|
From: Heiko Z. <he...@zu...> - 2010-10-29 14:10:21
|
Could you please put this in a bug report on Mantis? This way we won't forget it. http://sourceforge.net/apps/mantisbt/devil-linux/my_view_page.php Heiko Quoting 吴鲁加 <wu...@gm...>: > In devil-linux default boot.iso, snort can't work as IPS, you need to > configure Snort install with: “./configure —enable-inline” , follow > this steps: > > 1. edit build/scripts/snort, add --enable-inline in ./configure. > 2. edit build/scripts/iptables, add --enable-libipq -- snort need this > lib to check packet in iptables's QUEUE. > 3. download Libnet-1.0.2a, copy build/scripts/Libnet and edit it for > your need. > 4. edit build/Makefile.build, change Libnet to Libnet-1.02a(snort > can't work with Libnet > 1.1); > 5. edit build/Makefile.build, make sure snort build after > iptables,because it need iptables's header and libs. snort: | > $(GROUP_23) ; > 6. and, because we use old libnet, syslog-ng will report an error, > just edit build/script/syslog-ng, set --enable-spoof-source=no; > > that's it, you can make all to test it, if somebody want to use > snort's IPS future, hope it helps. > > -- > wulujia<wu...@un...> > Tel:400 1122 918 > Web:www.unnoo.com / www.xiaobai.com > > ------------------------------------------------------------------------------ > Nokia and AT&T present the 2010 Calling All Innovators-North America contest > Create new apps & games for the Nokia N8 for consumers in U.S. and Canada > $10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing > Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store > http://p.sf.net/sfu/nokia-dev2dev > _______________________________________________ > Devil-linux-develop mailing list > Dev...@li... > https://lists.sourceforge.net/lists/listinfo/devil-linux-develop > -- Regards Heiko Zuerker http://www.devil-linux.org ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program. |