Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

pfSense-pkg-suricata-3.1.2 - Update for bug fixes and new features #256

Merged
merged 9 commits into from
Jan 16, 2017
Merged

pfSense-pkg-suricata-3.1.2 - Update for bug fixes and new features #256

merged 9 commits into from
Jan 16, 2017

Conversation

bmeeks8
Copy link
Contributor

@bmeeks8 bmeeks8 commented Jan 15, 2017

This update of the Suricata GUI package adds three new features, restores Pass List functionality when running with inline IPS mode enabled, and corrects four bugs.

New Features

  1. The RULES tab has an action column with an icon to indicate if the rule action is alert or drop. Clicking the icon allows toggling the rule action via a user override. The GID:SID of the rule along with the user overriden action are both stored in the firewall config for Suricata and used to set the rule action when the enforcing rules file for the interface instance is written (the suricata.rules file located in the /rules directory of the interface).
  2. The list of rules displayed on the RULES tab can now be filtered by state (enabled or disabled) to help with identifying enabled or disabled rules.
  3. A new option has been added when operating with inline IPS mode enabled. When the Snort VRT rules package is enabled and a Snort VRT IPS Policy is chosen on the CATEGORIES tab, a selection is available for automatically setting the rule action for the chosen policy rules. This action is specified in the IPS policy metadata within the rule. When using an IPS Policy, the default action for all the policy rules is alert. But each of the policy rules also contains a suggested action for each policy category (Connectivity, Balanced, Security, etc.). The suggested action may be to only alert on traffic, or it may instead suggest dropping the traffic. The new IPS Policy Mode selector has two settings: Alert or Policy. When set to Alert, all IPS Policy rules will just alert no matter what the rule metadata specifies for the poplicy. When set to Policy, the rule action will be changed to that specified by the IPS Policy metadata provided with each VRT rule.

Restored Functionality

  1. When using inline IPS mode the Pass List function was not available due to changes in the blocking architecture from dependence on the pf firewall to the use of Netmap. The Pass List functionality has now been duplicated when inline IPS mode is enabled by automatically generating the required PASS rules in the Suricata rule set. The rules will prevent traffic from hosts on the Pass List from being dropped. You still create and assign Pass Lists the same as in Legacy Mode, but now they will also "just work" when using inline IPS Mode.

Bug Fixes

  1. Auto Log Mgmt is not default checked on a fresh install.
  2. REFRESH checkbox on ALERTS tab is not default checked on a fresh install.
  3. Suricata error "[ERRCODE: SC_ERR_CONF_YAML_ERROR(242)] - Please use 'tls-store' in YAML to configure TLS storage" generated when TLS logging is enabled.
  4. Make sure critical Suricata directories in /var/log and /var/db exist at each package sync in case these are on a RAM disk.

Bill Meeks added 9 commits January 13, 2017 15:26
@netgate-git-updates netgate-git-updates merged commit 5a6cc85 into pfsense:devel Jan 16, 2017
netgate-git-updates pushed a commit that referenced this pull request Jan 16, 2017
@rbgarga
Merge pull request #256 from bmeeks8/pfSense-pkg-suricata-3.1
8f0bf45
@bmeeks8 bmeeks8 deleted the pfSense-pkg-suricata-3.1 branch January 16, 2017 16:55
netgate-git-updates pushed a commit that referenced this pull request Aug 17, 2017
@DonLewisFreeBSD
Upgrade protobuf-c to version 1.3.0:
4ea07d5 
  [ Robert Edmonds ]
  * Release 1.3.0.

  * Add test case for the issue in #220 (#254).

  * Fix issue #251, "Bad enums with multiple oneofs" (#256).

  * Add warning flags to my_CFLAGS (#257).

  * Fix namespace errors when compiled with latest protobuf (#280).

  * Bump minimum required header version for proto3 syntax (#282).

  [ Paolo Borelli ]
  * Turn the compiler into a protoc plugin (#206). This allows the protobuf-c
    compiler to be invoked as "protoc --c_out=...". For backwards
    compatibility, we still ship a protoc-c command, but it's a symlink to the
    protoc-gen-c binary.

  * proto3 support (#228).

  * Remove leftover FIXME comment (#258).

  * Fix proto3 "is zeroish" evaluation (#264).

  * Small cleanup in oneof handling (#265).

  * Rework is_zeroish one more time (#267).

  * proto3: make strings default to "" instead of NULL (#274).

  [ Tomek Wasilczyk ]
  * Fix -Wsign-compare warnings (#213).

