Yup. That is consistent with my findings. Think KFC serves up virgin chickens? If so, I'll get the dev gods a bucket!
In the meantime, I've stopped the snort service as it was getting ridiculous trying to edit all the offending rules. - Jason -----Original Message----- From: Richard Sperry [mailto:[EMAIL PROTECTED] Sent: Monday, December 03, 2007 8:32 AM To: [email protected] Cc: Jason J. Ellingson Subject: RE: RE: [pfSense Support] Snort It appears that the rules last week 11-29 work but the ones that are up today do not. -----Original Message----- From: Richard Sperry [mailto:[EMAIL PROTECTED] Sent: Monday, December 03, 2007 6:11 AM To: [email protected] Subject: RE: [pfSense Support] Snort Jason, I found the answer to this on the forum. The version of snort used is very out dated and doesn't like the UDP scanning. We need to either update the rules by hand, removing the references in the files or pray that one of the pfsense dev gods has mercy on us. Dear dev gods, Tonight I will sacrifice a virgin chicken in your names, please almighty ones shower us in your mercy. Please build us a new snort package. --Richard -----Original Message----- From: Jason J. Ellingson [mailto:[EMAIL PROTECTED] Sent: Monday, December 03, 2007 5:34 AM To: [email protected] Subject: [pfSense Support] Snort I'm having more problems with Snort now... I had it working fine. I unchecked all the rules it complained about... mostly those with: "Cannot check flow connection for non-TCP traffic" But as it updated the rules this week, it seems that I can't track down all the rules now making snort unhappy. Is there a way to get snort to just skip the rules it can't handle? Otherwise, since it keeps failing, I'll just have to uninstall it as it won't run until I deactivate all the offending rules. Thanks! - Jason --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
