Snort mailing list archives

Re: Error 404 when fetching community rules checksum


From: "Joel Esler (jesler)" <jesler () cisco com>
Date: Thu, 29 Oct 2015 16:19:41 +0000

Those personnel (15k of you) that were downloading directly from S3 (don’t do that), were downloading from an older S3 
bucket, which we haven’t updated in at least 2 years since the transition off of the old website.  So you haven’t been 
getting any new community rules during that time.  We shut it off yesterday, and I was kinda waiting to see if anyone 
would notice.

Waldo posted the correct link you should be using below.   Please use the links through Snort.org<http://snort.org>, 
and don’t go directly to S3 to future proof your rules access.  I’ll put a blog post up.

--
Joel Esler
Manager, Talos Group




On Oct 29, 2015, at 12:10 PM, Doug Burks <doug.burks () gmail com<mailto:doug.burks () gmail com>> wrote:

On Thu, Oct 29, 2015 at 11:26 AM,  <wkitty42 () windstream net<mailto:wkitty42 () windstream net>> wrote:
On 10/29/2015 11:14 AM, Spencer Brewer wrote:
                Error 404 when fetching
https://s3.amazonaws.com/snort-org/www/rules/community/community-rules.tar.gz.md5 at
/usr/local/bin/pulledpork.pl <http://pulledpork.pl> line 463


Has the URL changed

yes...

  https://www.snort.org/downloads/community/community-rules.tar.gz

As far as I know, Community Rules downloads from Amazon S3 using the
URL above worked fine until today.

Have the Community Rules officially been moved off of S3?

Was there some official notice about this that I missed?

Seems like lots of PulledPork users will have failed downloads today:
https://github.com/shirkdog/pulledpork/blob/master/etc/pulledpork.conf#L21

Thanks!

--
Doug Burks

------------------------------------------------------------------------------
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

------------------------------------------------------------------------------
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Current thread: