More snips from the system log: Aug 3 12:54:26 snort[48939]: FATAL ERROR: Unable to open rules file "/usr/local/etc/snort/snort_5152_fxp0//usr/local/etc/snort/suppress/LANsuppressList": No such file or directory. Aug 3 12:54:26 SnortStartup[49209]: Snort HARD Reload For 5152_fxp0... Aug 3 12:54:26 php: : Could not open /usr/local/etc/snort/suppress/ for writing. Aug 3 12:54:26 check_reload_status: Syncing firewall Aug 3 12:55:19 sshd[30260]: Accepted keyboard-interactive/pam for root from 161.44.192.58 port 53333 ssh2 Aug 3 12:56:15 check_reload_status: Syncing firewall Aug 3 12:56:16 php: /snort/snort_interfaces_suppress_edit.php: Could not open /usr/local/etc/snort/suppress/ for writing. Aug 3 12:56:16 check_reload_status: Syncing firewall Aug 3 12:56:22 check_reload_status: Syncing firewall Aug 3 12:56:22 php: /snort/snort_interfaces_suppress_edit.php: Could not open /usr/local/etc/snort/suppress/ for writing. Aug 3 12:56:23 check_reload_status: Syncing firewall Aug 3 12:56:35 check_reload_status: Syncing firewall Aug 3 12:56:35 php: /snort/snort_interfaces_suppress_edit.php: Could not open /usr/local/etc/snort/suppress/ for writing. Aug 3 12:56:36 check_reload_status: Syncing firewall Aug 3 12:59:37 check_reload_status: Syncing firewall Aug 3 12:59:37 php: /snort/snort_interfaces_suppress_edit.php: Could not open /usr/local/etc/snort/suppress/ for writing.
On Wed, Aug 3, 2011 at 1:11 PM, Ernst den Broeder <[email protected]> wrote: > > I am seeing this message in the system logs: > php: : Could not open /usr/local/etc/snort/suppress/ for writing. > > Here's the version info: > pfsense 2.0-RC3 (i386) (hard disk installation) > snort 2.8.6.1 pkg v. 1.34 > > Looking at the permissions of the directory: > drwxrwx--- 2 snort snort 512 Aug 3 11:40 suppress > > If I change permissions of this directory to 777, it reverts to 770 when I > click save after editing a suppression config file. > > Is this a known issue? > > regards, > Ernst > > > > > --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected] Commercial support available - https://portal.pfsense.org
