From a15664ad7508450ae5709462cefafb7bb107c159 Mon Sep 17 00:00:00 2001
From: Ermal <eri@pfsense.org>
Date: Sun, 15 Jul 2012 21:08:48 +0000
Subject: Make sensitive data configurable

---
 config/snort/snort_preprocessors.php | 11 +++++++++++
 1 file changed, 11 insertions(+)

(limited to 'config/snort/snort_preprocessors.php')

diff --git a/config/snort/snort_preprocessors.php b/config/snort/snort_preprocessors.php
index 339c0168..6a5cca6e 100644
--- a/config/snort/snort_preprocessors.php
+++ b/config/snort/snort_preprocessors.php
@@ -65,6 +65,7 @@ if (isset($id) && $a_nat[$id]) {
 	$pconfig['sf_portscan'] = $a_nat[$id]['sf_portscan'];
 	$pconfig['dce_rpc_2'] = $a_nat[$id]['dce_rpc_2'];
 	$pconfig['dns_preprocessor'] = $a_nat[$id]['dns_preprocessor'];
+	$pconfig['sensitive_data'] = $a_nat[$id]['sensitive_data'];
 }
 
 if ($_POST) {
@@ -86,6 +87,7 @@ if ($_POST) {
 		$natent['sf_portscan'] = $_POST['sf_portscan'] ? 'on' : 'off';
 		$natent['dce_rpc_2'] = $_POST['dce_rpc_2'] ? 'on' : 'off';
 		$natent['dns_preprocessor'] = $_POST['dns_preprocessor'] ? 'on' : 'off';
+		$natent['sensitive_data'] = $_POST['sensitive_data'] ? 'on' : 'off';
 
 		if (isset($id) && $a_nat[$id])
 			$a_nat[$id] = $natent;
@@ -298,6 +300,15 @@ include_once("head.inc");
 		The DNS preprocessor decodes DNS Response traffic and detects some
 		vulnerabilities.</td>
 	</tr>
+	<tr>
+		<td width="22%" valign="top" class="vncell">Enable <br> Sensitive Data</td>
+		<td width="78%" class="vtable">
+			<input name="sensitive_data" type="checkbox" value="on"
+			<?php if ($pconfig['dns_preprocessor']=="on") echo "checked"; ?>
+			onClick="enable_change(false)"><br>
+		Sensisitive data searches for CC or SS# in data
+		</td>
+	</tr>
 	<tr>
 		<td width="22%" valign="top">&nbsp;</td>
 				<td width="78%">
-- 
cgit v1.2.3