Issues with White and Blacklist entries in Snort

Sunday, May 4, 2014

Well, again, I was referring to this guide. The problem was, after I have changed the values of



var WHITE_LIST_PATH ../rules
var BLACK_LIST_PATH ../rules


to:



var WHITE_LIST_PATH /usr/local/snort/rules
var BLACK_LIST_PATH /usr/local/snort/rules


and I received the error message:


WARNING: Can't find any whitelist/blacklist entries. Reputation Preprocessor disabled.


so I then changed it to:



#var WHITE_LIST_PATH /usr/local/snort/rules
#var BLACK_LIST_PATH /usr/local/snort/rules


but when I did that, I received a new error message:


/usr/local/snort/etc/snort.conf(507) Undefined variable name: WHITE_LIST_PATH.


Does anyone have any idea what I did wrong here?







http://ift.tt/1iTG47C