Snort: Internet Radio Streams blocked

Caveman66

Hello,

from time to time I have to unblock manually Internet Radio Streams, which are blocked by Snort.
It seems, some Radio Stations change their IP from time to time, so sometimes it is necessary to unblock manually the IP for the same Radio Station which was unblocked a few weeks before.
Did there exist a whitelist for internet radio streams for Snort? Or have anyone a other more comfortable function to realize this automatically?

Thanks for reply
Karl

NogBadTheBad

What rules are being triggered?

Caveman66

I have implemented the following rule sets:

Snort Subscriber Ruleset
Snort GPLv2 Community Rules
Emerging Threats Open Rules
Snort OpenAppID Detectors
Snort OpenAppID RULES Detectors

viktor_g

@Caveman66 Please show triggered rules on Snort / Alerts page

Caveman66

hm i have deleted the last log. I come back when i have new log entries. Thx.

NogBadTheBad

@Caveman66 said in Snort: Internet Radio Streams blocked:

I have implemented the following rule sets:

Snort Subscriber Ruleset
Snort GPLv2 Community Rules

Why both ?

Isn’t the community ruleset contained in the subscriber ruleset.

Impatient

@NogBadTheBad
They are included in the paid version of the subscriber ruleset not the free.

NogBadTheBad

@Impatient said in Snort: Internet Radio Streams blocked:

@NogBadTheBad
They are included in the paid version of the subscriber ruleset not the free.

I thought the subscriber was the paid version hence my "why both".

Impatient

@NogBadTheBad
It is,
I wrote before I thought.