Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Move logs and alert file to per instance folder. Also remove configuration ↵ | Ermal | 2012-06-14 | 1 | -158/+52 |
| | | | | only on deletion of an instance and not when its stopped | ||||
* | Use pid files to control snort start/stop code | Ermal | 2012-06-14 | 1 | -87/+52 |
| | |||||
* | Remove not needed code. | Ermal | 2012-06-12 | 1 | -7/+0 |
| | |||||
* | Remove not needed code. | Ermal | 2012-06-12 | 1 | -45/+0 |
| | |||||
* | Bump version | Ermal | 2012-06-12 | 1 | -1/+1 |
| | |||||
* | Add normalizd_javascript present in latest snort version | Ermal | 2012-06-12 | 1 | -0/+1 |
| | |||||
* | Put a single alert file for each instance of snort so it actually works. ↵ | Ermal | 2012-06-12 | 1 | -23/+30 |
| | | | | Also correct blocked page/ For large files this still will bail out | ||||
* | Remove lib dir to avoid issues with upgrade of .so libs | Ermal | 2012-06-12 | 1 | -1/+1 |
| | |||||
* | Centralize the snort update tarball and use 2922 file for rules. | Ermal | 2012-06-12 | 1 | -0/+1 |
| | |||||
* | Add this required variable for now | Ermal | 2012-01-27 | 1 | -0/+1 |
| | |||||
* | Bump version here too | jim-p | 2012-01-26 | 1 | -1/+1 |
| | |||||
* | Expose the new options of spoink to the GUI | Ermal | 2012-01-25 | 1 | -1/+5 |
| | | | | | | | | | | | Improve spoink code a lot: - Allow to block by src/dst/both on the packet that generated alert. Default to src to keep backward compatibility - Speedup whitelist search - Create an option that allows to kill states on pf for blocked hosts. This allows to remove all access to the blocked host. TODO: - More fine grained blocking options? - Make whiwhitelist hparsing less sucky and IPv6 compatible | ||||
* | Patch to the previous change, reference: http://redmine.pfsense.org/issues/2033. | Michele Di Maria | 2011-12-06 | 1 | -7/+7 |
| | |||||
* | Adds two variables for SIP services in the "Define Servers" interface: | Michele Di Maria | 2011-12-05 | 1 | -0/+16 |
| | | | | | | | SIP_SERVERS, default=$HOME_NET SIP_PORTS, default=[5060:5090,16384:32768] Reference: http://redmine.pfsense.org/issues/2033 | ||||
* | Correct the copying of rules during config sync it was copying the wrong rules. | Ermal | 2011-11-11 | 1 | -1/+3 |
| | |||||
* | Use basename to be sure that no full path is used on the files themselves | Ermal | 2011-11-11 | 1 | -1/+1 |
| | |||||
* | Send snort.inc on some diet by removing unused/junk code | Ermal | 2011-11-11 | 1 | -248/+3 |
| | |||||
* | Remove the mess of config syncing in snort and just provide one function for ↵ | Ermal | 2011-11-11 | 1 | -194/+31 |
| | | | | all. This allows snort to properly start at bootup and restart on ip change. | ||||
* | Correct The functions used on the GUI to check if snort is up or not. | Ermal | 2011-11-11 | 1 | -79/+43 |
| | |||||
* | Correct the change made before to the script to properly work. Check if ↵ | Ermal | 2011-11-10 | 1 | -49/+12 |
| | | | | snort is running and restart it otherwise start it. | ||||
* | Remove this not needed code anymore since snort is able to recover itself ↵ | Ermal | 2011-11-10 | 1 | -8/+0 |
| | | | | just that the configure option was not the right one. Ticket #1982 | ||||
