After installing the IPcop got the following error messages
When running update the Error is:
HTTP::Response=HASH(0x82a3c14)->code registered md5
When running download the Error is:
The reason is that now snort.org publish rules now on current branch that are no more compatible with snort-126.96.36.199
We have manually add the current branch, to - date it is 2. You can find on snort if you have your account on snort.org under My Account-->My Oinkcodes along with the code (You must have account at snort to access code and use snort in IPCOP).
Here is a solution, it is a manual fixation in the code.
Open the /usr/local/bin/snortrules.pl in and editor.
root@firewall:/etc/snort # nano /usr/local/bin/snortrules.pl
Change the value to 2.8 at line no 55.
my $rulesbranch="2.8"; # version should match snort branch version
Save the change.
Remember you must have to add the oink code in IPCOP--> Services-->INTRUSION DETECTION.
Save-Apply-Refresh update list-Download Rullset.
It should work, no update rull-set failure or MD5 checksum error.