Snort Forums Archive

Archive Home » Snort Newbies » New Snort and IPCop Firewall

Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.

[ Notice: Full Version of This Topic ]

New Snort and IPCop Firewall

Posted by gednet on March 10, 2005 17:15:27

Hi Peoples
Running an IPCop firewall and I am no longer able to download new rule set.No big problem,just wondering about it.Any feedback would be welcome

Cheers

Posted by Skyzero on March 18, 2005 04:21:10

Hi
The ids.cgi script running on Ipcop can`t find the tar.gz.md5 file.

$GET_CMD = "GET http://www.snort.org/dl/signatures/snortrules-snapshot-2_1.tar.gz.md5 HTTP/1.1\r\n";

This is your problem.
So far Snort isn`t providing the md5 File anymore you need to change the ids.cgi script.

Don`t ask me im not a good cgi - programmer but you need to change the script like this-->

$GET_CMD = "GET http://www.snort.org/pub-bin/oinkmaster.cgi/####your oinkcode####/snortrules-snapshot-2.1.tar.gz HTTP/1.1\r\n";

and disable the md5 check.
If you found a way just post it.

Cu Sky