[Snortsam-discussion] New Snortsam version 2.56 in CVS. Semi-important bug-fix

[Matt Jonkman]

A new tarball is available at:

http://www.snortsam.net/files/snortsam/snortsam-src-2.60.tar.gz

Happy snortsamming! Thanks Frank!

Matt

Frank Knobbe wrote:
> Greetings,
> 
> just discovered and fixed a couple bugs in Snortsam. Any DONTBLOCK or
> OVERRIDE or ACCEPT statement that included an IP address with network
> mask of /19 was recorded wrong. Other netmasks were not affected. This
> caused IP's address to be white-listed when they shouldn't. I consider
> this a semi-important fix. It's not critical, but you really want to
> have it :)
> 
> Other fixes include replacement of some brain-dead code (Did I write
> this?) regarding the sorting and duplicate removal of the Dontblock,
> Override, Accept, Limit lists.
> 
> The last one is not important, but the netmask fix is recommended to
> avoid accidental white-listing (or not white-listing) of IP addresses
> when then /19 netmask is used.
> 
> The code has just been committed to CVS. 
> 
> Matt, if you have some time, please check out the latest version from
> CVS and precompile binaries.
> 
> Thanks!
> Frank
> 
> 
> _______________________________________________
> Snortsam-discussion mailing list
> Snortsam-discussion at snortsam.net
> http://lists.snortsam.net/mailman/listinfo/snortsam-discussion

-- 
--------------------------------------------
Matthew Jonkman
Emerging Threats
Phone 765-429-0398
Fax 312-264-0205
http://www.emergingthreats.net
--------------------------------------------

PGP: http://www.jonkmans.com/mattjonkman.asc