Fix snort errormessage if no rules are present to check.

[people/pmueller/ipfire-2.x.git] / src / initscripts / init.d / snort

diff --git a/src/initscripts/init.d/snort b/src/initscripts/init.d/snort
index 2e2f4f2e40cb6bf514c29bf3f1ce1e0ff4183b87..544609434e529425d1305fa7723abf9105d43077 100644 (file)
--- a/src/initscripts/init.d/snort
+++ b/src/initscripts/init.d/snort
@@ -63,12 +63,14 @@ fi
 case "$1" in
         start)
                # Disable incompatible rules
-               for file in $(ls /etc/snort/rules/*.rules); do
+                boot_mesg "Check/Fix Intrusion Detection rules..."
+               for file in $(ls /etc/snort/rules/*.rules 2>/dev/null); do
                        sed -i 's|^alert.*!\[\$DNS_SERVERS|#&|g' $file
                        sed -i 's|^alert.*!\$SSH_PORTS|#&|g' $file
                        sed -i 's|^alert.*!\$HOME_NET|#&|g' $file
                        sed -i 's|^alert.*!\$SQL_SERVERS|#&|g' $file
                done
+               echo_ok
 
                 for DEVICE in $DEVICES; do
                         boot_mesg "Starting Intrusion Detection System on $DEVICE..."