G+_Adam EL-Idrissi Posted February 19, 2015 Share Posted February 19, 2015 David Wiggins? I took these yesterday. Is this what you're talking about? Or is there something missing in the Wan rules? I'll have to look at that link at lunch. Link to comment Share on other sites More sharing options...
G+_David Wiggins Posted February 19, 2015 Share Posted February 19, 2015 I may have part of your problem figured out. If you have the oinkcode from the free member rules, you only need that option checked off, so deselect the other three options. It is trying to look at multiple installed rulesets. I'll take another look after I get home from work. Link to comment Share on other sites More sharing options...
G+_Adam EL-Idrissi Posted February 19, 2015 Author Share Posted February 19, 2015 I originally had just the free version selected but it was still giving the warning and saying no interface was selected. Link to comment Share on other sites More sharing options...
G+_David Wiggins Posted February 20, 2015 Share Posted February 20, 2015 On the WAN Rules, page, It doesn't have any defined, and that is also the warning showing on the interfaces tab. If I remember correctly, I had to go to the Updates tab, force the snort VRT rules to update, then you will have a dropdown on the WAN categories tab of the snort interface: I chose connectivity, I'll get alerts, but will manually configure firewall rules to block. Essentially, the oinkcode rules need to be downloaded, chosen, then applied. Link to comment Share on other sites More sharing options...
G+_Adam EL-Idrissi Posted February 20, 2015 Author Share Posted February 20, 2015 It wouldn't update automatically once the code was put in. I tried to force it but that gave me errors. The wan rules, where do I get those from? Link to comment Share on other sites More sharing options...
G+_Adam EL-Idrissi Posted February 20, 2015 Author Share Posted February 20, 2015 I see now from your picture. I'll have to play with it when I get off work. Link to comment Share on other sites More sharing options...
Recommended Posts