<![CDATA[Snort Rules update Broken]]>I'm having trouble using the update rules for snort. When I do a manual update the updater gets through a few small files to then while downloading the larger rules package it sticks and the status bar stops moving. I've set the auto-update to download every 6hrs but that doesn't do anything either. Every time I go to the update rules tab in snort it gives me a warning that /usr/local/etc/snort/rules is empty.

I've manually downloaded the snort rules to an FTP server then downloaded & unpacked it into /usr/local/etc/snort/rules and the update rules tab has stopped complaining but I'm not sure if

  1. The rules have been installed correctly into the right directory
  2. The rules will ever be updated automatically

PFSense 1.2.3-RELEASE
Snort 2.8.6 pkg v. 1.30

]]>https://forum.netgate.com/topic/25336/snort-rules-update-brokenRSS for NodeSat, 15 Aug 2026 04:26:55 GMTWed, 28 Jul 2010 05:37:08 GMT60<![CDATA[Reply to Snort Rules update Broken on Thu, 29 Jul 2010 00:55:39 GMT]]>Thanks guys - Manual update worked in the end, auto still not happening up until now. Maybe now that there's a rule set in place the auto updates will roll in? We'll see in ~6 hrs I guess.

]]>https://forum.netgate.com/post/241230https://forum.netgate.com/post/241230Thu, 29 Jul 2010 00:55:39 GMT<![CDATA[Reply to Snort Rules update Broken on Wed, 28 Jul 2010 14:38:45 GMT]]>Your problem is with v1.30, and isn't the same as the recent broken update issue.  From the "things to try" camp, you might remove the snort package and reinstall it (with or without saving your config).  I was using v1.27, updated to v1.30 and it's working fine for me.

]]>https://forum.netgate.com/post/241135https://forum.netgate.com/post/241135Wed, 28 Jul 2010 14:38:45 GMT<![CDATA[Reply to Snort Rules update Broken on Wed, 28 Jul 2010 13:22:22 GMT]]>Manual update:  http://forum.pfsense.org/index.php/topic,26382.msg137567.html#msg137567

…and the update feature of Snort is discussed heavily in that thread - all you need to know should be in there.

]]>https://forum.netgate.com/post/241128https://forum.netgate.com/post/241128Wed, 28 Jul 2010 13:22:22 GMT