Snort v4.0_13 Release Notes (for pfSense-2.5 DEVEL installs only)
bmeeks last edited by
Snort v4.0_13 Release Notes
This package version is available only for users running pfSense-2.5 DEVEL snapshots.
This update randomizes the periodic rules update check to spread the load on the rules update sites due to the large number of pfSense Snort installations. The former default value had large numbers of machines hitting the rules update sites at precisely 5 minutes past the midnight hour local time.
The Rules Update Start Time on the GLOBAL SETTINGS tab now has a random minute for the default start time for first-time users.
For existing users who have never changed their Rules Update Start Time from the old default of 00:05, the minutes value will be randomized and stored.
The PHP module that performs the actual rules update check will randomly sleep for between 0 and 35 seconds before actually making connection to the Snort.org site.