Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    SNORT Regression Remove Blocked Hosts interval / Alert length of time / duration of block GUI changed automatically to 5 mins

    Scheduled Pinned Locked Moved IDS/IPS
    snorttimeframeblock durationblocked hostalert duration
    4 Posts 1 Posters 494 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • JonathanLeeJ
      JonathanLee
      last edited by JonathanLee

      Hello fellow Netgate Community Members can you please help?

      I use to have a 1 hour duration on my Snort config for blocked addresses. That option is now missing. Has anyone else noticed this regression?

      How can I add in my 1 hour block into custom options to fix the regression?

      Screenshot 2023-10-09 at 10.22.06 PM.png

      Timeframe of block is no longer listed in GUI has it moved?

      Make sure to upvote

      1 Reply Last reply Reply Quote 0
      • JonathanLeeJ
        JonathanLee
        last edited by

        Example from researching:

        <minute>/20</minute>
        <hour></hour>
        <mday></mday>
        <month></month>
        <wday>*</wday>
        <who>root</who>
        <command></command>/usr/bin/nice -n20 /usr/local/sbin/expiretable -t 1200 snort2c

        I can not find anymore in the config file for snort

        all I see that is close is . . .

        I use to have it set to an hour, however today it seems like its only 3-5 mins and clears and I can't change it.

        Screenshot 2023-10-09 at 10.44.38 PM.png

        Make sure to upvote

        1 Reply Last reply Reply Quote 0
        • JonathanLeeJ
          JonathanLee
          last edited by

          Screenshot 2023-10-09 at 10.55.49 PM.png

          Remove blocked host interval . .

          Make sure to upvote

          1 Reply Last reply Reply Quote 0
          • JonathanLeeJ
            JonathanLee
            last edited by JonathanLee

            Never does not work any longer it changed overnight to 5 mins for some reason, memory use I suspect.

            Screenshot 2023-10-09 at 10.57.43 PM.png
            Before

            Screenshot 2023-10-09 at 10.58.08 PM.png
            After

            Make sure to upvote

            1 Reply Last reply Reply Quote 0
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.