pfsense/pfsense-packages — pull request #688 by bmeeks8 (2014-07-23 19:56:29+00:00)
Title: Update Snort package to binary version 2.9.6.2 and GUI v3.1

Snort 2.9.6.2 pkg v3.1
---------------------------------

This update for the Snort package provides the latest 2.9.6.2 version of the binary, fixes five bugs, adds three new features and simplifies the code around the snort.conf file generation.

Bug Fixes:
--------------
1. The word CANCEL is misspelled in a confirmation prompt when clearing all blocks on BLOCKED tab.

2. Snort will install but not start on pfSense 2.2 snapshots.

3. When disabling Snort on an interface, some Snort settings are cleared and lost.

4. Adapt to recent change in URL and rules updates process at snort.org web site.

5. Remove unneeded extra trailing slash on string initialized from RCFILEPREFIX constant.

Feature Change:
----------------------
1. "Save Settings on Deinstall" now defaults to 'on' for new initial installs. Note this change only affects first-time installs of the Snort package. Existing installs will continue to use the last saved setting when Snort is reinstalled.

2. Additional information added to system log message when the log file archiving job for Unified2 logs rotates a file to archive storage.

3. Added the "-q" switch to the command line for the Snort block table clean-up cron job to stop unwanted messages when table is empty.

New Features:
-------------------
1. The ability to create a new Snort interface instance by "duplicating" an existing instance is now available. This feature allows an admin to duplicate the settings for an existing interface over to a new Snort instance on a different physical interface. All settings are duplicated with the exception of: (1) the interface name, (2) the interface description, (3) the Home Net, External Net, Pass List and Suppress List values. The Home Net, External Net, Pass List and Suppress List values for the new instance are set to "default". The "duplicate" feature is activated by clicking the plus (+) icon next to the desired "source" instance.

2. Additional configuration parameters for the POP3, IMAP and SMTP preprocessors are now available on the PREPROCESSORS tab. These parameters were formerly defaulted to hard-coded values, but are now configurable by the user to optimize performance of these preprocessors in a specific environment.