Results 1 to 8 of 8
  1. #1
    Newbie
    Join Date
    Sep 2018
    Posts
    3

    Default FATAL ERROR: /etc/snort/snort.conf(45) Missing argument to HOME_NET

    Hello,

    I've been running Untangle with no issues for a while now. I recently spotted that the intrusion detection app was red, and listed 'Intrusion Prevention is enabled but is not active.'

    The following is listed in the logs ;

    Sep 17 14:56:46 untangle snort[75240]: Starting Network Intrusion Detection System : snort (ppp0:eth0:ppp1 using /etc/snort/snort.conf ...ERROR: failed (check /var/log/daemon.log, /var/log/syslog and /var/log/snort/)) failed!
    Sep 17 14:56:46 untangle snort[75250]: FATAL ERROR: /etc/snort/snort.conf(45) Missing argument to HOME_NET
    Sep 17 14:56:45 untangle snort[75250]: Parsing Rules file "/etc/snort/snort.conf"
    Sep 17 14:56:45 untangle snort[75250]: Initializing Plug-ins!
    Sep 17 14:56:45 untangle snort[75250]: Initializing Preprocessors!
    Sep 17 14:56:45 untangle snort[75250]: Initializing Output Plugins!
    Sep 17 14:56:45 untangle snort[75250]: --== Initializing Snort ==--
    Sep 17 14:56:45 untangle snort[75250]:
    Sep 17 14:56:45 untangle snort[75250]: Running in IDS mode
    Sep 17 14:56:45 untangle snort[75250]: Enabling inline operation
    Sep 17 13:56:41 untangle snort[67033]: Starting Network Intrusion Detection System : snort (ppp0:eth0:ppp1 using /etc/snort/snort.conf ...ERROR: failed (check /var/log/daemon.log, /var/log/syslog and /var/log/snort/)) failed!
    Sep 17 13:56:41 untangle snort[67042]: FATAL ERROR: /etc/snort/snort.conf(45) Missing argument to HOME_NET
    Sep 17 13:56:40 untangle snort[67042]: Parsing Rules file "/etc/snort/snort.conf"
    Sep 17 13:56:40 untangle snort[67042]: Initializing Plug-ins!
    Sep 17 13:56:40 untangle snort[67042]: Initializing Preprocessors!
    Sep 17 13:56:40 untangle snort[67042]: Initializing Output Plugins!
    Sep 17 13:56:40 untangle snort[67042]: --== Initializing Snort ==--
    Sep 17 13:56:40 untangle snort[67042]:
    Sep 17 13:56:40 untangle snort[67042]: Running in IDS mode
    Sep 17 13:56:40 untangle snort[67042]: Enabling inline operation

    Untangle is version 14.0.1 on custom PC server, amd64 architecture, 4 Gb RAM, 250 Gb HD

    I would greatly appreciate your kind advice on fixing this.

    Many thanks

  2. #2
    Untangler
    Join Date
    Jul 2018
    Posts
    85

    Default

    I would simply backup the configuration, reinstall the OS from scratch (it's so fast to do) and restore the configuration. Have done this 4 times in the last 3 months because I changed hardware (hd to ssd etc). It works perfectly and takes 30mins tops.
    winterbrew likes this.

  3. #3
    Untangler jcoffin's Avatar
    Join Date
    Aug 2008
    Location
    Sunnyvale, CA
    Posts
    7,763

    Default

    I would first try removing the app and installing it again.
    Sam Graf and winterbrew like this.
    Attention: Support and help on the Untangle Forums is provided by
    volunteers and community members like yourself.
    If you need Untangle support please call or email support@untangle.com

  4. #4
    Master Untangler
    Join Date
    Feb 2016
    Location
    Michigan
    Posts
    658

    Default

    I would just add to jcoffin's suggestion that if you have changed the rules at all, you would want to consider exporting them before removing the app. You can import them if all else is well.
    winterbrew likes this.

  5. #5
    Newbie
    Join Date
    Sep 2018
    Posts
    3

    Default

    Quote Originally Posted by Sam Graf View Post
    I would just add to jcoffin's suggestion that if you have changed the rules at all, you would want to consider exporting them before removing the app. You can import them if all else is well.
    Thanks, I left the rules as default, so no worries.

    I removed the Intrusion Prevention app, and reinstalled it, and still get the same error, so looks like a system reinstall and restore configs is on the cards.

  6. #6
    Untangle Ninja
    Join Date
    Jan 2011
    Posts
    1,118

    Default

    there was a bug in this area, claims to have been fixed in 14.0.0 but you might be seeing a remnant of it:

    https://jira.untangle.com/browse/NGFW-12084
    winterbrew likes this.

  7. #7
    Newbie
    Join Date
    Sep 2018
    Posts
    3

    Default

    Just checked now, and its all working again with no intervention from me.

    I had also raised a support ticket, but no confirmation it has been solved.

    All good

  8. #8
    Master Untangler
    Join Date
    Feb 2016
    Location
    Michigan
    Posts
    658

    Default

    Interesting. I'm glad things are resolved. Thank you for the update.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

SEO by vBSEO 3.6.0 PL2