]>
git.ipfire.org Git - people/pmueller/ipfire-2.x.git/blob - src/initscripts/init.d/snort
2 ########################################################################
3 # Begin $rc_base/init.d/snort
5 # Description : Snort Initscript
7 # Authors : Michael Tremer for ipfire.org - mitch@ipfire.org
13 ########################################################################
18 PATH
=/usr
/local
/sbin
:/usr
/local
/bin
:/bin
:/usr
/bin
:/sbin
:/usr
/sbin
; export PATH
20 eval $
(/usr
/local
/bin
/readhash
/var
/ipfire
/ethernet
/settings
)
21 eval $
(/usr
/local
/bin
/readhash
/var
/ipfire
/snort
/settings
)
23 if [ "$ENABLE_SNORT_ORANGE" == "on" ]; then
24 HOME_NET
+="$ORANGE_ADDRESS,"
25 DEVICES
+="$ORANGE_DEV "
28 if [ "$ENABLE_SNORT_GREEN" == "on" ]; then
29 HOME_NET
+="$GREEN_ADDRESS,"
30 DEVICES
+="$GREEN_DEV "
33 if [ "$ENABLE_SNORT_BLUE" == "on" ]; then
34 HOME_NET
+="$BLUE_ADDRESS,"
38 if [ "$ENABLE_SNORT" == "on" ]; then
39 LOCAL_IP
=`cat /var/ipfire/red/local-ipaddress`
40 if [ "$LOCAL_IP" ]; then
41 HOME_NET
+="$LOCAL_IP,"
43 exit 1 ## Add error handling here
45 DEVICES
+=`cat /var/ipfire/red/iface 2>/dev/null`
48 COUNT
=`echo $HOME_NET | wc -m`
49 HOME_NET
=`echo $HOME_NET | cut -c $[$COUNT - 2]`
51 echo "var HOME_NET [$HOME_NET]" > /etc
/snort
/vars
52 echo "var EXTERNAL_NET ANY" >> /etc
/snort
/vars
54 DNS1
=`cat /var/ipfire/red/dns1 2>/dev/null`
55 DNS2
=`cat /var/ipfire/red/dns2 2>/dev/null`
58 echo "var DNS_SERVERS [$DNS1,$DNS2]" >> /etc
/snort
/vars
60 echo "var DNS_SERVERS $DNS1" >> /etc
/snort
/vars
65 for DEVICE
in $DEVICES; do
66 boot_mesg
"Starting Intrusion Detection System on $DEVICE..."
67 /usr
/sbin
/snort
-c /etc
/snort
/snort.conf
-i $DEVICE -D -l /var
/log
/snort
--create-pidfile --nolock-pidfile --pid-path /var
/run
/
69 chmod 644 /var
/run
/snort_
$DEVICE.pid
73 if [ -r /var
/ipfire
/guardian
/enable ]; then
74 IFACE
=`/bin/cat /var/ipfire/red/iface 2>/dev/null | /usr/bin/tr -d '\012'`
75 sed -e "s/^Interface.*/Interface ${IFACE}/" /var
/ipfire
/guardian
/guardian.conf
> temp
76 mv temp
/var
/ipfire
/guardian
/guardian.conf
78 boot_mesg
"Starting Guardian..."
79 loadproc
/usr
/local
/bin
/guardian.pl
-c /var
/ipfire
/guardian
/guardian.conf
85 if [ -r /var
/run
/snort_
$BLUE_DEV.pid
]; then
89 if [ -r /var
/run
/snort_
$GREEN_DEV.pid
]; then
90 DEVICES
+="$GREEN_DEV "
93 if [ -r /var
/run
/snort_
$ORANGE_DEV.pid
]; then
94 DEVICES
+="$ORANGE_DEV "
97 RED
=`cat /var/ipfire/red/iface 2>/dev/null`
98 if [ -r /var
/run
/snort_
$RED.pid
]; then
99 DEVICES
+=`cat /var/ipfire/red/iface 2>/dev/null`
102 for DEVICE
in $DEVICES; do
103 boot_mesg
"Stopping Intrusion Detection System on $DEVICE..."
104 killproc
-p /var
/run
/snort_
$DEVICE.pid
/var
/run
107 rm /var
/run
/snort_
* >/dev
/null
2>/dev
/null
109 if [ -r /var
/ipfire
/guardian
/enable ]; then
110 boot_mesg
"Stopping Guardian..."
111 killproc
/usr
/local
/bin
/guardian.pl
116 statusproc
/usr
/sbin
/snort
125 echo "Usage: $0 {start|stop|restart|status}"
130 # End $rc_base/init.d/snort