Browse Source

snort: changed to not install "community rules" (see note!)

Note:

There are no "community" rules available anymore (since snort > 2.4), so
it makes no sense to install the old rules!
If someone needs the official Snort rules from Sourcefire he/she has to
install them from cmdline or through the supplied tools.
It is up to the final user to decide what kind of rules he/she wants to
use ("Subscriber Release" or "Registered User Release").

Further infos about the official Snort rules can be found here:
http://www.snort.org/snort-rules

As a replacement for the former community rules we should package the open
rulesets from emergingthreats.net which are available under the terms of the
GPL: http://rules.emergingthreats.net/open/
stable/0.2
Christian Wiese 14 years ago
parent
commit
e01913a7d4
  1. 4
      security/snort/snort.conf
  2. 1
      security/snort/snort.desc

4
security/snort/snort.conf

@ -82,10 +82,6 @@ snort_postmake()
# For security reasons this directory should not be world-readable
cp -fr etc/{*.conf,*.config,*.map} $root/$sysconfdir
# Installing
# Sourcefire VRT Certified Rules - The Official Snort Ruleset (unregistered user release)
tar -v $taropt `match_source_file -p snortrules-pr` -C $root/$sysconfdir/
# some changes on the shipped snort.conf example we use as default
# replacing RULE_PATH '../rules' to './rules'
sed -i 's,\.\./rules,./rules,' $root/$sysconfdir/snort.conf

1
security/snort/snort.desc

@ -35,4 +35,3 @@
[P] X -----5---9 222.000
[D] 4208713062 snort-2.9.0.4.tar.gz !http://www.snort.org/downloads/808
[D] 200629638 snortrules-pr-2.4.tar.gz http://www.snort.org/pub-bin/downloads.cgi/Download/vrt_pr/

Loading…
Cancel
Save