Snort Configuration lost after upgrade pfSense from 2.0 to 2.0.1



  • Hi,

    we have done a upgrade from
    pfSense 2.0 with Snort 2.9 pkg v. 2.0
    to
    pfSense 2.0.1 with Snort 2.9.1 pkg v. 2.1.1

    After the upgrade the complete snort configuration is missing.

    I have a backup of the old configuration (configure.xml) beforde the upgrade.
    btw.: It seems that my supress rules <suppresspassthru>-Tag ist stored encrypted in the backup…

    Is there a way to import these settings without
    configure snort manually again or edit the xml backup?</suppresspassthru>



  • I have manual edited the config.xml and pasted the old snortconfiguration within the tag <snortglobal>…
    Then I restored this configuration in Diagnostics->Backup->Restore.
    There is no option to choose "Snort" as restore area, so I have to choose "ALL".

    After that system reboots and reinstalls all packages, the snort configuration is lost again.
    That's where I started...  ??? ??? ???

    Any ideas?</snortglobal>



  • The only way to solve this:
    I restored my old configuration in a Virtual Machine System, then I could copy my supress list from the webinterface


Locked