By default, the IPRVersion file is written to /usr/local/etc/snort/rules/iplistsIPRVersion.dat, which is clearly not intended. This issue is identical to #247, which was not fixed by commit 0617788, as was thought.
The problem is in blacklist_write, where the final path is concatenated without a slash:
## write our blacklist and blacklist version file!
sub blacklist_write {
my ($href, $path) = @_;
my $blv = $Config_info{'IPRVersion'} . "IPRVersion.dat";
my $blver = 0;
By default, the
IPRVersion
file is written to/usr/local/etc/snort/rules/iplistsIPRVersion.dat
, which is clearly not intended. This issue is identical to #247, which was not fixed by commit 0617788, as was thought.The problem is in
blacklist_write
, where the final path is concatenated without a slash: