> +++++++++++++++++++++++++++++++++++++++++++++++++++ > Initializing rule chains... > Warning: /etc/snort/rules/dos.rules(42) => threshold (in rule) is deprecated; > use detection_filter instead. > ERROR: /etc/snort/rules/community-smtp.rules(13) => !any is not allowed > Fatal Error, Quitting.. > --->8---
This happens because the SMTP_SERVERS variable is define das 'any'. This variable is configured based, IIRC, on your setting of HOME_NET. So you should review your /etc/snort/snort.conf configuration file is properly defined. IIRC the value of HOME_NET is based on the defintion of DEBIAN_HOME_NET (in /etc/snort/snort.debian.conf) which is, in turn, is defined by the administrator when installing the package (through debconf). If the value is not properly defined this kind of stuff can happen. So I don't fully believe it is a bug in the package, it is associated with the user's configuration. However, the fix of this bug is really simple, just comment out the offending line. Alternatively, the debconf prompt could check that DEBIAN_HOME_NET is not defined to values that might cause problems. There is no code in the configuration scripts to ensure this currently, but could be added. Regards Javier -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org