This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree".

The branch, master has been updated via 14820894ad62c06b0d7e64b67a2757ba76f4d9e2 (commit) from c07e938edbb6071fd01872622cc30f333045326c (commit)

Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below.

- Log ----------------------------------------------------------------- commit 14820894ad62c06b0d7e64b67a2757ba76f4d9e2 Author: Christian Schmidt maniacikarus@ipfire.org Date: Mon Mar 14 20:04:16 2011 +0100

Fixed snort compile options and ipv6 config options

-----------------------------------------------------------------------

Summary of changes: config/snort/snort.conf | 6 ++---- lfs/snort | 8 ++++++-- 2 files changed, 8 insertions(+), 6 deletions(-)

Difference in files: diff --git a/config/snort/snort.conf b/config/snort/snort.conf index 4de1a44..3afa6f1 100644 --- a/config/snort/snort.conf +++ b/config/snort/snort.conf @@ -173,8 +173,6 @@ dynamicengine /usr/lib/snort_dynamicengine/libsf_engine.so preprocessor normalize_ip4 preprocessor normalize_tcp: ips ecn stream preprocessor normalize_icmp4 -preprocessor normalize_ip6 -preprocessor normalize_icmp6

# Target-based IP defragmentation. For more inforation, see README.frag3 preprocessor frag3_global: max_frags 65536 @@ -287,7 +285,7 @@ preprocessor ftp_telnet_protocol: ftp client default \ telnet_cmds yes

# SMTP normalization and anomaly detection. For more information, see README.SMTP -reprocessor smtp: ports { 25 465 587 691 } \ +preprocessor smtp: ports { 25 465 587 691 } \ inspection_type stateful \ enable_mime_decoding \ max_mime_depth 20480 \ @@ -311,7 +309,7 @@ reprocessor smtp: ports { 25 465 587 691 } \ xlink2state { enabled }

# Portscan detection. For more information, see README.sfportscan - preprocessor sfportscan: proto { all } memcap { 10000000 } sense_level { medium } +preprocessor sfportscan: proto { all } memcap { 10000000 } sense_level { medium }

# ARP spoof detection. For more information, see the Snort Manual - Configuring Snort - Preprocessors - ARP Spoof Preprocessor # preprocessor arpspoof diff --git a/lfs/snort b/lfs/snort index fea3f92..ebffada 100644 --- a/lfs/snort +++ b/lfs/snort @@ -71,8 +71,12 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @$(PREBUILD) @rm -rf $(DIR_APP) $(DIR_SRC)/snort* && cd $(DIR_SRC) && tar zxf $(DIR_DL)/$(DL_FILE) cd $(DIR_APP) && ./configure --prefix=/usr --disable-nls \ - --sysconfdir=/etc/snort --target=i586 \ - --enable-linux-smp-stats --enable-smb-alerts + --sysconfdir=/etc/snort --target=i586 \ + --enable-linux-smp-stats --enable-smb-alerts \ + --enable-gre --enable-mpls --enable-targetbased \ + --enable-decoder-preprocessor-rules --enable-ppm \ + --enable-perfprofiling --enable-zlib --enable-active-response \ + --enable-normalizer --enable-reload --enable-react --enable-flexresp3 cd $(DIR_APP) && make cd $(DIR_APP) && make install mv /usr/bin/snort /usr/sbin/

hooks/post-receive -- IPFire 2.x development tree