EFW Support

Support => EFW SMTP, HTTP, SIP, FTP Proxy Support => Topic started by: ohifra on Friday 17 February 2012, 01:34:08 am



Title: ids problem
Post by: ohifra on Friday 17 February 2012, 01:34:08 am
Hello I have a problem with the start of the IDS.
Yesterday, until 15.00, everything worked properly, then the service ids has suddenly stopped.
Do you know if it's a problem of ids or of  snort's rules ?
thank you in advance
regards
Francis

ps excuse for my bad English


Title: Re: ids problem
Post by: mrkroket on Tuesday 21 February 2012, 01:08:12 pm
Sometimes there were problems with updated rules. Some rules are backwards incompatible, and makes IDS to stop.
You need to go to command line, and manually trace the error

I think the command was restartsnort.py -d -f
And check what rules are incompatible. Once you have the ID rules, go to Web GUI and search for those IDS rules and disable them.


Title: Re: ids problem
Post by: ohifra on Tuesday 21 February 2012, 10:32:18 pm
ok thanks  ;D