Re: snort1.8p + dynamic ip address

[John Sage <jsage () finchhaven com>]

Marcus:

If you're given a new IP on a regular (exact) schedule, set up a cron 
job to restart snort using "var HOME_NET $tun0_ADDRESS" in snort.conf, 
maybe a minute later, and see if it will pick up the new IP..

I'm on a dialup and I use "var HOME_NET $ppp0_ADDRESS" in snort.conf, 
which is called by the script that dials, brings up ppp0, starts snort, 
and sets up my firewall.

HTH..

- John

--
John Sage
FinchHaven, Vashon Island, WA, USA
http://www.finchhaven.com/
mailto:jsage () finchhaven com
"The web is so, like, five minutes ago..."


Marcus Henschel wrote:

> Hi all,
>
> i am using snort (1.8p) on my dsl gateway. the dsl-line is interrupted
> exactly after 24 hours and then the ppp software connects automaticly to my
> provider and i get a new ip-address. my problem is, if the line is
> disconnected, the snort deamon  does not run anymore.
>
> I start snort with the following command: "./snort -c ../etc/snort.conf -i
> tun0 -D"
>
> Any suggestions ?
>
> regards
>
> marcus
>
> --
>
> Marcus Henschel         mail: marcus[at]hamburg.de
> 20357 Hamburg



_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users