Post-install Configuration

This is my post-install routine. The installation walkthrough page is here. For the purpose of keeping this simple, I will assume that you have successfully flashed your router and have an entire USB flash drive at your disposal. I format the drive EXT3, destroying ALL previous data on it.

Bugfixes

The early v1.7 snort log rotation script accidentally deleted things, so of you have an older copy of v1.7 you will need to update /packetprotector/usr/sbin/snortlogrotate.sh. However, if you do this :

vi /packetprotector/usr/sbin/snortlogrotate.sh

and lines 12-17 look like this:

    killall snort && /packetprotector/etc/init.d/snort
fi
if [ "X$SNORT_INLINE_ENABLED" = "X1" ] ; then
    mv $LOGDIR/snort-inline/alert $LOGDIR/snort-inline/alert.$EPOCHTIME && touch $LOGDIR/snort-inline/alert
    killall -HUP snort-inline

You're good to go, you have the working version.

BUT:

If you look at /packetprotector/usr/sbin/snortlogrotate.sh and see this on lines 12-17:

    killall -HUP snort
fi
if [ "X$SNORT_INLINE_ENABLED" = "X1" ] ; then
    mv $LOGDIR/snort-inline/alert $LOGDIR/snort-inline/alert.$EPOCHTIME && touch $LOGDIR/snort-inline/alert
    killall snort-inline && /packetprotector/etc/init.d/snort-inline

You need to do this:

cd /packetprotector/usr/sbin
wget http://packetprotector.org/download/experimental/snortlogrotate.sh
chmod +x snortlogrotate.sh

and reboot the router.

At this point I'm usually up and running, so there's not much more to add. If you do run into something else that needs to happen right after the flash is done, feel free to put it here.