* | Correct check | Ermal | 2011-11-10 | 1 | -1/+1 |
| | |||||
* | Run snort as root user in pfSense this does not change much and allows to ↵ | Ermal | 2011-11-10 | 1 | -27/+26 |
| | | | | reload snort rather than stop start it. | ||||
* | Add a little pause after reload so we are sure the reload process creates ↵ | Ermal | 2011-11-09 | 1 | -0/+3 |
| | | | | the new snort process and passes latest checks in code. This according to: http://forum.pfsense.org/index.php/topic,41533.msg221183.html#msg221183 | ||||
* | Add missing keyword for gzip http inspection to not break stuff. Resolves #1985 | Ermal | 2011-11-01 | 1 | -0/+1 |
| | |||||
* | Add settings to allow inspecting gzipped http flows. | Ermal | 2011-10-31 | 1 | -1/+4 |
| | |||||
* | Correct clearing the alerts. | Ermal | 2011-09-29 | 1 | -1/+1 |
| | |||||
* | Copyright on a configuration file does not make sense! The author is already ↵ | Ermal | 2011-09-06 | 1 | -26/+0 |
| | | | | credited in the code of the package. | ||||
* | Add checks to see if the files exists before being used on the config to ↵ | Ermal | 2011-09-06 | 1 | -2/+7 |
| | | | | avoid possible errors. | ||||
* | Include default preprocessor rules which should fix portscan and other ↵ | Ermal | 2011-09-05 | 1 | -4/+6 |
| | | | | preprocessor detections | ||||
* | More fixes to stream5_tcp config | Ermal | 2011-09-05 | 1 | -1/+1 |
| | |||||
* | Try to fix the portscan not working | Ermal | 2011-09-05 | 1 | -3/+3 |
| | |||||
* | Remove dead code | Ermal | 2011-09-02 | 1 | -10/+0 |
| | |||||
* | Update version strings | Ermal | 2011-09-01 | 1 | -1/+1 |
| | |||||
* | Until php behaves hardcode barnyard2 with a url for version 8 of repo. | Ermal | 2011-09-01 | 1 | -5/+3 |
| | |||||
* | Correct code to do testing and not assigning | Ermal | 2011-09-01 | 1 | -1/+1 |
| | |||||
* | Be correct at command | Ermal | 2011-09-01 | 1 | -1/+1 |
| | |||||
* | Remove unneeded code | Ermal | 2011-09-01 | 1 | -3/+1 |
| | |||||
* | Correct reloading or rules and some information gathering on rc script of snort | Ermal | 2011-09-01 | 1 | -5/+5 |
| | |||||
* | The new port does some things differently | Ermal | 2011-09-01 | 1 | -8/+8 |
| | |||||
* | Correctly install barnyard2. Also correct typo on $config variable and do ↵ | Ermal | 2011-09-01 | 1 | -11/+13 |
| | | | | not exit on error but just return and log it | ||||
* | Silence some command becuase they just spam the logs uselessly. | Ermal | 2011-08-05 | 1 | -34/+34 |
| | |||||
* | GC some more code | Ermal | 2011-08-04 | 1 | -15/+2 |
| | |||||
* | Remove unused and problematic code | Ermal | 2011-08-04 | 1 | -10/+1 |
| | |||||
* | Unbreak row_helpers and add some more checks to prevent errors | Ermal | 2011-08-04 | 1 | -2/+0 |
| | |||||
* | Correct suppress file name to prevent issues | Ermal | 2011-08-03 | 1 | -1/+1 |
| | |||||
* | Correct the whitelist selection saving | Ermal | 2011-08-03 | 1 | -1/+1 |
| | |||||
* | Remove some code that might be problematic and causing issues for the ↵ | Ermal | 2011-08-03 | 1 | -6/+2 |
| | | | | package during install/deinstall process | ||||
* | Get rid of Id and remove unused code | Ermal | 2011-08-03 | 1 | -3/+1 |
| | |||||
* | Fixes for whitelists and suppress generation. | Ermal | 2011-08-03 | 1 | -3/+1 |
| |