aboutsummaryrefslogtreecommitdiffstats
path: root/config/snort/snort.inc
Commit message (Collapse)AuthorAgeFilesLines
* Remove all snort layout customizations since they cause issues allover and ↵Ermal2012-07-091-26/+2
| | | | remove all unneeded files anymore.
* globals for these do not work properly at bootup. Might be causing ↵jim-p2012-07-091-96/+126
| | | | | | unintended overwrites/deletions. Revert "s//usr/local/etc/snort/snortdir/ to unify its reference and location. Trim some unused functions in the way" This reverts commit 40cace16a452cd841a6b3626c44ff0d0b655956f.
* Bump minor version of snortErmal2012-07-091-1/+1
|
* Use proper class for select inputs. Clean up some more code around and try ↵Ermal2012-07-091-3/+4
| | | | to fix alerts display page
* s//usr/local/etc/snort/snortdir/ to unify its reference and location. Trim ↵Ermal2012-07-091-126/+96
| | | | some unused functions in the way
* Bump versionErmal2012-07-071-1/+1
|
* Bump up version of snort to reflect changesErmal2012-07-061-1/+1
|
* Generalize the version of snort used allover in the code. Thank you to ↵Ermal2012-07-061-2/+5
| | | | http://forum.pfsense.org/index.php/topic,51217.0.html
* Correctly process the exit code from pgrep rather than processing its ↵Ermal2012-07-041-32/+50
| | | | output. Fixes snort start/restart/stop with rc file
* Bump version after fixesErmal2012-07-021-1/+1
|
* Actually this check was/need to be = 0.Ermal2012-07-021-1/+1
|
* Correct stopping of snort by specifying right filename of pid.Ermal2012-07-021-3/+3
|
* This shouldn't be needed any more - real fix was committed later. Revert ↵jim-p2012-07-021-1/+0
| | | | | | "Restart should actually stop before starting again - See http://forum.pfsense.org/index.php/topic,50758.msg272558.html#msg272558" This reverts commit cd645a1b11544eda4f3db68ba49caaec8bbf973e.
* Snort isn't detecting processes in pid file correctly - See forum ↵uversy2012-07-011-1/+1
| | | | http://forum.pfsense.org/index.php/topic,50758.0.html
* Restart should actually stop before starting again - See ↵jim-p2012-06-301-0/+1
| | | | http://forum.pfsense.org/index.php/topic,50758.msg272558.html#msg272558
* List all dependencies here to avoid problems during installationErmal2012-06-151-1/+1
|
* Dno not remove lib/snort since it breaks reinstallations!Ermal2012-06-141-2/+1
|
* Bump minor verionErmal2012-06-141-1/+1
|
* Remove pid file of barnyard2 when stopid and also remove duplicate log lineErmal2012-06-141-2/+1
|
* Move logs and alert file to per instance folder. Also remove configuration ↵Ermal2012-06-141-158/+52
| | | | only on deletion of an instance and not when its stopped
* Use pid files to control snort start/stop codeErmal2012-06-141-87/+52
|
* Remove not needed code.Ermal2012-06-121-7/+0
|
* Remove not needed code.Ermal2012-06-121-45/+0
|
* Bump versionErmal2012-06-121-1/+1
|
* Add normalizd_javascript present in latest snort versionErmal2012-06-121-0/+1
|
* Put a single alert file for each instance of snort so it actually works. ↵Ermal2012-06-121-23/+30
| | | | Also correct blocked page/ For large files this still will bail out
* Remove lib dir to avoid issues with upgrade of .so libsErmal2012-06-121-1/+1
|
* Centralize the snort update tarball and use 2922 file for rules.Ermal2012-06-121-0/+1
|
* Add this required variable for nowErmal2012-01-271-0/+1
|
* Bump version here toojim-p2012-01-261-1/+1
|
* Expose the new options of spoink to the GUIErmal2012-01-251-1/+5
| | | | | | | | | | | Improve spoink code a lot: - Allow to block by src/dst/both on the packet that generated alert. Default to src to keep backward compatibility - Speedup whitelist search - Create an option that allows to kill states on pf for blocked hosts. This allows to remove all access to the blocked host. TODO: - More fine grained blocking options? - Make whiwhitelist hparsing less sucky and IPv6 compatible
* Patch to the previous change, reference: http://redmine.pfsense.org/issues/2033.Michele Di Maria2011-12-061-7/+7
|
* Adds two variables for SIP services in the "Define Servers" interface:Michele Di Maria2011-12-051-0/+16
| | | | | | | SIP_SERVERS, default=$HOME_NET SIP_PORTS, default=[5060:5090,16384:32768] Reference: http://redmine.pfsense.org/issues/2033
* Correct the copying of rules during config sync it was copying the wrong rules.Ermal2011-11-111-1/+3
|
* Use basename to be sure that no full path is used on the files themselvesErmal2011-11-111-1/+1
|
* Send snort.inc on some diet by removing unused/junk codeErmal2011-11-111-248/+3
|
* Remove the mess of config syncing in snort and just provide one function for ↵Ermal2011-11-111-194/+31
| | | | all. This allows snort to properly start at bootup and restart on ip change.
* Correct The functions used on the GUI to check if snort is up or not.Ermal2011-11-111-79/+43
|
* Correct the change made before to the script to properly work. Check if ↵Ermal2011-11-101-49/+12
| | | | snort is running and restart it otherwise start it.
* Remove this not needed code anymore since snort is able to recover itself ↵Ermal2011-11-101-8/+0
| | | | just that the configure option was not the right one. Ticket #1982
* Correct checkErmal2011-11-101-1/+1
|
* Run snort as root user in pfSense this does not change much and allows to ↵Ermal2011-11-101-27/+26
| | | | reload snort rather than stop start it.
* Add a little pause after reload so we are sure the reload process creates ↵Ermal2011-11-091-0/+3
| | | | the new snort process and passes latest checks in code. This according to: http://forum.pfsense.org/index.php/topic,41533.msg221183.html#msg221183
* Add missing keyword for gzip http inspection to not break stuff. Resolves #1985Ermal2011-11-011-0/+1
|
* Add settings to allow inspecting gzipped http flows.Ermal2011-10-311-1/+4
|
* Correct clearing the alerts.Ermal2011-09-291-1/+1
|
* Copyright on a configuration file does not make sense! The author is already ↵Ermal2011-09-061-26/+0
| | | | credited in the code of the package.
* Add checks to see if the files exists before being used on the config to ↵Ermal2011-09-061-2/+7
| | | | avoid possible errors.
* Include default preprocessor rules which should fix portscan and other ↵Ermal2011-09-051-4/+6
| | | | preprocessor detections
* More fixes to stream5_tcp configErmal2011-09-051-1/+1
|