EFW Support
Welcome,
Guest
. Please
login
or
register
.
Did you miss your
activation email?
Monday 25 November 2024, 06:55:37 am
1 Hour
1 Day
1 Week
1 Month
Forever
Login with username, password and session length
Visit the Official Endian Reference Manual
HERE
14261
Posts in
4377
Topics by
6517
Members
Latest Member:
Sandro
Search:
Advanced search
EFW Support
Development
Contribute Your Customisations & Modifications
Update custom Snort rules from snort.org
0 Members and 0 Guests are viewing this topic.
« previous
next »
Pages:
[
1
]
Author
Topic: Update custom Snort rules from snort.org (Read 36536 times)
xxxx
Jr. Member
Offline
Posts: 9
Update custom Snort rules from snort.org
«
on:
Monday 14 June 2010, 09:22:30 am »
I used the Snort rules from emergingthreads.net and as custom rules the rules from snort.org to update the custom rules we make two scripts one for the Subscription Release one for the Registered-user release. Save the right script open the file write by xxxxxxxxxxxxxxxxxxxxx your Oinkcode between the " safe the file as "update_snort.sh". Copy the saved file to /etc/ make chmod 744 and a crontab entry or create a symlink to the script in /etc/cron.daily/ or /etc/cron.hourly/ or /etc/cron.weekly/
Logged
vondie
Full Member
Offline
Posts: 22
Re: Update custom Snort rules from snort.org
«
Reply #1 on:
Tuesday 10 August 2010, 01:28:02 am »
Good stuff...
To make it work please change the following lines which contain:
snort_rule="
http://dl.snort.org/reg-rules/snortrules-snapshot-2853.tar.gz
"
snort_md5="
http://dl.snort.org/reg-rules/snortrules-snapshot-2853.tar.gz.md5
"
to
snort_rule="
http://www.snort.org/pub-bin/oinkmaster.cgi/
$my_oinkcode/snortrules-snapshot-2853.tar.gz"
snort_md5="
http://www.snort.org/pub-bin/oinkmaster.cgi/
$my_oinkcode/snortrules-snapshot-2853.tar.gz.md5"
Logged
Pages:
[
1
]
« previous
next »
Jump to:
Please select a destination:
-----------------------------
Announcements
-----------------------------
=> Project News
=> Latest News and Updates
-----------------------------
Support
-----------------------------
=> General Support
=> Installation Support
=> EFW SMTP, HTTP, SIP, FTP Proxy Support
=> VPN Support
=> Hardware Support
-----------------------------
Development
-----------------------------
=> EFW Wishlist
=> Contribute Your Customisations & Modifications
Page created in 0.063 seconds with 19 queries.
Powered by SMF 1.1 RC2
|
SMF © 2001-2005, Lewis Media
Design by
7dana.com