Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 53645 - snortsam ebuild requested
Summary: snortsam ebuild requested
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: New packages (show other bugs)
Hardware: All Linux
: High enhancement (vote)
Assignee: Gentoo Netmon project
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2004-06-11 07:28 UTC by Patrizio Bassi
Modified: 2004-06-30 16:58 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---

Attachments
snortsam-2.24.ebuild (snortsam-2.24.ebuild,978 bytes, text/plain)
2004-06-14 07:14 UTC, Eldad Zack (RETIRED) 		Details
snortsam-2.24.ebuild (snortsam-2.24.ebuild,993 bytes, text/plain)
2004-06-14 09:01 UTC, Eldad Zack (RETIRED) 		Details
snortsam-2.24.ebuild (snortsam-2.24.ebuild,1007 bytes, text/plain)
2004-06-14 09:51 UTC, Eldad Zack (RETIRED) 		Details
snortsam-2.24.ebuild (snortsam-2.24.ebuild,1021 bytes, text/plain)
2004-06-14 10:19 UTC, Eldad Zack (RETIRED) 		Details
Show Obsolete (3) View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Patrizio Bassi 2004-06-11 07:28:51 UTC 
SnortSam is a plugin for Snort, an open-source light-weight Intrusion Detection System (IDS). The plugin allows for automated blocking of IP addresses on following firewalls: 

Checkpoint Firewall-1 
Cisco PIX firewalls 
Cisco Routers (using ACL's) 
Netscreen firewalls 
IP Filter (ipf), available for various Unix-like OS'es such as FreeBSD 
OpenBSD's Packet Filter (pf) 
Linux IPchains 
Linux IPtables 
Linux EBtables 
WatchGuard Firebox firewalls 
...and more to come... 

Reproducible: Always
Steps to Reproduce:
1.
2.
3.



Expected Results:  
new ebuild added
Comment 1 Patrizio Bassi 2004-06-11 07:32:26 UTC 
sorry i forgot website

www.snortsam.net
Comment 2 Eldad Zack (RETIRED) gentoo-dev 2004-06-14 07:14:13 UTC 
Created attachment 33223 [details]
snortsam-2.24.ebuild
Comment 3 Eldad Zack (RETIRED) gentoo-dev 2004-06-14 07:14:58 UTC 
Requires a patched snort. see bug 53642 for an updated ebuild.
Comment 4 Eldad Zack (RETIRED) gentoo-dev 2004-06-14 09:01:18 UTC 
Created attachment 33232 [details]
snortsam-2.24.ebuild

Remove dependency on snort. Made the make script use CFLAGS.
Comment 5 Eldad Zack (RETIRED) gentoo-dev 2004-06-14 09:51:37 UTC 
Created attachment 33234 [details]
snortsam-2.24.ebuild

fixed license: that's as-is not asis.
Comment 6 Eldad Zack (RETIRED) gentoo-dev 2004-06-14 10:19:00 UTC 
Created attachment 33237 [details]
snortsam-2.24.ebuild

added ~amd64 ~sparc (repoman complains about snort bad RDEPEND)
Comment 7 Eldad Zack (RETIRED) gentoo-dev 2004-06-26 19:10:39 UTC 
Patrizio, can you test the ebuild? You'll need the snort ebuild in bug 53642 as well (to patch snort for snortsam)
Comment 8 Patrizio Bassi 2004-06-27 00:30:50 UTC 
sure i'll try attach 33237.

gimme some hours...slow cpu.
Comment 9 Patrizio Bassi 2004-06-27 01:39:03 UTC 
ok...i tried both...

snortsam compiled and installed good.

well done!

there are 2 trivial problems with snort (not snortsam) ebuild.

i wrote those to the right bugs...hope will be fixed soon.

ok...snow i must "study" how snortsam works :)
nice work...hope to see that in portage soon.
Comment 10 Eldad Zack (RETIRED) gentoo-dev 2004-06-30 16:58:30 UTC 
in portage, enjoy...