Bug 53645

Summary:	snortsam ebuild requested
Product:	Gentoo Linux	Reporter:	Patrizio Bassi <patrizio.bassi>
Component:	New packages	Assignee:	Gentoo Netmon project <netmon>
Status:	RESOLVED FIXED
Severity:	enhancement
Priority:	High
Version:	2004.1
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---
Attachments:	snortsam-2.24.ebuild snortsam-2.24.ebuild snortsam-2.24.ebuild snortsam-2.24.ebuild

Description Patrizio Bassi 2004-06-11 07:28:51 UTC

SnortSam is a plugin for Snort, an open-source light-weight Intrusion Detection System (IDS). The plugin allows for automated blocking of IP addresses on following firewalls: 

Checkpoint Firewall-1 
Cisco PIX firewalls 
Cisco Routers (using ACL's) 
Netscreen firewalls 
IP Filter (ipf), available for various Unix-like OS'es such as FreeBSD 
OpenBSD's Packet Filter (pf) 
Linux IPchains 
Linux IPtables 
Linux EBtables 
WatchGuard Firebox firewalls 
...and more to come... 

Reproducible: Always
Steps to Reproduce:
1.
2.
3.



Expected Results:  
new ebuild added

Comment 1 Patrizio Bassi 2004-06-11 07:32:26 UTC

sorry i forgot website

www.snortsam.net

Comment 2 Eldad Zack (RETIRED) gentoo-dev

2004-06-14 07:14:13 UTC

Created attachment 33223 [details]
snortsam-2.24.ebuild

Comment 3 Eldad Zack (RETIRED) gentoo-dev

2004-06-14 07:14:58 UTC

Requires a patched snort. see bug 53642 for an updated ebuild.

Comment 4 Eldad Zack (RETIRED) gentoo-dev

2004-06-14 09:01:18 UTC

Created attachment 33232 [details]
snortsam-2.24.ebuild

Remove dependency on snort. Made the make script use CFLAGS.

Comment 5 Eldad Zack (RETIRED) gentoo-dev

2004-06-14 09:51:37 UTC

Created attachment 33234 [details]
snortsam-2.24.ebuild

fixed license: that's as-is not asis.

Comment 6 Eldad Zack (RETIRED) gentoo-dev

2004-06-14 10:19:00 UTC

Created attachment 33237 [details]
snortsam-2.24.ebuild

added ~amd64 ~sparc (repoman complains about snort bad RDEPEND)

Comment 7 Eldad Zack (RETIRED) gentoo-dev

2004-06-26 19:10:39 UTC

Patrizio, can you test the ebuild? You'll need the snort ebuild in bug 53642 as well (to patch snort for snortsam)

Comment 8 Patrizio Bassi 2004-06-27 00:30:50 UTC

sure i'll try attach 33237.

gimme some hours...slow cpu.

Comment 9 Patrizio Bassi 2004-06-27 01:39:03 UTC

ok...i tried both...

snortsam compiled and installed good.

well done!

there are 2 trivial problems with snort (not snortsam) ebuild.

i wrote those to the right bugs...hope will be fixed soon.

ok...snow i must "study" how snortsam works :)
nice work...hope to see that in portage soon.

Comment 10 Eldad Zack (RETIRED) gentoo-dev

2004-06-30 16:58:30 UTC

in portage, enjoy...