Topic: Snort/Acid - Guardian, ignore list not working

[Steven]

I installed Snort/Acid along with 'trevor-mitel-guardian-1.0-2.noarch.rpm'
I added my house IP to the guardian ignore file under /etc

I tried running a port scan from my house to make sure everything is working and received an email from the server notifying me that 'my' IP has been added to the blocked list  (for 24 hours!)  Did I need to restart guardian or snort after editing the ignore file?

Thanks for your suggestions!

[trevor]

yes.  you need to restart snort/guardian.

[Steven]

What all needs to be restarted?  How do you start the services back?  I would like to keep from rebooting the server, if I can.

Thanks

[Tom Veitch]

change to

/etc/rc.d/init.d/
snortd restart
guardiand start

[jasper]

try running th guardian_unblock script, might do it