diff options
| author | Ermal <eri@pfsense.org> | 2013-01-26 21:28:43 +0100 |
|---|---|---|
| committer | Ermal <eri@pfsense.org> | 2013-01-26 21:28:43 +0100 |
| commit | 159f7aa6503168db8f0f8541312e55e1f67a8ee6 (patch) | |
| tree | 903dcc9584ca82f8915536e18ed20d50bca21d1b /config/snort/snort_preprocessors.php | |
| parent | 995657bce91f35bf11beda71c224aa9afb2db9fe (diff) | |
| download | pfsense-packages-159f7aa6503168db8f0f8541312e55e1f67a8ee6.tar.gz pfsense-packages-159f7aa6503168db8f0f8541312e55e1f67a8ee6.tar.bz2 pfsense-packages-159f7aa6503168db8f0f8541312e55e1f67a8ee6.zip | |
Include sip preprocessor which is needed for VRT policy secure
Diffstat (limited to 'config/snort/snort_preprocessors.php')
| -rwxr-xr-x | config/snort/snort_preprocessors.php | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/config/snort/snort_preprocessors.php b/config/snort/snort_preprocessors.php index 25e176cb..916fd413 100755 --- a/config/snort/snort_preprocessors.php +++ b/config/snort/snort_preprocessors.php @@ -72,6 +72,7 @@ if (isset($id) && $a_nat[$id]) { $pconfig['ssl_preproc'] = $a_nat[$id]['ssl_preproc']; $pconfig['pop_preproc'] = $a_nat[$id]['pop_preproc']; $pconfig['imap_preproc'] = $a_nat[$id]['imap_preproc']; + $pconfig['sip_preproc'] = $a_nat[$id]['sip_preproc']; $pconfig['dnp3_preproc'] = $a_nat[$id]['dnp3_preproc']; $pconfig['modbus_preproc'] = $a_nat[$id]['modbus_preproc']; } @@ -104,6 +105,8 @@ if ($_POST) { $natent['imap_preproc'] = $_POST['imap_preproc'] ? 'on' : 'off'; $natent['dnp3_preproc'] = $_POST['dnp3_preproc'] ? 'on' : 'off'; $natent['modbus_preproc'] = $_POST['modbus_preproc'] ? 'on' : 'off'; + $natent['sip_preproc'] = $_POST['sip_preproc'] ? 'on' : 'off'; + $natent['modbus_preproc'] = $_POST['modbus_preproc'] ? 'on' : 'off'; if (isset($id) && $a_nat[$id]) $a_nat[$id] = $natent; @@ -363,6 +366,15 @@ include_once("head.inc"); </tr> <tr> <td width="22%" valign="top" class="vncell"><?php echo gettext("Enable"); ?> <br> + <?php echo gettext("SIP Detection"); ?></td> + <td width="78%" class="vtable"><input name="sip_preproc" + type="checkbox" value="on" + <?php if ($pconfig['sip_preproc']=="on") echo "checked"; ?> + onClick="enable_change(false)"><br> + <?php echo gettext("The SIP preprocessor decodes SIP traffic and detects some vulnerabilities."); ?></td> + </tr> + <tr> + <td width="22%" valign="top" class="vncell"><?php echo gettext("Enable"); ?> <br> <?php echo gettext("DNS Detection"); ?></td> <td width="78%" class="vtable"><input name="dns_preprocessor" type="checkbox" value="on" |