  * Fix ISO C90 -Wdeclaration-after-statement warnings (#214).

  * Fix bigendian -Wunused-label warning (#215).

  [ Ilya Lipnitsky ]
  * protoc-c/c_message.cc: Force int size on oneof enums (#221). Fixes wrong
    enum generation and handling for onceof cases (#220).

  [ Adnan ]
  * Fix cmake build if built as part of an external project (#231).

  [ Gregory Detal ]
  * Remove .pb.{cc,h} in distdir instead of top_distdir in order to prevent
    removing files from other projects when protobuf-c is included as an
    autotools subproject (#232).

  [ Ben Farnham ]
  * Relax autoconf constraint from v2.64 to v2.63 so that it works on older
    Linux distros (#233).

  [ Thomas Koeckerbauer ]
  * rm argument fix for Solaris (#234).

  * Add 'const' qualifier to 'init_value' variable in generated files (#236).

  [ Richard Kettlewell ]
  * Document and extend the effect of passing NULL to ..._free_unpacked
    functions (#255).

  [ Alex Milich ]
  * CMake: Workaround for static builds that use MSVC (#243).

  [ Josh Junon ]
  * CMake: Allow protobuf-c to be included via include_subdirectory (#245).

  [ Alexei Kasatkin ]
  * CMake: Windows fixes (#266).

This fixes the build breakage with devel/protobuf 1.3.0 [1]

PR:		221572 [1]
Sponsored by:	Farsight Security, Inc.
netgate-git-updates pushed a commit that referenced this pull request Nov 27, 2021
@tcberner
graphics/kimageannotator: update to 0.5.3
3ecb61b 
Changelog:
	* Fixed: Crash while typing text on wayland. (#256)
	* Changed: Show scrollbar when not all tools visible. (#258)
netgate-git-updates pushed a commit that referenced this pull request Nov 27, 2021
@tcberner
graphics/ksnip: update to 1.9.2
5c14e0d 
Changelog:
	* Fixed: Version `Qt_5.15' not found (required by
	  /usr/bin/ksnip). (#712)
	* Fixed: CI packages show continuous suffix for tagged build.
	  (#710)
	* Fixed: kImageAnnotator not translated with deb package. (#359)
	* Fixed: Windows packages increased in size. (#713)
	* Fixed: The string 'Actions' is not available for translation.
	  (#729)
	* Fixed: HiDPI issue with multiple screen on Windows. (#668)
	* Fixed: Snipping Area not closing when pressing ESC. (#735)
	* Fixed: Sometimes "Snipping Area Rulers" not shown after
	  starting rectangular selection. (#684)
	* Fixed: Cursor not positioned correctly when snipping area
	  opens. (#736)
	* Fixed: Mouse cursor not captured when triggered via global
	  shortcut. (#737)
	* Fixed: Dual 4K screens get scrambled on X11. (#734)
	* Fixed: VCRUNTIME140_1.dll was not found. (#743)
	* Fixed: Screenshot area issue when monitor count changes on
	  Windows. (#722)
	* Fixed: Wayland does not support QWindow::requestActivate().
	  (#656)
	* Fixed: Wrong area is captured on a Wayland screen scaling.
	  (#691)
	* Changed: Enforce xdg-desktop-portal screenshots for Gnome >=
	  41. (#727)
	* Fixed kImageAnnotator: Crash while typing text on wayland.
	  (#256)
	* Changed kImageAnnotator: Show scrollbar when not all tools
	  visible. (#258)
netgate-git-updates pushed a commit that referenced this pull request Nov 8, 2022
@mandree
math/Imath: update to patch release 3.1.6
27cccc8 
Patch release with miscellaneous bug/doc/build fixes.
Excerpt from release tag:

    [#269] fix memory leak in V3fArrayFromBuffer
    [#268] Add <cstdint> for int64_t
    [#263] Initialize x in testRoots.cpp:solve() to suppress compiler warning
    [#262] Fix gcc compiler warning in testFun.cpp
    [#261] Test return value of extractSHRT to avoid uninitialized reference
    [#260] Fix example code so it compiles as is
    [#259] Cuda safety in several headers
    [#256] Fix markdown and typos in README.md
    [#255] Do not warn if half.h has already being included
    [#248] Update sphinx version

ChangeLog:	https://github.com/AcademySoftwareFoundation/Imath/releases/tag/v3.1.6
MFH:		2022Q4
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
2 participants
@bmeeks8 @netgate-git-updates