webadmin-list

[webmin-l] snort 2.1.0 and webmin module snort

[Patrick E. <mai...@pa...>]

hi,

i have a problem with snort 2.1.0 and the webmin module snort. when i  
enter the module, every rule is displayed as:

Rule Set				Status	Action	
$RULE_PATH/attack-responses	 v		Disable
$RULE_PATH/backdoor	 	 x		Disable
...

when i click on a rule to edit it this comes up:

Rule file cannot be found  
(/etc/snort/rules/$RULE_PATH/attack-responses.rules)

in "module config" everything seems fine:

"Full path to Snort rule files directory" /etc/snort/rules

where it definitely is..

what could be the problem here?

PAT

Re: [webmin-l] snort 2.1.0 and webmin module snort

[Adam K. <ake...@ni...>]

On Fri, 17 Sep 2004 13:06:02 +0200, Patrick Erler wrote
> hi,
> 
> i have a problem with snort 2.1.0 and the webmin module snort. when 
> i  enter the module, every rule is displayed as:
> 
> Rule Set				Status	Action	
> $RULE_PATH/attack-responses	 v		Disable
> $RULE_PATH/backdoor	 	 x		Disable
> ...
> 
> when i click on a rule to edit it this comes up:
> 
> Rule file cannot be found  
> (/etc/snort/rules/$RULE_PATH/attack-responses.rules)
> 
> in "module config" everything seems fine:
> 
> "Full path to Snort rule files directory" /etc/snort/rules
> 
> where it definitely is..
> 
> what could be the problem here?

The module does not resolve the $RULE_PATH variable in the filename from the
snort config. I changed $RULE_PATH/ to be rules/ for each file in the snort
config file and it works fine now.

--
Northern Indiana ESC
Adam Kennedy - ake...@ni...
Linux Specialist / Network Administrator
Phone: (574) 254-0111 x113
Toll Free: 800-326-5642
Fax: (574) 254-0148

(jamie please have look) Re: [webmin-l] snort 2.1.0 and webmin module snort

[Patrick E. <mai...@pa...>]

On Mon, 20 Sep 2004 08:31:20 -0500, Adam Kennedy  
<ake...@ni...> wrote:
>> i have a problem with snort 2.1.0 and the webmin module snort. when
>> i  enter the module, every rule is displayed as:
>>
>> Rule Set				Status	Action	
>> $RULE_PATH/attack-responses	 v		Disable
>> $RULE_PATH/backdoor	 	 x		Disable
>> ...
>>
>> when i click on a rule to edit it this comes up:
>>
>> Rule file cannot be found
>> (/etc/snort/rules/$RULE_PATH/attack-responses.rules)
>>
>> in "module config" everything seems fine:
>>
>> "Full path to Snort rule files directory" /etc/snort/rules
>>
>> where it definitely is..
>>
>> what could be the problem here?
>
> The module does not resolve the $RULE_PATH variable in the filename from  
> the
> snort config. I changed $RULE_PATH/ to be rules/ for each file in the  
> snort
> config file and it works fine now.
a bit rude.. ;) - jamie, could you fix this in a proper way?

regards,

PAT

Re: (jamie please have look) Re: [webmin-l] snort 2.1.0 and webmin module snort

[Jamie C. <jca...@we...>]

On Wed, 2004-09-22 at 22:09, Patrick Erler wrote:
> On Mon, 20 Sep 2004 08:31:20 -0500, Adam Kennedy  
> <ake...@ni...> wrote:
> >> i have a problem with snort 2.1.0 and the webmin module snort. when
> >> i  enter the module, every rule is displayed as:
> >>
> >> Rule Set				Status	Action	
> >> $RULE_PATH/attack-responses	 v		Disable
> >> $RULE_PATH/backdoor	 	 x		Disable
> >> ...
> >>
> >> when i click on a rule to edit it this comes up:
> >>
> >> Rule file cannot be found
> >> (/etc/snort/rules/$RULE_PATH/attack-responses.rules)
> >>
> >> in "module config" everything seems fine:
> >>
> >> "Full path to Snort rule files directory" /etc/snort/rules
> >>
> >> where it definitely is..
> >>
> >> what could be the problem here?
> >
> > The module does not resolve the $RULE_PATH variable in the filename from  
> > the
> > snort config. I changed $RULE_PATH/ to be rules/ for each file in the  
> > snort
> > config file and it works fine now.
> a bit rude.. ;) - jamie, could you fix this in a proper way?

You would need to talk to the author of the Snort module about this, as
it is not one of the core modules developed by me ..

 - Jamie