Search found 294 matches

by axel2078
March 16th, 2013, 3:04 am
Forum: IPFire in General
Topic: [SOLVED] Blue0 interface does NOT work
Replies: 15
Views: 4963

Re: Blue0 interface does NOT work

Just noticed the below messages when doing a network restart. How can blue0 not exist if the system sees it and allows me to configure it? Bringing up the green0 interface... Adding IPv4 address 192.168.10.1 to the green0 interface...            [  OK  ] Bring...
by axel2078
March 16th, 2013, 12:47 am
Forum: IPFire in General
Topic: [SOLVED] Blue0 interface does NOT work
Replies: 15
Views: 4963

Re: Blue0 interface does NOT work

Dmesg has no entries for blue0, but here are some things I captured from /var/log/messages. I'm not sure what is meant by no subnet declared for blue0. It's set to 255.255.0.0 Mar 11 13:01:55 ipfire kernel: DROP_WirelessinputIN=blue0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:26:b0:df:97:88:08:00 SRC=0.0.0.0 DST...
by axel2078
March 14th, 2013, 10:15 pm
Forum: IPFire in General
Topic: [SOLVED] Blue0 interface does NOT work
Replies: 15
Views: 4963

Re: Blue0 interface does NOT work

Sorry, I should have provided more information. The blue0 NIC is connected to a switch, which is connected to a wireless access point via ethernet.
by axel2078
March 14th, 2013, 2:38 am
Forum: IPFire in General
Topic: [SOLVED] Blue0 interface does NOT work
Replies: 15
Views: 4963

[SOLVED] Blue0 interface does NOT work

I am helping a non-profit organization setup Ipfire as their firewall appliance and so far, it's been a bit embarrassing because the blue0 interface does not seem to work and they would like to get their guest wireless access up and running again. The Red and Green seems to work fine though. Everyth...
by axel2078
March 11th, 2013, 8:16 pm
Forum: IPFire in General
Topic: [SOLVED] no IDS logs??
Replies: 30
Views: 7904

Re: no IDS logs??

Update: This method worked for me too. I'm not sure why it was wasn't working when I was using the rules from Sourcefire VRT, but the EmergingThreats.net rules seem to be working just fine. The alert file is getting many events written to it now.
by axel2078
March 10th, 2013, 11:41 pm
Forum: Security
Topic: keine IDS Logdatei
Replies: 20
Views: 6545

Re: keine IDS Logdatei

Try removing your rules under /etc/snort/rules and then switch from Sourcefire VRT rules to EmergingThreats.net Community rules and then do an update for the rules. Snort should start writing to the alert after that. It worked for me and a few other users here.
by axel2078
March 10th, 2013, 4:03 pm
Forum: IPFire in General
Topic: [SOLVED] no IDS logs??
Replies: 30
Views: 7904

Re: no IDS logs??

Hey ya´ll! Thats what I did and worked fine. WebGUI: Disabled snort Putty: deleted ALL rules (/etc/snort/rules/*) Reboot! WebGUI: update rules using emerging WebGUI: Enable snort. So far so good! More logs and more rules, don´t know why... I just tried this myself. We'll see what happens...
by axel2078
March 10th, 2013, 3:23 pm
Forum: Development
Topic: IDS Not Working after core 66 update
Replies: 17
Views: 5026

Re: IDS Not Working after core 66 update

I´m back from the dead... after a Car Accident, I´m ALIVE! Now back to the support... After a few "checks" I ended up doing this: By the WebGUI, I stoped and disabled Intrusion Dectection System With putty, I entered the rules folder, /etc/snort/rules and deleted everything. Now, rebooted...
by axel2078
March 8th, 2013, 7:47 pm
Forum: IPFire in General
Topic: [SOLVED] no IDS logs??
Replies: 30
Views: 7904

Re: no IDS logs??

Can anyone verify what the ownership of the files in the main snort directory should be (where the snort.conf and log files are)? Mine are all set to nobody:nobody. Is that correct? Should they be owned by a different user such as root or snort? Edit: Can someone also verify whether the section in s...
by axel2078
March 8th, 2013, 3:31 pm
Forum: IPFire in General
Topic: When will the captive portal on IPFire? Is there an alternative?
Replies: 6
Views: 4538

Re: When will the captive portal on IPFire? Is there an alternative?

I realized this topic is a bit old, but has anything changed in this regard? Are there any plans at all to add a captive portal option to IPFire, even as an available add-on?
by axel2078
March 8th, 2013, 3:03 pm
Forum: IPFire in General
Topic: Question about Outgoing Firewall
Replies: 9
Views: 2314

Re: Question about Outgoing Firewall

Thank you for the confirmation. Might I suggest the following wording?: Mode 0: Using this mode, all clients are able to access the internet without any restrictions. Mode 1: Using this mode, all connections are blocked, except those that you specifically allow. Mode 2: Using this mode, all connect...
by axel2078
March 7th, 2013, 6:08 am
Forum: Development
Topic: IDS Not Working after core 66 update
Replies: 17
Views: 5026

Re: IDS Not Working after core 66 update

There are now several posts on this same topic, some of which are in the German section of the forum, but there are no clear answers as to what is causing this or how to fix it. This is frustrating.
by axel2078
March 7th, 2013, 5:53 am
Forum: Security
Topic: keine IDS Logdatei
Replies: 20
Views: 6545

Re: keine IDS Logdatei

My German is not good, so please excuse me posting in English. This seems to be a common problem with IPfire's version of snort. See these bug reports that were filed for the same issue. http://forum.ipfire.org/http://forum.ipfire.org//viewtopic.php?t=7 http://forum.ipfire.org/http://forum.ipfire.or...
by axel2078
March 6th, 2013, 5:24 am
Forum: Development
Topic: IDS Not Working after core 66 update
Replies: 17
Views: 5026

IDS Not Working after core 66 update

Yes, please post your results. Thanks.
by axel2078
March 5th, 2013, 9:01 pm
Forum: Development
Topic: IDS Not Working after core 66 update
Replies: 17
Views: 5026

Re: IDS Not Working after core 66 update

andremorro wrote:Lots of rules doesn´t work with squid 2.4.0,

try updating your rules from the snort archive.
this should help

Running fine here.


I don't understand this. What is meant by "update your rules from the snort archive"?