Re: [IPCop-user] Snort updates (intrusion detection on 1.4.6)

[Daniel H. R. <da...@lo...>]

We have it running fine on many boxes.  What we have noted is that you
must set your service (register/subscription) enter your oink code, SAVE
THIS - and THEN do the ruleset download.  Other sequences we tried did
not work.

Cheers,
Dan
Los Angeles Computerhelp
818-352-8700
http://losangelescomputerhelp.com


On Tue, 2005-05-31 at 06:13 -0700,
ipc...@li... wrote:
Message: 9
From: "Tim Auwema" <ta...@ne...>
To: "dara" <de...@ei...>
Cc: <ipc...@li...>
Subject: Re: [IPCop-user] Snort updates (intrusion detection on 1.4.6)
Date: Tue, 31 May 2005 22:50:43 +1000

This is a multi-part message in MIME format.

------=_NextPart_000_0010_01C56633.2CE3D0A0
Content-Type: text/plain;
        charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

hi,
i posted this message before in the mailing list.  my mate had the same
=
problem.  we tried every fix.  new hard drive different oink code , =
different install , fresh and upgrade and could not fix the problem.  =
ended up going to smoothy as they have now put an automatic update mod =
in using oinkmaster.
sorry to have such bad news. he did not have any proxy stuff at all =
either

  ----- Original Message -----=20
  From: dara=20
  To: Gilles Espinasse=20
  Cc: IPCOP USER=20
  Sent: Tuesday, May 31, 2005 11:03 PM
  Subject: Re: [IPCop-user] Snort updates (intrusion detection on 1.4.6)


  Hi Gilles,

  (more below...)

  Gilles Espinasse wrote:=20
Hi All,

Has anybody gotten the rule-set update to work ?

If I try "Download new ruleset" on the Services->Intrusion Detection
page, with " Sourcefire VRT rules for registered users" selected and my
'oink code' inserted in the provided field, the screen goes red and
displays the following message :

   Error messages:

   Invalid loaded file

    It does not work actually if you have set a proxy authentification =
in the
proxy page.
If one of you can fix the code and test, it could be include on the next
release.

 =20
  I didn't have proxy authentication on.

  I turned off the proxy altogether and tried again but I still get the
=
above error when i click to download a new ruleset.

  Any other suggestions for work-arounds, fixes etc ?

  Thanks

  d