Snort package retaining old settings on reinstall
-
Hi all,
I am using pfsense 1.2.3 and snort. I am trying to get rid of a few settings on the snort config however the web GUI is doesn't delete the settings. I uninstalled the snort pkg and rebooted. After the reboot I installed the snort package again and the old settings came back. I tried to delete a white list entry but it did not do it. How do I purge all existing config for a package so it come back with clean setup on reinstall.
I also have a carp slave which has snort and is able to delete entries etc. I get these errors on the primary snort before and after the pkg reinstall.
Oct 16 14:10:45 SnortStartup[2774]: Snort HARD Reload For 18945_bge1…
Oct 16 14:10:45 snort[2628]: FATAL ERROR: /usr/local/etc/snort/snort_18945_bge1/rules/emerging-trojan.rules(5879) Unknown rule option: 'byte_extract'.
Oct 16 14:10:45 snort[2628]: FATAL ERROR: /usr/local/etc/snort/snort_18945_bge1/rules/emerging-trojan.rules(5879) Unknown rule option: 'byte_extract'.Help!
-
There's a checkbox in Snort's global settings to retain the settings on uninstall/reinstall.
HTH
-
Thanks voovoo
I figured that out but hit another snag, mentioned here
http://forum.pfsense.org/index.php/topic,41137.0.html