From: Stefan Schantl Date: Tue, 29 Jan 2019 07:26:15 +0000 (+0100) Subject: IDS: Install snort to suricata converter X-Git-Tag: v2.23-core131~117^2~104 X-Git-Url: http://git.ipfire.org/?p=ipfire-2.x.git;a=commitdiff_plain;h=85a62b05237a4087c9b80d0efadc71b2da45abfa IDS: Install snort to suricata converter Signed-off-by: Stefan Schantl --- diff --git a/config/rootfiles/common/configroot b/config/rootfiles/common/configroot index 5115f7e942..4c9f6fb62b 100644 --- a/config/rootfiles/common/configroot +++ b/config/rootfiles/common/configroot @@ -1,6 +1,7 @@ usr/sbin/convert-dmz usr/sbin/convert-outgoingfw usr/sbin/convert-portfw +usr/sbin/convert-snort usr/sbin/convert-xtaccess usr/sbin/firewall-policy #var/ipfire diff --git a/lfs/configroot b/lfs/configroot index 4c99bded34..6f4dbd4596 100644 --- a/lfs/configroot +++ b/lfs/configroot @@ -134,6 +134,9 @@ $(TARGET) : echo "POLICY=MODE2" >> $(CONFIG_ROOT)/firewall/settings echo "POLICY1=MODE2" >> $(CONFIG_ROOT)/firewall/settings + # Install snort to suricata converter. + cp $(DIR_SRC)/config/suricata/convert-snort /usr/sbin/convert-snort + # Add conntrack helper default settings for proto in FTP H323 IRC SIP TFTP; do \ echo "CONNTRACK_$${proto}=on" >> $(CONFIG_ROOT)/optionsfw/settings; \