From ea47308a8e56e633928f9d296dd0c6d4960436f8 Mon Sep 17 00:00:00 2001 From: robiscool Date: Tue, 2 Aug 2011 10:59:38 -0700 Subject: Change snort-dev to orion --- config/orionids-dev/snort_interfaces_edit.php | 529 ++++++++++++++++++++++++++ 1 file changed, 529 insertions(+) create mode 100644 config/orionids-dev/snort_interfaces_edit.php (limited to 'config/orionids-dev/snort_interfaces_edit.php') diff --git a/config/orionids-dev/snort_interfaces_edit.php b/config/orionids-dev/snort_interfaces_edit.php new file mode 100644 index 00000000..86cd6857 --- /dev/null +++ b/config/orionids-dev/snort_interfaces_edit.php @@ -0,0 +1,529 @@ +. + All rights reserved. + + Pfsense Old snort GUI + Copyright (C) 2006 Scott Ullrich. + + Pfsense snort GUI + Copyright (C) 2008-2012 Robert Zelaya. + + Redistribution and use in source and binary forms, with or without + modification, are permitted provided that the following conditions are met: + + 1. Redistributions of source code must retain the above copyright notice, + this list of conditions and the following disclaimer. + + 2. Redistributions in binary form must reproduce the above copyright + notice, this list of conditions and the following disclaimer in the + documentation and/or other materials provided with the distribution. + + 3. Neither the name of the pfSense nor the names of its contributors + may be used to endorse or promote products derived from this software without + specific prior written permission. + + THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, + INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY + AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE + AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, + OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF + SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS + INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN + CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) + ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE + POSSIBILITY OF SUCH DAMAGE. + + */ + +require_once("guiconfig.inc"); +require_once("/usr/local/pkg/snort/snort_new.inc"); +require_once("/usr/local/pkg/snort/snort_gui.inc"); + +// set page vars + +$uuid = $_GET['uuid']; +if (isset($_POST['uuid'])) +$uuid = $_POST['uuid']; + +if ($uuid == '') { + echo 'error: no uuid'; + exit(0); +} + + + +$a_list = snortSql_fetchAllSettings('snortDB', 'SnortIfaces', 'uuid', $uuid); + +$a_rules = snortSql_fetchAllSettings('snortDBrules', 'Snortrules', 'All', ''); + +if (!is_array($a_list)) { + $a_list = array(); +} + +$a_whitelist = snortSql_fetchAllWhitelistTypes('SnortWhitelist', 'SnortWhitelistips'); + +if (!is_array($a_whitelist)) { + $a_whitelist = array(); +} + +$a_suppresslist = snortSql_fetchAllWhitelistTypes('SnortSuppress', ''); + +if (!is_array($a_suppresslist)) { + $a_suppresslist = array(); +} + + + $pgtitle = "Services: Snort: Interface Edit:"; + include("/usr/local/pkg/snort/snort_head.inc"); + +?> + + + + + + + + +
+
+
+ +
+
+



Please Wait...

+
+
+

+
+
+
+ + + +
+ + + +
+ +
+
+ + + + + + + + +
+
+ +
+
+ + +
+ + + + + + + + + + +
+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
General Settings
Interface +   + "> +   Enable or Disable +
Interface + +
+ Choose which interface this rule applies to.
+ Hint: in most cases, you'll want to use WAN here. +
Description + +
+ You may enter a description here for your reference (not parsed). +
Memory Performance + +
+ Lowmem and ac-bnfa are recommended for low end systems, Ac: high memory, best performance, ac-std: moderate + memory,high performance, acs: small memory, moderateperformance, ac-banded: small memory,moderate performance, ac-sparsebands: small memory, high performance. +
+
Choose the rule DB snort should use.
Rule DB + +
+ Choose the rule database to use.  Note: Cahnges to this database are global. +
+ WARNING: Never change this when snort is running. +
Choose the networks snort should inspect and whitelist.
Home net + +
+ Choose the home net you will like this rule to use.  Note: Default homenet adds only local networks. +
+ Hint: Most users add a list offriendly ips that the firewall cant see. +
External net + +
+ Choose the external net you will like this rule to use. Note: Default external net, networks that are not home net. +
+ Hint: Most users should leave this setting at default. +
Block offenders + > +
+ Checking this option will automatically block hosts that generate a Snort alerts with SnortSam. +
Suppression and filtering + +
+ Choose the suppression or filtering file you will like this rule to use.  + Note: Default option disables suppression and filtering. +
Choose the types of logs snort should create.
Type of Unified Logging + +
+ Snort will log Alerts to a file in the UNIFIED format. Full is a requirement for the snort wigdet. +
Send alerts to mainSystem logs + > +
+ Snort will send Alerts to the Pfsense system logs. +
Log to a Tcpdump file + > +
+ Snort will log packets to a tcpdump-formatted file. The file then can be analyzed by an application such as Wireshark which understands pcap file formats. + WARNING: File may become large. +
Log Alerts to a snort unified2 file + > +
+ Snort will log Alerts to a file in the UNIFIED2 format. This is a requirement for barnyard2. +
Arguments here will be automatically inserted into the snort configuration.
Advanced configuration pass through + +
+ + + +
  + Note: + Please save your settings before you click start. +
+ + + +
+
+ + + +
+ + + + + + + + -- cgit v1.2.3