Snort package retaining old settings on reinstall



  • Hi all,

    I am using pfsense 1.2.3 and snort. I am trying to get rid of a few settings on the snort config however the web GUI is doesn't delete the settings. I uninstalled the snort pkg and rebooted. After the reboot I installed the snort package again and the old settings came back. I tried to delete a white list entry but it did not do it. How do I purge all existing config for a package so it come back with clean setup on reinstall.

    I also have a carp slave which has snort and is able to delete entries etc. I get these errors on the primary snort before and after the pkg reinstall.

    Oct 16 14:10:45 SnortStartup[2774]: Snort HARD Reload For 18945_bge1…
    Oct 16 14:10:45 snort[2628]: FATAL ERROR: /usr/local/etc/snort/snort_18945_bge1/rules/emerging-trojan.rules(5879) Unknown rule option: 'byte_extract'.
    Oct 16 14:10:45 snort[2628]: FATAL ERROR: /usr/local/etc/snort/snort_18945_bge1/rules/emerging-trojan.rules(5879) Unknown rule option: 'byte_extract'.

    Help!



  • There's a checkbox in Snort's global settings to retain the settings on uninstall/reinstall.

    HTH



  • Thanks voovoo

    I figured that out but hit another snag, mentioned here

    http://forum.pfsense.org/index.php/topic,41137.0.html


Log in to reply