Snort Configuration lost after upgrade pfSense from 2.0 to 2.0.1

sepp_huber

Hi,

we have done a upgrade from
pfSense 2.0 with Snort 2.9 pkg v. 2.0
to
pfSense 2.0.1 with Snort 2.9.1 pkg v. 2.1.1

After the upgrade the complete snort configuration is missing.

I have a backup of the old configuration (configure.xml) beforde the upgrade.
btw.: It seems that my supress rules <suppresspassthru>-Tag ist stored encrypted in the backup…

Is there a way to import these settings without
configure snort manually again or edit the xml backup?</suppresspassthru>

sepp_huber

I have manual edited the config.xml and pasted the old snortconfiguration within the tag <snortglobal>…
Then I restored this configuration in Diagnostics->Backup->Restore.
There is no option to choose "Snort" as restore area, so I have to choose "ALL".

After that system reboots and reinstalls all packages, the snort configuration is lost again.
That's where I started... ??? ??? ???

Any ideas?</snortglobal>

sepp_huber

The only way to solve this:
I restored my old configuration in a Virtual Machine System, then I could copy my supress list from the webinterface