Snort and "apt" blocking FYI
-
Anyone else seeing failures on Raspberry Pi updates? I have 3 systems that update daily (one GPS/NTP server that failed multiple trys) and all three failed. I tried to run the update/upgrades manually and all my online RPi's, regardless of make or software version, were failing. Checking the snort alerts it looks like there was an emerging threat rule blocking apt traffic. My rules updated early this morning. Still I thought this odd. I forced a rule update at 3:55PM PT and now they all update/upgrade just fine.
I suppose I could have just dropped back to "gets" without "apt", but wanted to fix it rather than band-aid it.
-
@Ramosel try to add the false positive to the surpass list. It won’t block it anymore on Snort
