[7.904][BUG][FIXED] No connections after Snort activation since tonight

Since today morning i have a problem with IPS.

My IPS is normaly activated, since tomorrow no connections are possible with activated IPS.

Here is the log after a IPS restart.

Regards
Robert

Parents

0 Microsaft over 15 years ago

Same here...

Last line at IPS log = FATAL ERROR: /etc/snort/rules/astaro.rules(443) Unknown rule option: 'ssl_state'.

...an no connection possible till IPS disabled
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Sascha Paris over 15 years ago in reply to Microsaft

Fascinating. Same issue here. Disabled IPS and everything is working again.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Copyright over 15 years ago in reply to Sascha Paris

The same issue here...disabling IPS reenables traffic flow again.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Reply

0 Copyright over 15 years ago in reply to Sascha Paris

The same issue here...disabling IPS reenables traffic flow again.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Children

0 Microsaft over 15 years ago in reply to Copyright
It looks like that the last IPS update has some failure.

After the up2date ...
id="371Z" severity="info" sys="system" sub="up2date" name="Successfully installed Up2Date package" status="success" action="install" package_version="7.171" package="ips"

... no connection where possible
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel