From fd3e6cb901d69ae14a074fc9c4caada72335f091 Mon Sep 17 00:00:00 2001 From: Jack-Benny Persson Date: Wed, 9 May 2012 03:36:17 +0200 Subject: [PATCH] Revision 5, first commit --- quick_fix.html | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/quick_fix.html b/quick_fix.html index 565aa1e..41ecc9c 100644 --- a/quick_fix.html +++ b/quick_fix.html @@ -32,6 +32,12 @@ Jack-Benny Persson By +Rev. 5 +2012-05-10 +Added solution to emerging threats rules +jackbenny + + Rev. 4 2012-05-09 Fixed headlines, TOC, marked code in gray etc @@ -64,6 +70,8 @@ Jack-Benny Persson
     Rules with flow:established won't work?
+     What about Emerging Threats rules? +
Thanks

Enable/disable rules bug

@@ -253,6 +261,10 @@ s/\, established\;/\;/g

Next time you'll run the update_rules.sh script it will remove flow:established from all of the rules!

+

What about Emerging Threats rules?

+

+I later realized that I also wanted to use some Emerging Threats rules with my pfSense/Snort box. The principle to get Emerging Threats rules to work is pretty much the same, except we won't use oinkmaster here. Instead we download the rules in our update script we create below. +

Thanks

I hope this could be useful to someone out there!