This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Custom IDS rules coming?

Hi,

With the latest IE zero day threat out , it sure would be nice to have the ability once again to create a custom rule.

Any idea when this feature will be added back?

Thanks

-Scott

This thread was automatically locked due to age.

0 Marcel_Germany over 16 years ago

At CVS log for sigs/CURRENT_EVENTS/CURRENT_IE_0Day

there are SNORT rules mentioned. How to insert them into the ASG?
Cancel
Vote Up 0 Vote Down

Cancel
0 William Warren over 16 years ago in reply to Marcel_Germany

At CVS log for sigs/CURRENT_EVENTS/CURRENT_IE_0Day

there are SNORT rules mentioned. How to insert them into the ASG?

you can't right now unless you head to the command line as astaro has not returned the long promised custom rules to us yet.
Cancel
Vote Up 0 Vote Down

Cancel
0 cotto over 16 years ago in reply to William Warren

How can you create own snort-rules on the command line? Astaro-Support says, its not possible!
Cancel
Vote Up 0 Vote Down

Cancel
0 cotto over 16 years ago in reply to cotto

nobody an idea?
Cancel
Vote Up 0 Vote Down

Cancel
0 Simon Shaw over 16 years ago in reply to cotto

Wait till the next version. I believe it may be in 7.5 but please check.
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 16 years ago in reply to Simon Shaw

Well, it certainly isn't in the beta for 7.5. It could be added into an interim release after that.
Cancel
Vote Up 0 Vote Down

Cancel
0 Joe_Halleck over 15 years ago in reply to Scott_Klassen

Did this finally happen?
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 15 years ago

Unfortunately not.
You can vote for it at
make own snort rules possible

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 Joe_Halleck over 15 years ago in reply to BarryG

I voted. I know this would not be supported but is there anyway to alter the defined rules at the console by updating a config file of some sort manually?
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 15 years ago

You could try creating a 'local.rules' for Snort, but it might get overwritten by Astaro.

Barry
Cancel
Vote Up 0 Vote Down

Cancel