If you update snort rules actually, snort now will fail to start.
The reason is that now snort.org publish rules now on current branch that are no more compatible with snort-2.6.1.5
To fix the issue, you would need to manually change the URL for rules download and load again the rules that will be accepted by snort-2.6.1.5.
Change has to be made on /usr/local/bin/snortrules.pl
Replace
my $rulesbranch="current";
by
my $rulesbranch="2.6";
2.6 branch was not available until recently.
You may have to wait 15 mn after a previous rules load to be allowed to load rules again.
This problem is fixed on next IPCop release that will be published soon for testing.
1.4.18rc1 has been canceled due to minor bugs detected.
1.4.18rc2 should have been released on 24 November but sourceforge uploaded was broken. It should be fixed now, so rc2 should be released the 26.
Official release is programmed for 1 December.
To fix the issue, you would need to manually change the URL for rules download and load again the rules that will be accepted by snort-2.6.1.5.
Change has to be made on /usr/local/bin/snortrules.pl
Replace
my $rulesbranch="current";
by
my $rulesbranch="2.6";
You may have to wait 15 mn after a previous rules load to be allowed to load rules again.
2.6 branch was not available until recently.
This problem is fixed on next IPCop release that will be published soon for testing and should be officially released the 25 November.
Posted by: Gesp on Tuesday, November 20, 2007 - 12:19 AM
All logos and trademarks in this site are property of their respective owner. The comments are property of their posters, all the rest (c) 2003 by me. This web site was made with PostNuke, a web portal system written in PHP. PostNuke is Free Software released under the GNU/GPL license.
