snort: Introduce ruleset-sources.list

This file contains the ruleset vendors and download urls and
will be used by the ids.cgi.

If an url or filename changes, we easily can adjust this file. In most
cases this will be needed when performing a snort update.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>

diff --git a/config/rootfiles/common/snort b/config/rootfiles/common/snort
index c83b15697de73c23931193aca6a20466e24e887d..7da84b3bdb618f89282bb7967201979b3b453f58 100644 (file)
--- a/config/rootfiles/common/snort
+++ b/config/rootfiles/common/snort
@@ -232,4 +232,5 @@ usr/sbin/snort
 #usr/share/doc/snort/WISHLIST
 #usr/share/doc/snort/generators
 #usr/share/man/man8/snort.8
+var/ipfire/snort/ruleset-sources.list
 var/log/snort

diff --git a/config/snort/ruleset-sources.list b/config/snort/ruleset-sources.list
new file mode 100644 (file)
index 0000000..04fc2a9
--- /dev/null
+++ b/config/snort/ruleset-sources.list
@@ -0,0 +1,11 @@
+# Ruleset for registered sourcefire users.
+registered = https://www.snort.org/downloads/registered/snortrules-snapshot-29110.tar.gz?oinkcode=<oinkcode>
+
+# Ruleset for registered sourcefire users with valid subscription.
+subscripted = https://www.snort.org/downloads/registered/snortrules-snapshot-29110.tar.gz?oinkcode=<oinkcode>
+
+# Community rules from sourcefire.
+community = https://www.snort.org/downloads/community/community-rules.tar.gz
+
+# Emerging threads community rules.
+emerging = http://rules.emergingthreats.net/open/snort-2.9.0/emerging.rules.tar.gz

diff --git a/lfs/snort b/lfs/snort
index a5d0535b00dd45a60aca5de4920bb34a9b8f7ecd..83eba6c2e2ab459c8ae992c955d31bce47f47aec 100644 (file)
--- a/lfs/snort
+++ b/lfs/snort
@@ -99,5 +99,6 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
        chown -R nobody:nobody /etc/snort
        -mkdir -p /var/log/snort
        chown -R snort:snort /var/log/snort
+       install -m 0644 $(DIR_SRC)/config/snort/ruleset-sources.list /var/ipfire/snort
        @rm -rf $(DIR_APP) $(DIR_SRC)/snort*
        @$(POSTBUILD)