Snort rules_up

[newsonet]

W zwiazku z tym ze na snort.org wrocilo md5
poprawilem skrypcik i znow mozna z niego korzystac

wymagana rejestracja na snort.org
kazdy dostaje swoj: oink code



#!/bin/sh


# $Id: snort_up 2005-01-16 15:21:32 LittleB $


# set -x


# snort_up:     Snort rules ugrading script


# chkconfig:


# description:


# author:       LitlleB


#               For PLD Linux Distribution





# Source function library.


. /etc/rc.d/init.d/functions


. /etc/sysconfig/network





            # wget:


            # -t4       Retries 4 times


            # -N        Get if never bean





    PAR="-d --dns-cache=off -t4 -N"	# --sslprotocol=0

    LOG="-a /var/log/snort/snort_up.log"


    CODE="YOUR OINK CODE"		# your oink code

    VER="2.3"				# 2.3, 2.2, 2.0

    IP="199.107.65.177"			# snort.org




upgrade(){


if [ -f ./snortrules-snapshot-$VER.tar.gz ];then


    mv snortrules-snapshot-$VER.tar.gz
snortrules-snapshot-$VER.tar.gz.last

fi


#    rm -f snortrules-snapshot-$VER.tar.gz





        echo download rules...


    wget $PAR $LOG
http://$IP/pub-bin/oinkmaster.cgi/$CODE/snortrules-snapshot-$VER.tar.gz


if [ -f ./snortrules-snapshot-$VER.tar.gz ];then


        echo unpacking archive...


    tar zxf snortrules-snapshot-$VER.tar.gz


    chmod 750 ./rules


    chmod 640 ./rules/*


    chown root:snort ./rules


    chown root:snort ./rules/*


    service snort stop


    rm -f /etc/snort/rules/*


    mv ./rules/* /etc/snort/rules/


    service snort start


#rm -f snortrules-snapshot-$VER.tar.gz


    mv snortrules-snapshot-$VER.tar.gz.md5
snortrules-snapshot-$VER.tar.gz.md5.last

    rm -f snortrules-snapshot-$VER.tar.gz.md5


    rm -r rules


    rm -r doc


    msg_done


    else


    msg_network_down snort_up


    msg_fail


fi


}
msg_up(){


show "UPGRADING SNORT RULES"


    busy


    echo


}


msg_done(){


show "UPGRADING SNORT RULES"


    ok


    echo


}


msg_fail(){


show "UPGRADING SNORT RULES"


    fail


    echo


}


    msg_up


    if is_yes "${NETWORKING}"; then


        if [ ! -f /var/lock/subsys/network -a "$1" != stop -a "$1" !=
status ]; then

                msg_network_down snort_up


                msg_fail


                exit 1


        fi


    else


        exit 0


    fi





    rm -f snortrules-snapshot-$VER.tar.gz.md5


        echo download MD5 checksum...


    wget $PAR $LOG
http://$IP/pub-bin/oinkmaster.cgi/$CODE/snortrules-snapshot-$VER.tar.gz.md5




    if [ -f ./snortrules-snapshot-$VER.tar.gz ]; then





        MD5_last=`cat ./snortrules-snapshot-$VER.tar.gz.md5.last`


        MD5_new=`cat ./snortrules-snapshot-$VER.tar.gz.md5`





        if [ "$MD5_last" = "$MD5_new" ]; then


            echo $MD5_last


            echo $MD5_new


            echo YOUR checksum is correct. nothing to do.


            msg_done


                exit


        else


            upgrade


        fi


    else


    upgrade


    fi


exit