summaryrefslogtreecommitdiff
path: root/security/snort_inline/pkg-message
blob: 17bd6382d2bab8a2d356b746d1f721b0bbc1ae6f (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
         ***********************************
         * !!!!!!!!!!! WARNING !!!!!!!!!!! *
         ***********************************

snort_inline uses rcNG startup scripts and must be enabled via /etc/rc.conf

Available variables:

  snort_enable (bool):		Set to YES to enable snort
  				Default: NO
  snort_flags (str):		Extra flags passed to snort
 				Default: -Dq -J 8000
  snort_interface (str):	Network interface to sniff
 				Default: ""
  snort_conf (str):		Snort configuration file
 				Default: ${PREFIX}/etc/snort_inline.conf

Also, make sure that your kernel is compiled with:

  options  IPFIREWALL
  options  IPDIVERT

The default divert port is 8000.  See http://freebsd.rogness.net/snort_inline
for more information.