]>
git.ipfire.org Git - ipfire-2.x.git/blob - src/initscripts/init.d/snort
d22cbc4e61faf09ca9631815ccd8c7bbee822315
2 ########################################################################
3 # Begin $rc_base/init.d/snort
5 # Description : Snort Initscript
7 # Authors : Michael Tremer for ipfire.org - mitch@ipfire.org
13 ########################################################################
18 PATH
=/usr
/local
/sbin
:/usr
/local
/bin
:/bin
:/usr
/bin
:/sbin
:/usr
/sbin
; export PATH
20 eval $
(/usr
/local
/bin
/readhash
/var
/ipfire
/ethernet
/settings
)
21 eval $
(/usr
/local
/bin
/readhash
/var
/ipfire
/snort
/settings
)
25 if [ "$BLUE_NETADDRESS" ]; then
26 BLUE_NET
="$BLUE_NETADDRESS/$BLUE_NETMASK,"
27 BLUE_IP
="$BLUE_ADDRESS,"
30 if [ "$ORANGE_NETADDRESS" ]; then
31 ORANGE_NET
="$ORANGE_NETADDRESS/$ORANGE_NETMASK,"
32 ORANGE_IP
="$ORANGE_ADDRESS,"
35 if [ "$ENABLE_SNORT_ORANGE" == "on" ]; then
36 DEVICES
+="$ORANGE_DEV "
39 HOMENET
+="$ORANGE_NET"
42 if [ "$ENABLE_SNORT_BLUE" == "on" ]; then
49 if [ "$ENABLE_SNORT_GREEN" == "on" ]; then
50 DEVICES
+="$GREEN_DEV "
51 HOMENET
+="$GREEN_ADDRESS,"
53 HOMENET
+="$GREEN_NETADDRESS/$GREEN_NETMASK,"
56 if [ "$ENABLE_SNORT" == "on" ]; then
57 DEVICES
+=`cat /var/ipfire/red/iface 2>/dev/null`
58 LOCAL_IP
=`cat /var/ipfire/red/local-ipaddress 2>/dev/null`
59 if [ "$LOCAL_IP" ]; then
64 echo "var HOME_NET [$HOMENET]" > /etc
/snort
/vars
66 DNS1
=`cat /var/ipfire/red/dns1 2>/dev/null`
67 DNS2
=`cat /var/ipfire/red/dns2 2>/dev/null`
70 echo "var DNS_SERVERS [$DNS1,$DNS2]" >> /etc
/snort
/vars
72 echo "var DNS_SERVERS $DNS1" >> /etc
/snort
/vars
75 for DEVICE
in $DEVICES; do
76 boot_mesg
"Starting Intrusion Detection System on $DEVICE..."
77 /usr
/sbin
/snort
-c /etc
/snort
/snort.conf
-i $DEVICE -D -l /var
/log
/snort
--create-pidfile --nolock-pidfile --pid-path /var
/run
/
80 chmod 644 /var
/run
/snort_
$DEVICE.pid
84 if [ -r /var
/ipfire
/guardian
/enable ]; then
85 IFACE
=`/bin/cat /var/ipfire/red/iface 2>/dev/null | /usr/bin/tr -d '\012'`
86 sed -e "s/^Interface.*/Interface ${IFACE}/" /var
/ipfire
/guardian
/guardian.conf
> temp
87 mv temp
/var
/ipfire
/guardian
/guardian.conf
88 chown nobody.root
/var
/ipfire
/guardian
/guardian.conf
90 boot_mesg
"Starting Guardian..."
91 loadproc
/usr
/local
/bin
/guardian.pl
-c /var
/ipfire
/guardian
/guardian.conf
97 if [ -r /var
/run
/snort_
$BLUE_DEV.pid
]; then
101 if [ -r /var
/run
/snort_
$GREEN_DEV.pid
]; then
102 DEVICES
+="$GREEN_DEV "
105 if [ -r /var
/run
/snort_
$ORANGE_DEV.pid
]; then
106 DEVICES
+="$ORANGE_DEV "
109 RED
=`cat /var/ipfire/red/iface 2>/dev/null`
110 if [ -r /var
/run
/snort_
$RED.pid
]; then
111 DEVICES
+=`cat /var/ipfire/red/iface 2>/dev/null`
114 for DEVICE
in $DEVICES; do
115 boot_mesg
"Stopping Intrusion Detection System on $DEVICE..."
116 killproc
-p /var
/run
/snort_
$DEVICE.pid
/var
/run
119 rm /var
/run
/snort_
* >/dev
/null
2>/dev
/null
121 if [ -r /var
/ipfire
/guardian
/enable ]; then
122 boot_mesg
"Stopping Guardian..."
123 killproc
/usr
/local
/bin
/guardian.pl
126 # Don't report returncode of rm if snort was not started
131 statusproc
/usr
/sbin
/snort
140 echo "Usage: $0 {start|stop|restart|status}"
145 chmod 644 /var
/log
/snort
/* 2>/dev
/null
147 # End $rc_base/init.d/snort