security/pulledpork 0.7.4 DragonFly

Script to update snort-2.8+ rules

System: DragonFly
Repository: DPorts
Maintainer: [email protected] (as in FreeBSD)
License: GPLv2
Categories: security
Package size: 39.5 KiB, 153.3 KiB installed

Description

pulledpork is a Perl script which helps to update your Snort 2.9+ rules.

-= Features and Capabilities =-

* Automated downloading, parsing, state modification and rule modification for all of your snort rulesets. * Checksum verification for all major rule downloads * Automatic generation of updated sid-msg.map file * Capability to include your local.rules in sid-msg.map file * Capability to pull rules tarballs from custom urls * Complete Shared Object support * Complete IP Reputation List support * Capability to download multiple disparate rulesets at once * Maintains accurate changelog * Capability to HUP processes after rules download * Aids in tuning of rulesets * Verbose output so that you know EXACTLY what is happening * Minimal Perl Module dependencies * A sweet smokey flavor throughout the pork!

In the other systems

System

Port

Version

DragonFly

security/pulledpork

0.7.4

FreeBSD

security/pulledpork

0.7.4

NetBSD

net/pulledpork

0.7.4nb2

MidnightBSD

security/pulledpork

0.7.4

Install

Binary package:

pkg install pulledpork

From DPorts:

cd /usr/dports/security/pulledpork && make install clean

Dependencies

Run dependencies 5

No port depends on this one.

Configuration

No options to configure.

Service scripts: none

Message after installing

In order to use pulled pork, adjust the config files located in
/usr/local/etc/pulledpork


Important Note:

Snort changed the way rules are published. Since June 2010 Snort
stop offering rules in the "snortrules-snapshot-CURRENT" format.

Instead, rules will be released for specific Snort versions.
You will be responsible for downloading the correct rules release
for your version of Snort.

The new versioning mechanism will require a four digit version in the
file name. To get the new download naming schema visit snort.org,
and look at 'My Account' -> 'Subscriptions and Oinkcodes'

In release 0.7.4 blacklist was renamed to blocklist.

Please compare existing files under /usr/local/etc/pulledpork
with the new *.sample files adjust them if required.

===>   NOTICE:

The pulledpork port currently does not have a maintainer. As a result, it is
more likely to have unresolved issues, not be up-to-date, or even be removed in
the future. To volunteer to maintain this port, please create an issue at:

https://bugs.freebsd.org/bugzilla

More information about port maintainership is available at:

https://docs.freebsd.org/en/articles/contributing/#ports-contributing