diff --git a/quick_fix.html b/quick_fix.html index 565aa1e..41ecc9c 100644 --- a/quick_fix.html +++ b/quick_fix.html @@ -32,6 +32,12 @@ Jack-Benny Persson By +Rev. 5 +2012-05-10 +Added solution to emerging threats rules +jackbenny + + Rev. 4 2012-05-09 Fixed headlines, TOC, marked code in gray etc @@ -64,6 +70,8 @@ Jack-Benny Persson
     Rules with flow:established won't work?
+     What about Emerging Threats rules? +
Thanks

Enable/disable rules bug

@@ -253,6 +261,10 @@ s/\, established\;/\;/g

Next time you'll run the update_rules.sh script it will remove flow:established from all of the rules!

+

What about Emerging Threats rules?

+

+I later realized that I also wanted to use some Emerging Threats rules with my pfSense/Snort box. The principle to get Emerging Threats rules to work is pretty much the same, except we won't use oinkmaster here. Instead we download the rules in our update script we create below. +

Thanks

I hope this could be useful to someone out there!