Koozali.org: home of the SME Server

Legacy Forums => Experienced User Forum => Topic started by: Steven on August 09, 2002, 08:33:02 AM

Title: Snort/Acid - Guardian, ignore list not working
Post by: Steven on August 09, 2002, 08:33:02 AM

I installed Snort/Acid along with 'trevor-mitel-guardian-1.0-2.noarch.rpm'
I added my house IP to the guardian ignore file under /etc

I tried running a port scan from my house to make sure everything is working and received an email from the server notifying me that 'my' IP has been added to the blocked list  (for 24 hours!)  Did I need to restart guardian or snort after editing the ignore file?

Thanks for your suggestions!

Title: Re: Snort/Acid - Guardian, ignore list not working
Post by: trevor on August 09, 2002, 11:08:29 PM

yes.  you need to restart snort/guardian.

Title: Re: Snort/Acid - Guardian, ignore list not working
Post by: Steven on August 10, 2002, 09:39:41 AM

What all needs to be restarted?  How do you start the services back?  I would like to keep from rebooting the server, if I can.

Thanks

Title: Re: Snort/Acid - Guardian, ignore list not working
Post by: Tom Veitch on August 10, 2002, 11:18:49 AM

change to

/etc/rc.d/init.d/
snortd restart
guardiand start

Title: Re: Snort/Acid - Guardian, ignore list not working
Post by: jasper on August 12, 2002, 06:03:30 AM

try running th guardian_unblock script, might do it