PDA

View Full Version : something about snor rules import

shaojz2005
08-26-2008, 01:58 AM
Hello!
I have an IPS running snort.I've defined many rules on it.Can I import them into untangle?I mean,import them all at once automatically
I've read this thread
http://forums.untangle.com/showthread.php?t=4290&highlight=snort
It that means I can copy the rule files in snort to untangle?How can I visit the files and directory in untangle?I'm waiting for your help!

Sorry for poor English.Hope you can understand:(
shaojz2005
08-26-2008, 06:49 PM
help me.....
mdh
08-26-2008, 06:55 PM
You will have to do them one by one.
shaojz2005
08-26-2008, 07:43 PM
but i've found the rules directory.Can't i copy my rules files into the directory and find some ways to load them?
sky-knight
08-27-2008, 02:08 AM
It isn't a matter of copying files. Everything that UT has in its configuration is in the postgres database. If you stuff files into the structure they will simply be lost when the thing resweeps the configuration. You'd have to get the rules into the database and work from there.
shaojz2005
08-29-2008, 01:05 AM
Can you tell me how to "get the rules into the database"?
juank
08-29-2008, 07:02 AM
Can you tell me how to "get the rules into the database"?

It's not that easy... Have you compared your rules with the rules that the SNORT in Untangle is providing to you by default? I guarantee you there is not a big difference.... :twocents: