (!empty($config['installedpackages']['snortglobal']['rule'])) @@ -1749,7 +1763,9 @@ snort_rules_up_deinstall_cron(""); /* Unset snort registers in conf.xml IMPORTANT snort will not start with out this */ /* Keep this as a last step */ - unset($config['installedpackages']['snortglobal']); + if($config['installedpackages']['snortglobal']['forcekeepsettings'] != 'on') { + unset($config['installedpackages']['snortglobal']); + } write_config(); conf_mount_rw(); |