[Snort-users] [Snort-sigs] Snort.conf updates have been posted

AllowOverride allowoverride at ...11827...
Tue Oct 9 16:09:36 EDT 2012


thanks joel. appreciated.

On Tue, 2012-10-09 at 15:58 -0400, Joel Esler wrote:
> No.  However, these changes happen so infrequently that I make sure I
> post about them on the mailing lists and on the blog.  I've got a
> couple more updates to do with regards to ports, and I'll try and get
> those knocked out soon.  But NO Pulledpork does NOT presently alter
> your Snort.conf for you.  If that's a feature request you'd like to
> make, please do so on the pulledpork website.  In the future we
> anticipate updates like these to be unnecessary, but for the time
> being, they are needed.
> 
> 
> --
> Joel Esler
> Senior Research Engineer, VRT
> OpenSource Community Manager
> Sourcefire
> 
> 
> 
> 
> 
> 
> 
> On Oct 9, 2012, at 3:52 PM, AllowOverride <allowoverride at ...11827...>
> wrote:
> 
> > pulledpork, should take care of this correct?
> > 
> > thanks for the heads up joel.
> > 
> > On Tue, 2012-10-09 at 15:46 -0400, Joel Esler wrote:
> > > 
> > > http://blog.snort.org/2012/10/sourcefire-vrt-certified-snort-rules_9.html
> > > 
> > > 
> > > The following changes were made to the snort.conf:
> > > 
> > > portvar
> > > HTTP_PORTS
> > > [80,81,311,591,593,901,1220,1414,1741,1830,2301,2381,2809,3128,3702,4343,4848,5250,7001,7145,7510,7777,7779,8000,8008,8014,8028,8080,8088,8090,8118,8123,8180,8181,8243,8280,8800,8888,8899,9000,9080,9090,9091,9443,9999,11371,55555] 
> > > 
> > > now reads:
> > > 
> > > portvar
> > > HTTP_PORTS
> > > [80,81,311,591,593,901,1220,1414,1741,1830,2301,2381,2809,3128,3702,4343,4848,5250,7001,7145,7510,7777,7779,8000,8008,8014,8028,8080,8088,8090,8118,8123,8180,8181,8243,8280,8800,8888,8899,9000,9060,9080,9090,9091,9443,9999,11371,55555] 
> > > 
> > > (Addition of 9060)
> > > 
> > > The port was also added to stream5 and http_inspect's
> > > configuration
> > > lines.
> > > 
> > > I have updated the example snort.conf's, they can be found here: 
> > > http://www.snort.org/vrt/snort-conf-configurations/
> > > 
> > > 
> > > Thanks!
> > > 
> > > 





More information about the Snort-users mailing list