Forums

Resolved
0 votes
HI there,

for those people who like webmin (not webconfig) i have refound the snort-module for webmin.

google snort-1.1wbm

download it and rename it to snort-1.1.wbm.tar.

now you can install it via the webmin.

Beware one fix have to done to edit change the rulesets.

look @ /usr/libexec/webmin/snort

vi index.cgi

search for


($rule) = $ruleset =~ /[#]*(\S+)\.rules/;


change it to


($rule) = $ruleset =~ /\$RULE_PATH\/[#]*(\S+)\.rules/;


have fun with the webmin_snort-module

For those people have problem set up webmin-snort

config:
Full path to Snort executable (with options): /usr/sbin/snort -u snort -g snort -d -D -c /etc/snort/snort.conf
Full path to Snort configuration file: /etc/snort.conf
Full path to Snort rule files directory: /etc/snort
Full path to Snort PID file: /var/run/snort_ppp0.pid
Command to start Snort (optional): /etc/init.d/snort start
Tuesday, August 10 2010, 11:52 AM
Share this post:
Responses (7)
  • Accepted Answer

    Jeck
    Jeck
    Offline
    Monday, December 13 2010, 08:35 AM - #Permalink
    Resolved
    0 votes
    it does not work
    The reply is currently minimized Show
  • Accepted Answer

    Monday, December 13 2010, 09:38 AM - #Permalink
    Resolved
    0 votes
    that's extremely unhelpful... :(

    How about providing some detail of where your attempt failed so Wolfgang
    can either improve his instructions, or help debug what you did wrong.

    I suppose you dump your car at the Garage and simply say "It does not work" and walk away expecting the service guys to figure out what the problem is you want attended to... :)
    The reply is currently minimized Show
  • Accepted Answer

    Jeck
    Jeck
    Offline
    Monday, December 13 2010, 10:05 AM - #Permalink
    Resolved
    0 votes
    done with instructions on this page, and i can see only config window of module, if i press save button nothing happend... webmin-snort.diff from http://www.algonet.se/~beutner/apps/ does not help... on some forums i see phrases: "f***ing bug", it's sad :( as a result of search of decision how to make this module works i report "it does not work" :) maybe i pass something
    The reply is currently minimized Show
  • Accepted Answer

    Tuesday, December 14 2010, 06:19 AM - #Permalink
    Resolved
    0 votes
    has anyone else tried this and did it work ok?
    Thanks,
    George
    The reply is currently minimized Show
  • Accepted Answer

    Tuesday, December 14 2010, 12:29 PM - #Permalink
    Resolved
    0 votes
    Thx for feedback , take a look @ first post hope this helps, otherwise i will give you a download-link for snort-1.1.tar.gz unchanged.

    this will dislplayed to you
    http://nosoft.poweredbyclear.com/img/snort-webmin.JPG

    edit rules:
    http://nosoft.poweredbyclear.com/img/snort-webmin-rules.JPG
    The reply is currently minimized Show
  • Accepted Answer

    Jeck
    Jeck
    Offline
    Tuesday, December 14 2010, 12:54 PM - #Permalink
    Resolved
    0 votes
    Thank you, Wolfgang, after corecting last option it's work! my English is bad, i know :)
    one more question: if i will add some rules from webmin, will it take effect to auto block? auot block will work well?
    The reply is currently minimized Show
  • Accepted Answer

    Tuesday, February 19 2019, 04:05 AM - #Permalink
    Resolved
    0 votes
    Hi,

    i noticed that the discussion was in 2010, but I hope someone can reply to my answer. Currently I am using Snort 3. Is that possible to use this snort module with snort 3?

    Thank you.
    The reply is currently minimized Show
Your Reply