Re: IPFire meets Suricata - Call for tester

[ummeegge <ummeegge@ipfire.org>]

[-- Attachment #1: Type: text/plain, Size: 5005 bytes --]

Hello Stefan,

On So, 2019-03-03 at 19:48 +0100, Stefan Schantl wrote:
> Hello Erik,
> 
> thank you for testing and your feedback.
You are welcome.

> 
> Sadly the RC3 release is broken - this happened because of wrong
> packed
> files.
I see.

> 
> I've release a fixed RC4 version with the latest development state -
> please use this one.
Have installed it and the WUI is back, Emergingthreads (Community
Rules) are set and downloaded. All seems to be working at the first
glance.

But wanted to report that while installation process the following
appears:

/var/ipfire/snort/settings is empty - Nothing to do. Exiting!
Setting up firewall
/etc/init.d/firewall: line 370: /usr/lib/firewall/ipsec-block: No such file or directory
Could not determine transfer net address: vetest                                                               [  OK  ]

so possibly it has nothing to do with you develoment but i wanted to
report it nevertheless.

Thanks for your hard work on that.

> 
> Best regards,

Best regards,

Erik

> 
> -Stefan
> > Hi Stefan,
> > have tried to install your provided tarball of RC3 from your
> > peoples
> > directory but something went really wrong. After executing
> > install.sh
> > the following appears:
> > 
> > Can't locate CONFIG_ROOT/network-functions.pl in @INC (@INC
> > contains:
> > /usr/lib/perl5/site_perl/5.12.3/x86_64-linux-thread-multi
> > /usr/lib/perl5/site_perl/5.12.3 /usr/lib/perl5/5.12.3/x86_64-linux-
> > thread-multi /usr/lib/perl5/5.12.3 .) at /var/ipfire/general-
> > functions.pl line 30.
> > Compilation failed in require at //var/ipfire/lang.pl line 12.
> > Compilation failed in require at -e line 1.
> > ./install.sh: line 13: /usr/sbin/convert-snort: Permission denied
> > Setting up firewall
> > /etc/init.d/firewall: line 370: /usr/lib/firewall/ipsec-block: No
> > such file or directory
> > Could not determine transfer net address: Va102
> > Can't locate CONFIG_ROOT/network-functions.pl in @INC (@INC
> > contains:
> > /usr/lib/perl5/site_perl/5.12.3/x86_64-linux-thread-multi
> > /usr/lib/perl5/site_perl/5.12.3 /usr/lib/perl5/5.12.3/x86_64-linux-
> > thread-multi /usr/lib/perl5/5.12.3 .) at /var/ipfire/general-
> > functions.pl line 30.
> > Compilation failed in require at /usr/lib/firewall/rules.pl line
> > 24.                                           [  OK  ]
> > Stopping Collection
> > daemon...                                                          
> >   
> >                       [  OK  ]
> > Starting Collection
> > daemon...                                                          
> >   
> >                       [  OK  ]
> > ./install.sh: line 22: /etc/init.d/suricata: Permission denied
> > 
> > Try to login into the the webuserinterface ended in a "Internal
> > server error".
> > error_log:
> > 
> > Can't locate CONFIG_ROOT/network-functions.pl in @INC (@INC
> > contains:
> > /usr/lib/perl5/site_perl/5.12.3/x86_64-linux-thread-multi
> > /usr/lib/perl5/site_perl/5.12.3 /usr/lib/perl5/5.12.3/x86_64-linux-
> > thread-multi /usr/lib/perl5/5.12.3 .) at /var/ipfire/general-
> > functions.pl line 30.
> > Compilation failed in require at /srv/web/ipfire/cgi-bin/index.cgi
> > line 30.
> > 
> > 
> > 'network-functions.pl' was indeed not on his place anymore.
> > Downloaded it again
> > but this didn´t solved it.
> > 
> > 
> > May you have an idea ?
> > 
> > Best,
> > 
> > Erik
> > 
> > 
> > On So, 2019-02-17 at 12:58 +0100, Stefan Schantl wrote:
> > > Hello list,
> > > 
> > > a short note from suricata development. I've uploaded the second
> > > release candidate, which fixes several issues and bugs.
> > > 
> > > Now, the "services.cgi" will correctly show the IPS as running,
> > > and
> > > logrotate and collectd will handle the correct service.
> > > 
> > > The new tarball (i586 for 32bit-systems, and x86_64) can be found
> > > here:
> > > 
> > > https://people.ipfire.org/~stevee/suricata/
> > > 
> > > To start testing download the tarball and place it on your IPFire
> > > system. Extract the tarball and launch the install (install.sh)
> > > script.
> > > 
> > > If you already have installed a previous test version or image,
> > > with
> > > the same steps as noted above you can update the the new version.
> > > 
> > > As always, if you prefer a fresh installation, the latest image
> > > can
> > > be
> > > grabbed
> > > from here:
> > > 
> > > https://nightly.ipfire.org/next-suricata/latest/x86_64/
> > > 
> > > Direct link for downloading the ISO image:
> > > 
> > > 
> > 
> > 
https://nightly.ipfire.org/next-suricata/latest/x86_64/ipfire-2.21.x86_64-full-core128.iso
> > > Thanks for downloading and testing. There are no known bugs so
> > > far,
> > > as
> > > usual please file any bugs to our bugtracker (
> > > https://bugzilla.ipfire.org) and share your feedback on the list.
> > > 
> > > Best regards,
> > > 
> > > -Stefan