[Debian]Debian lennyで１からサーバーを作ってみる – snortをインストール

# aptitude install snort snort-mysql
# aptitude install libio-zlib-perl libwww-perl libarchive-tar-perl

# vi /etc/snort/snort.conf

var HOME_NET any
↓
var HOME_NET DEBIAN_SNORT_HOME_NET

var EXTERNAL_NET any
↓
#var EXTERNAL_NET any

#var EXTERNAL_NET !$HOME_NET
↓
var EXTERNAL_NET !$HOME_NET

output database: log, mysql
↓
output database: log, mysql, user=snort password='snort-db' dbname=snort host=localhost

# dpkg-reconfigure snort-mysql

# mysql -u root -p
mysql> CREATE DATABASE snort;
mysql> grant CREATE, INSERT, SELECT, UPDATE on snort.* to snort@localhost;
mysql> grant CREATE, INSERT, SELECT, UPDATE on snort.* to snort;
mysql> SET PASSWORD FOR snort@localhost=PASSWORD('snort-db');
mysql> flush privileges;
mysql> show grants for 'snort'@'localhost';
mysql> exit
# cd /usr/share/doc/snort-mysql/
# zcat create_mysql.gz | mysql -u snort -D snort -p snort-db

# rm /etc/snort/db-pending-config

# /etc/init.d/snort start

# cd /usr/local/src

最新版をここから探す。http://sourceforge.net/project/showfiles.php?group_id=103348&package_id=128846

# wget http://jaist.dl.sourceforge.net/sourceforge/secureideas/base-1.4.3.1.tar.gz
# tar zxvf base-1.4.3.1.tar.gz
# mv base-1.4.3.1 /var/www/admin/base

最新版をここから探す。http://sourceforge.net/project/showfiles.php?group_id=42718&package_id=220409

# wget http://jaist.dl.sourceforge.net/sourceforge/adodb/adodb509a.tgz
# tar zxvf adodb509a.tgz
# mv adodb5 /var/www/admin/base/adodb
# chown -R www-data:www-data /var/www/admin/base/
# cd

# cp /var/www/admin/base/base_conf.php.dist /var/www/admin/base/base_conf.php
# vi /var/www/admin/base/base_conf.php

$BASE_Language = 'english';
↓
$BASE_Language = 'japanese';

$BASE_urlpath = '';
↓
$BASE_urlpath = '/base';

$DBlib_path = '';
↓
$DBlib_path = '/var/www/admin/base/adodb';

$alert_dbname   = 'snort_log`';
↓
$alert_dbname   = 'snort';

$alert_password = 'mypassword';
↓
$alert_password = 'snort-db';

# pear channel-update pear.php.net
# pear install --alldeps Image_Graph-alpha
# pear install Mail Mail_Mime