Wed, Aug 01, 2018 at 08:37:03AM +0000, Nick Nauwelaerts: > hm, > i actually like to have those versions in the output. if something breaks my > first reaction tends to be: "what changed?", and rancid is usually the first > place i check. > > would it be an option to control this with FILTER_OSC , even though its not > quite it's intended application?
Could be; what are they? version stamp of what exactly? > thx > > // nick > > > From: Rancid-discuss [mailto:rancid-discuss-boun...@shrubbery.net] On Behalf > Of Doug Hughes > Sent: Tuesday, July 31, 2018 23:18 > To: rancid-discuss@shrubbery.net > Subject: Re: [rancid] Fortigate additional tweaks and device filters > > > > > On 7/31/2018 5:14 PM, heasley wrote: > > Fri, Jul 27, 2018 at 08:02:28AM -0500, Chris Wopat: > > Hi Heasley and folks, > > > > Sept 2017 i sent a note in with some proposed tweaks to a Fortigate. to > > filter out some additional chattiness, see: > > > > http://www.shrubbery.net/pipermail/rancid-discuss/2017-September/009871.html > > http://www.shrubbery.net/pipermail/rancid-discuss/2017-June/009643.html > > > > A few people chimed in seeming to be OK with the propsed changes, which are > > to filter these things: > > > > next if (/^\s*IPS-ETDB: .*/); > > next if (/^\s*APP-DB: .*/); > > next if (/^\s*IPS Malicious URL Database: .*/); > > next if (/^\s*Botnet DB: .*/); > > > > Mentioning this as 3.8 came out and i didn't notice any of these included. > > > > We have an additional fortigate tweak we make every time we update too, > > which to change from 'show full-configuration' to just 'show' in > > @commandtable. 'full-configuration' shows default config, just like the > > cisco 'full' command. It's really not necessary IMO. > > > > This is from: > > r2258 | heas | 2010-10-11 20:49:05 +0000 (Mon, 11 Oct 2010) | 3 lines > > > > fnrancid: update recent fortinet software - Diego Ercolani > > Cleaned-up a little by me. > > > > afaict, the justification for full-configuration was so that VDOMs would > > be included in the output. perhaps this behavior has changed since this > > change?? I have none of these devices. > > I think you are right.. I have a vague recollection of this as well. > -- > Doug Hughes > Keystone NAP > Fairless Hills, PA > 1.844.KEYBLOCK (439.2562) > > [http://www.keystonenap.com/wp-content/themes/keystoneNAP/images/keystone-nap-logo.png] > > > > ________________________________ > > Volg Aquafin op Facebook<https://www.facebook.com/AquafinNV> | > Twitter<https://twitter.com/aquafinnv> | > YouTube<http://www.youtube.com/channel/UCk_4P5BJ-MtEEDCkCsR_KqQ?feature=mhee> > | LinkedIN<http://www.linkedin.com/company/aquafin/products> > > In het kader van de uitoefening van onze taken verzamelen we bij Aquafin > persoonsgegevens. Hoe we omgaan met deze gegevens en wat de rechten van de > betrokkenen zijn, kan je nalezen in onze privacy > policy<https://www.aquafin.be/nl-be/privacy-policy>. > > [https://www.aquafin.be/sites/aquafin/files/styles/paragraph_with_caption/public/2018-06/email_banner_web.jpg]<https://www.aquafin.be/> > P Denk aan het milieu. Druk deze mail niet onnodig af. > _______________________________________________ > Rancid-discuss mailing list > Rancid-discuss@shrubbery.net > http://www.shrubbery.net/mailman/listinfo/rancid-discuss _______________________________________________ Rancid-discuss mailing list Rancid-discuss@shrubbery.net http://www.shrubbery.net/mailman/listinfo/rancid-discuss
