should the message (see below) be like it is? [:)]
Robert
2011:07:07-17:59:02 firewall-1 snort[8881]: Global Alert Threshold: 25
2011:07:07-17:59:02 firewall-1 snort[8881]: Masked Output: DISABLED
2011:07:07-17:59:02 firewall-1 snort[8881]:
2011:07:07-17:59:02 firewall-1 snort[8881]: +++++++++++++++++++++++++++++++++++++++++++++++++++
2011:07:07-17:59:02 firewall-1 snort[8881]: Initializing rule chains...
2011:07:07-17:59:02 firewall-1 snort[8881]: FATAL ERROR: /etc/snort/rules/astaro.rules(870) Rule options must be enclosed in '(' and ')'.
2011:07:07-18:00:10 firewall-1 snort[9300]: Enabling inline operation
2011:07:07-18:00:10 firewall-1 snort[9300]: Running in IDS mode
