next »

[jarolimd]

I attempted to reinstall snort and the reinstall failed. I am using PF 2.0RC3, updated yesterday. Since the reinstall failed, I don't see any of the snort packages listed in "available" or "installed".

If I understand this thread correctly, at the moment, there is no snort package available at all, stable or dev?

same problem to me, what is going on NOW with snort, can anyone please give a statement ?!

it is of course not a good deal to kick all snort packages and nothing happens at all :-(

thx and regards

[james.dean]

it is of course not a good deal to kick all snort packages and nothing happens at all :-(

+1

[Metu69salemi]

I think that this not quite fair to the developers.
If they need time then they should have it. Or if you need it so badly why don't you make bounty for it

[james.dean]

Or if you need it so badly why don't you make bounty for it

Can't wait.. and have already donated  

You mean I should have used the money for a bounty instead?

Or directly for some .. would have been better  

[nipstech]

Now that's not fair, James...getting me all excited thinking that you were gonna say that Snort's  ready to start snorting again. I'm sniffing with tears

[jarolimd]

but i think they could leave the stable snort package online until the new one is released - when ever this could be...

i cannot find any reason to kick the stable package and nothing happens :-(

[nipstech]

just remember that patience is a virtue...

but i think they could leave the stable snort package online until the new one is released - when ever this could be...

i cannot find any reason to kick the stable package and nothing happens :-(

[gnoel]

++

Can't wait.. and have already donated  

snort should be directly integrated in the pfSense image as I can't imagine someone would open any port without using snort.

I agree with this sentiment, running 1.23 ( not upgrading ) until this is A-OK seems the best path.  Runnin' a RC, things like this are to be expected.

[james.dean]

Runnin' a RC, things like this are to be expected.

Ok and what do you say about this? http://blog.pfsense.org/?p=589

There are considerably fewer open issues on 2.0 right now than there were on 1.2.3 when it was released, and no major outstanding problems. 2.0 has gotten widespread use in production environments over the last year plus including in our most critical networks, and looks to be ready for release. We expect final release within a month, and consider RC3 the preferred release for all new installs.

I used it in a critical network too..

[Metu69salemi]

@james.dean

that was nice photo.. It's always good to have conversation.

[gnoel]

Runnin' a RC, things like this are to be expected.

Ok and what do you say about this? http://blog.pfsense.org/?p=589

There are considerably fewer open issues on 2.0 right now than there were on 1.2.3 when it was released, and no major outstanding problems. 2.0 has gotten widespread use in production environments over the last year plus including in our most critical networks, and looks to be ready for release. We expect final release within a month, and consider RC3 the preferred release for all new installs.

I used it in a critical network too..

If Snort is part of your mission critical usage of RC3, how are you dealing with the fact it ain't working? I have several problems trying to deploy RC3's Snort and am patiently waiting for a fix ( after going back and forth between versions, not a joy ) - and don't find it to be a big surprise that Release Candidates  have issues, you are surprised?

For me Snort is critical, maybe for others it isn't - if it is critical, waiting and listening are an option.

[NightHawk007]

What was the point  of fixing snort if it worked perfect .I did a stupid thing and updated from a perfect working pfsense and snort now i have a broken snort and a half assed working pfsense .Why fix a package that worked perfect  

[jarolimd]

What was the point  of fixing snort if it worked perfect .I did a stupid thing and updated from a perfect working pfsense and snort now i have a broken snort and a half assed working pfsense .Why fix a package that worked perfect  

+1

[cyber7]

Any update on this?  The developer initially indicted, "A couple of days".  This, almost 3 weeks ago.

Kind regards
Aubrey Kloppers

[darklogic]

I guess I can't complain because pfsense is free and has always been an excellent system. But, I am starting to get the impression this project may be coming to an end. I hope not, but I find it odd that the last snapshot was from July 4 2011 and it is now July 21st 2011. Also the release for 2.0 which was a major overhaul took more than 2 years to get an RC. I am not sure if the main people involved are tied up on other projects or what. James Dean has done a great job with his work on the snort package, but this day and age I would agree that snort should not be considered a optional package to install, it should be part of the base install and have the option to enable or disable it if needed.

I personally am glad now I took extra percautions with having an Untangle system in bridge mode behind my pfsense box. Stateful firewalls are not enough these days. I love the fine granular rules that can be used in pfsense, but hate that certain packages that I would consider are important break when updated versions come out. If I knew that snort was going to break on RC3, I would of rather stayed on RC2.

You can't get mad at James Dean for him using his own time to develope a package that should already be part of the base pfsense install.

No disrespect to pfsense, but people have options: Example: Astaro Home, Astaro Free Business edition, Endian, Untangle, ClearOS, Smoothwall, Ipfire, IPCOP, Zeroshell, SME server, vyatta, zentyal, ect... The list goes on. I only speak of what I have used and they all have snort as part of the base install and they are free. How can so many projects be wrong. But in defense to pfsense, they have a lot of packages that these others don't have. It all depends on your needs, but I think everyone here would say Snort in very important. To me the most important features are snort and country block. I am just glad country block is still working. That only takes away alot of threats.

I can honestly say that after using pfsense since 2005, I am starting to consider moving to either Endian, ClearOS, or Vyatta. I am thinking maybe Vyatta because it does everything pfsense can do and has all the base features. Again no disrespect to pfsense, it is just that after using the project for almost 6 years now. I don't think that you guys will get basic features in a stable format that will be handled by main developers.

I still appreciate all the years of using your project firewall, and thanks for that.