-
- General Settings |
-
-
- Enable |
-
- // care with spaces
- if ($pconfig['enable'] == "on")
- $checked = checked;
-
- $onclick_enable = "onClick=\"enable_change(false)\">";
-
- echo "
- \n\n";
- ?> |
-
-
- Interface |
-
-
- Choose which interface this rule applies to.
- Hint: in most cases, you'll want to use WAN here. |
-
-
- Description |
+ Interface |
+
+
+ Choose which interface this rule applies to.
+ Hint: in most cases, you'll want to use WAN here.
|
+
+
+ Description |
+ value="=htmlspecialchars($pconfig['descr']);?>">
You may enter a description here for your
- reference (not parsed). |
-
-
- Memory Performance |
+ reference (not parsed).
+
+
+ Memory Performance |
|
-
-
+ memory, high performance.
+
+
+
Choose the networks
snort should inspect and whitelist. |
-
-
- Home net |
+
+
+ Home net |
+
Choose the home net you will like this rule to
- use. Note: Default home
+ use. Note: Default home
net adds only local networks.
Hint: Most users add a list of
- friendly ips that the firewall cant see. |
-
-
- External net |
+ friendly ips that the firewall cant see.
+
+
+ External net |
|
-
-
- Block offenders |
+ setting at default.
+
+
+ Block offenders |
onClick="enable_blockoffenders()">
Checking this option will automatically block hosts that generate a
Snort alert. |
-
-
- Kill states |
+
+
+ Kill states |
>
Should firewall states be killed for the blocked ip
|
-
-
- Which ip to block |
+
+
+ Which ip to block |
|
-
-
- Whitelist |
+
+
+ Whitelist |
Choose the whitelist you will like this rule to
- use. Note: Default
+ use. Note: Default
whitelist adds only local networks.
- Note: This option will only be used when block offenders is on.
+ Note: This option will only be used when block offenders is on.
|
- Suppression and
+ | Suppression and
filtering |
Choose the suppression or filtering file you
- will like this rule to use. Note: Default
+ will like this rule to use. Note: Default
option disables suppression and filtering. |
@@ -659,7 +599,7 @@ function enable_change(enable_change) {
logs snort should create.
- Send alerts to main
+ | Send alerts to main
System logs |
|
- Log to a Tcpdump file |
+ Log to a Tcpdump file |
onClick="enable_change(false)">
Snort will log packets to a tcpdump-formatted file. The file then
can be analyzed by an application such as Wireshark which
- understands pcap file formats. WARNING:
+ understands pcap file formats. WARNING:
File may become large. |
- Log Alerts to a snort
+ | Log Alerts to a snort
unified2 file |
onClick="enable_change(false)">
- Snort will log Alerts to a file in the UNIFIED2 format. This is a
- requirement for barnyard2. |
-
-
- Arguments here will
- be automatically inserted into the snort configuration. |
-
-
- Advanced configuration
- pass through |
-
- |
-
-
- |
-
-
-
- |
-
-
- |
- Note:
-
- Please save your settings before you click start. |
-
-
-
+ Snort will log Alerts to a file in the UNIFIED2 format. This is a
+ requirement for barnyard2.