Koozali.org: home of the SME Server

snort-acid with guardian module problem

Molski

snort-acid with guardian module problem
« on: February 12, 2003, 12:11:48 PM »
On my SME v5.6 server, I have installed snort-acid with the guardian module. But now the problems begin, when I click on a link of my homepage to go to my webmail I get blocked by guardian. How is it possible that I get blocked when I click on my webmail link ? This problem has happened also a while ago with guardian on my 5.5 server. Trusting the adresses in guardian is no options cause some of the PC's I use to enter my webmail gets every time a new IP adress (I use dial-in on this PC's, they are not dedicated, so the adresses change every time I login. Is there an option or something like that to make sure I don't get blocked anymore when I try to access my webmail ? And HOW can I stop the guardian module from starting when I reboot my server ?

My regards,

Molski

flip

Re: snort-acid with guardian module problem
« Reply #1 on: February 12, 2003, 07:54:29 PM »
rpm -e trevor-mitel-guardian

this removes guardian.

jeroen

Re: snort-acid with guardian module problem
« Reply #2 on: February 13, 2003, 11:24:52 AM »
Latest version of guardian is very itchy it seems

jeroen

Molski

Re: snort-acid with guardian module problem
« Reply #3 on: February 13, 2003, 12:07:13 PM »
I don't think it has something to do with the guardian module. I had it with guardian on a 5.5 server and now on my 5.6 server. Maybe is there some way to let guardian ignore the webmail stuff, so that I couldn't be blocked anymore when I access the webmail ?

Molski

RayG

Re: snort-acid with guardian module problem
« Reply #4 on: February 21, 2003, 03:30:03 AM »
Have you tried adding your webmail servers ip address to the guardian.ignore file in /etc ?