Thanks for the reply Holger I figured it out:
Just edit the 'template file' /usr/local/pkg/snort.inc so that it includes my modification when it regenerates the file. -Darren ------- pfSense rocks! -----Original Message----- From: Holger Bauer [mailto:[EMAIL PROTECTED] Sent: Thursday, December 07, 2006 7:49 PM To: [email protected] Subject: RE: [pfSense Support] SNORT.conf periodically overwritten That's the way pfSense works. Nearly all config files of any services are generated dynamically from the config.xml. Your config will be overwritten whenever it is needed due to things like IP-change, on reboot, chaged settings at webgui,... Holger -----Original Message----- From: Darren Cockburn [mailto:[EMAIL PROTECTED] Sent: Thursday, December 07, 2006 3:41 PM To: [email protected] Subject: [pfSense Support] SNORT.conf periodically overwritten Hi, I have made a few changes to snort.conf. I have added 'ignore_scanners' for $HOME_NET to prevent my whitelist from being blocked as 'talking port scanners' I have also removed a seemingly problematic comma at the end of $HOME_NET ip range. 10.x.x.x,]) Periodically I find that my changes have been overwritten by some automated process. I have attempted to chmod 444 snort.conf to prevent the overwriting - but it did not prevent it from being ovewritten. Any ideas? - Darren --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
