Smal Snort pakage fix needed

[Klexx]

Hi, It seems like the Snort pakage is unable to download paid subscriber VRT rule updates due too a hardcoded url in snort_download_rules.php, would it be posible to include this in a small fix for the Snort pakage ?

( Subscribers receive:The fastest access to Sourcefire VRT Certified Rule updates - The same quality ruleset developed for Sourcefire customers – 30 days faster than registered users
Coverage in advance of exploits - The Sourcefire VRT proactively focus on the underlying vulnerability, rather than simply reacting to known attacks
The ability to submit false positives/negatives directly to the Sourcefire VRT – A detailed submission form sends false positives/negatives reports directly to the VRT )

[sullrich]

What is the change needed exactly?  I thought the oink code distinguished from this?

[Klexx]

Hi , the fix is acual almost as smal as posibel ;-) as the URL for  subscribed downloads an public downloades is :

Public :        snortrules-snapshot-CURRENT.tar.gz
Subscribed:  snortrules-snapshot-CURRENT_s.tar.gz

Is only the "_s" thats differs in the url , the oikmastercode may also be validated but it's not canged ( mine is the same as before i subscribed )

[sullrich]

Deinstall and reinstall the package.  Afterwards a new checkbox will show up in the snort settings area.  Check the subscriber checkbox and _s will automatically be appended to the download.

[Klexx]

Tnx.. :-)

[sullrich]

Please report back if it works okay and give us a nice HONK for excellent service :)

[Klexx]

@sullrich:

Please report back if it works okay and give us a nice HONK for excellent service :)

It works like a dream  :-) EXELLENT service