search

mrash / fwsnort

Application Layer IDS/IPS with iptables
http://www.cipherdyne.org/fwsnort/
GNU General Public License v2.0
73 stars 15 forks source link

Ubuntu 14.04 & 16.04 issues #15

Open riturajb opened 6 years ago

riturajb commented 6 years ago

This is distro specific info. Please reject/ignore if its not relevant to the project. I think there should be a readme/mention as to how to start fwsnort service on the Linux distributions.

The fwsnort service on Ubuntu does not start by default even after adding it in the startup.

The fix/workaround is to manually create a symlink - by which the fwsnort service starts after iptables-persistent service.

Ex: Assuming runlevel is 2 - I have manually created a below symlink for fwsnort.

/etc/rc2.d# ls -l S38fwsnort S37iptables-persistent lrwxrwxrwx 1 root root 29 Oct 2 13:16 S37iptables-persistent -> ../init.d/iptables-persistent lrwxrwxrwx 1 root root 17 Sep 25 20:12 S38fwsnort -> ../init.d/fwsnort

By default if one uses the distro specific commands to enable fwsnort at bootup - the init script creates a wrong sequence ID (say number 20) which is lesser than sequence ID of iptables service - resulting in fwsnort not getting started on the bootup.

For your consideration / FYI - if you feel this helps this project.

Thanks

mrash commented 6 years ago

Thanks for pointing this out. Agreed that fwsnort needs to offer guidance on how to get it running under various Linux distros.