mirror of
https://github.com/vincentmli/bpfire.git
synced 2026-04-28 03:33:25 +02:00
IDS: Install snort to suricata converter
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
This commit is contained in:
@@ -1,6 +1,7 @@
|
|||||||
usr/sbin/convert-dmz
|
usr/sbin/convert-dmz
|
||||||
usr/sbin/convert-outgoingfw
|
usr/sbin/convert-outgoingfw
|
||||||
usr/sbin/convert-portfw
|
usr/sbin/convert-portfw
|
||||||
|
usr/sbin/convert-snort
|
||||||
usr/sbin/convert-xtaccess
|
usr/sbin/convert-xtaccess
|
||||||
usr/sbin/firewall-policy
|
usr/sbin/firewall-policy
|
||||||
#var/ipfire
|
#var/ipfire
|
||||||
|
|||||||
@@ -134,6 +134,9 @@ $(TARGET) :
|
|||||||
echo "POLICY=MODE2" >> $(CONFIG_ROOT)/firewall/settings
|
echo "POLICY=MODE2" >> $(CONFIG_ROOT)/firewall/settings
|
||||||
echo "POLICY1=MODE2" >> $(CONFIG_ROOT)/firewall/settings
|
echo "POLICY1=MODE2" >> $(CONFIG_ROOT)/firewall/settings
|
||||||
|
|
||||||
|
# Install snort to suricata converter.
|
||||||
|
cp $(DIR_SRC)/config/suricata/convert-snort /usr/sbin/convert-snort
|
||||||
|
|
||||||
# Add conntrack helper default settings
|
# Add conntrack helper default settings
|
||||||
for proto in FTP H323 IRC SIP TFTP; do \
|
for proto in FTP H323 IRC SIP TFTP; do \
|
||||||
echo "CONNTRACK_$${proto}=on" >> $(CONFIG_ROOT)/optionsfw/settings; \
|
echo "CONNTRACK_$${proto}=on" >> $(CONFIG_ROOT)/optionsfw/settings; \
|
||||||
|
|||||||
Reference in New Issue
Block a user