Guardian 配置文档

 

###############
## Guardian  ##
###############
 
#rpm pakcet download
http://www.chaotic.org/guardian/

tar -xzvf guardian-***
cd guardian-***

# installing ....
cp guardian.pl /usr/sbin/
cp scripts/iptables_block.sh /usr/local/bin/guardian_block.sh
cp scripts/iptables_unblock.sh /usr/local/bin/guardian_unblock.sh
cp guardian.conf /etc/snort/

touch /etc/snort/guardian.ignore
touch /etc/snort/guardian.target
touch /var/log/snort/guardian.log

# setting guardian configure file (PATH /etc/snort/guardian.conf)

Interface eth0
LogFile /var/log/snort/guardian.log
AlerFile /var/log/snort/alert
IgnoreFile /etc/snort/guardian.ignore
TargetFile /etc/snort/grardian.target
TimeLimit 86400        #units: second

# /usr/local/bin/guardian_block.sh

source=$1
interface=