• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

SNORT Regression Remove Blocked Hosts interval / Alert length of time / duration of block GUI changed automatically to 5 mins

Scheduled Pinned Locked Moved IDS/IPS
snorttimeframeblock durationblocked hostalert duration
4 Posts 1 Posters 498 Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • J
    JonathanLee
    last edited by JonathanLee Oct 10, 2023, 6:24 AM Oct 10, 2023, 5:23 AM

    Hello fellow Netgate Community Members can you please help?

    I use to have a 1 hour duration on my Snort config for blocked addresses. That option is now missing. Has anyone else noticed this regression?

    How can I add in my 1 hour block into custom options to fix the regression?

    Screenshot 2023-10-09 at 10.22.06 PM.png

    Timeframe of block is no longer listed in GUI has it moved?

    Make sure to upvote

    1 Reply Last reply Reply Quote 0
    • J
      JonathanLee
      last edited by Oct 10, 2023, 5:46 AM

      Example from researching:

      <minute>/20</minute>
      <hour></hour>
      <mday></mday>
      <month></month>
      <wday>*</wday>
      <who>root</who>
      <command></command>/usr/bin/nice -n20 /usr/local/sbin/expiretable -t 1200 snort2c

      I can not find anymore in the config file for snort

      all I see that is close is . . .

      I use to have it set to an hour, however today it seems like its only 3-5 mins and clears and I can't change it.

      Screenshot 2023-10-09 at 10.44.38 PM.png

      Make sure to upvote

      1 Reply Last reply Reply Quote 0
      • J
        JonathanLee
        last edited by Oct 10, 2023, 5:56 AM

        Screenshot 2023-10-09 at 10.55.49 PM.png

        Remove blocked host interval . .

        Make sure to upvote

        1 Reply Last reply Reply Quote 0
        • J
          JonathanLee
          last edited by JonathanLee Oct 10, 2023, 5:59 AM Oct 10, 2023, 5:59 AM

          Never does not work any longer it changed overnight to 5 mins for some reason, memory use I suspect.

          Screenshot 2023-10-09 at 10.57.43 PM.png
          Before

          Screenshot 2023-10-09 at 10.58.08 PM.png
          After

          Make sure to upvote

          1 Reply Last reply Reply Quote 0
          4 out of 4
          • First post
            4/4
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
            This community forum collects and processes your personal information.
            consent.not_received