Snort mailing list archives
webmin $RULE_PATH issues FIX
From: "Christopher Lyon" <cslyon () netsvcs com>
Date: Wed, 23 Jul 2003 20:12:49 -0700
I don't know if this has been posted yet or not but I can just remember some people having problems with this issue. So here is goes. Anybody using Snort that has the 'var $RULE_PATH....' set in there snort.conf file and who also wants to use Webmin, this fix should solve the problem. If you can remember some of the posts before, the snort webmin module didn't handle the '$' very well and the way the original expression was written gave the following result on the snort webmin page: '$RULE_PATH/rulename'. So, the change to the expression in the index.cgi seems to have fixed the issue. You should just have the 'rulename' in the snort webmin page. change to index.cgi on line 54 You can usually find this under /usr/libexec/webmin/snort That is if you installed in using an RPM. Here is the diff for you. Note this is the only line that has changed: ($rule) = $ruleset =~ /(\w+-*\w+-*\w+).rules/; diff -c ./index.cgi.old ./index.cgi.new *** ./index.cgi.old 2003-07-23 01:06:58.000000000 -0700 --- ./index.cgi.new 2003-07-22 21:01:46.000000000 -0700 *************** *** 51,57 **** print "<br><font size=-1>$text{'index_rule_msg'}</font>" if ($access{'rules'} ne "*"); foreach $ruleset (@rulefiles) { ! ($rule) = $ruleset =~ /[#]*(\S+)\.rules/; # Check to see if user can access a given ruleset if ($access{'rules'} ne "*") { --- 51,57 ---- print "<br><font size=-1>$text{'index_rule_msg'}</font>" if ($access{'rules'} ne "*"); foreach $ruleset (@rulefiles) { ! ($rule) = $ruleset =~ /(\w+-*\w+-*\w+).rules/; # Check to see if user can access a given ruleset if ($access{'rules'} ne "*") { I have it working on a couple of sensors without any problems. ------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- webmin $RULE_PATH issues FIX Christopher Lyon (Jul 23)
- <Possible follow-ups>
- Re: webmin $RULE_PATH issues FIX scheidell (Jul 31)
- RE: webmin $RULE_PATH issues FIX Christopher Lyon (Jul 31)