7 comments

Add a comment…

Sign in

prestine

Your email address

Check!

invalid email

(thinking…)

Reset

or sign in with

• 
• 

UserVoice password

Forgot password?

Create a password

Your name

I agree to the terms of service

Signed in as (Sign out)

Close

Close

Post comment Submitting...

• malossi commented  ·  September 30, 2011 4:48 p.m.  ·  Flag as inappropriateFlag as inappropriate  ·  Delete

  Love your product, but why have you guys created a flat file for your IPS rules? Performance reasons and managability would dictate split rule sets for easier future manipulations......

  IPS = 11204
  # wc -l astaro.rules
  11204 astaro.rules
  All the rules that have been included in your GUI correspond to one file.

  Snort.conf
  ################################################## #
  # Step #7: Customize your rule set
  # For more information, see Snort Manual, Writing Snort Rules
  ################################################## #

  include $RULE_PATH/astaro.rules
  ----Snippet----

  Why would you not classify your rules into a variation of snort rules:

  astaro.attack-responses.rules
  astaro.backdoor.rules.
  Or something easier to manage.

  That way you can cleanly update sets as needed once Astaro has verified a legitimate rule set? Or if you want to turn on a specific set(s) of rules?

  Great product though!

  Thanks.

• malossi commented  ·  September 30, 2011 4:41 p.m.  ·  Flag as inappropriateFlag as inappropriate  ·  Delete

  With the creation of custom rules....... Could you plz segment out your rules. Not just fit them all under on flat file..... astaro.rules.
  I.e
  astaro. attack-response.rules
  astaro.backdoor.rules
  astaro.exploit.rules
  astaro.specific-threats.rules
  ......... etc

  Thanks.

• malossi commented  ·  September 25, 2011 8:11 p.m.  ·  Flag as inappropriateFlag as inappropriate  ·  Delete

  Having the ability to add an OINK code and or adding our own rules should be allowed or supported in some fashion. Put a disclaimer on it you must.

• Tung Chai Sia commented  ·  December 13, 2010 12:45 a.m.  ·  Flag as inappropriateFlag as inappropriate  ·  Delete

  We need this.

• wingman commented  ·  September 11, 2010 6:08 p.m.  ·  Flag as inappropriateFlag as inappropriate  ·  Delete

  this should be included in version 8.

• Exrace commented  ·  October 25, 2009 5:31 a.m.  ·  Flag as inappropriateFlag as inappropriate  ·  Delete

  I have not upgraded due to this. We use many custom rules for special needs within IIS websites. Please Gert makes this possible again!

• Sven commented  ·  September 30, 2009 4:47 a.m.  ·  Flag as inappropriateFlag as inappropriate  ·  Delete

  This was possible in Version 6!