store | blogs | forums | twitter | facebook | wiki | mailing lists | downloads | support portal
Atomic Secure Linux
It is currently Tue Jun 18, 2013 7:24 pm

» Feed - Atomicorp

All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic Share/Bookmark  [ 8 posts ] 
Author Message
 Post subject: ASL 3.0.4 Released
Unread postPosted: Mon Aug 08, 2011 12:08 pm 
Offline
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin

Joined: Wed Dec 31, 1969 8:00 pm
Posts: 7454
Location: earth
Changelog
- Added the first version of the ASL Stats package, a command line statistics generator for external applications
- Added debug output to rule validation routines
- Added whitelist suppor to mod_evasive
- Added paging t the Rule Manager
- Updated Blacklist ruleset to load before INPUT
- Updated psa_check to allow clamav to be disabled in psa-proftpd
- Updated configuration to retain settings from the last time it was run.
- Updated rule update events to force a reload of the dashboard
- Feature Request #317 , add remote database support to database-setup
- Bugfix #460 , correctly detect when safe_mode is enabled even if it is disabled in config
- Bugfix #635, delete update file if it already exists on a -uf force upgrade event
- Bugfix #XXX, ASL Web Rule Manager, fixed a conditionwhere the rule manager would not update the policy
- Bugfix #XXX, ASL Web Blocklist retrevial fix

To Upgrade:
yum upgrade asl asl-web


Top
 Profile  
 
 Post subject: Re: ASL 3.0.4 Released
Unread postPosted: Mon Aug 08, 2011 1:09 pm 
Offline
Forum Regular
Forum Regular

Joined: Tue Jul 15, 2008 2:38 pm
Posts: 715
Location: Sweden
Thanks for the update! I get an error when running asl -s -f
Code:
  DOSSiteCount set to: 200                                 [OK]
  DOSPageInterval set to: 2                                [OK]
  DOSSiteInterval set to: 2                                [OK]
  DOSBlockingPeriod set to: 25                             [OK]

Warning: Unknown pcre modifier: '2' in lib/asl-functions.php on line 339
      checking: xxx.yyyy.zzz.www/26                             [FIXED]
      checking: 127.0.0.1                                  [OK]

Restarting clamav, this could take a moment...

I Removed the ip above (xxx.yyy...)

Also, since a few versions back (3.0.2?) I get a high vulnerability indicator for "advanced Attack Ruleset" but I can't find a way to enable it...


Top
 Profile  
 
 Post subject: Re: ASL 3.0.4 Released
Unread postPosted: Mon Aug 08, 2011 5:38 pm 
Offline
Forum Regular
Forum Regular

Joined: Sat Dec 11, 2004 2:33 pm
Posts: 195
Location: South Africa
biggles wrote:
Also, since a few versions back (3.0.2?) I get a high vulnerability indicator for "advanced Attack Ruleset" but I can't find a way to enable it...


I am also seeing the same - running version 3.0.5

_________________
Mark Brindley
2Large Networks - Web solutions that work


Top
 Profile  
 
 Post subject: Re: ASL 3.0.4 Released
Unread postPosted: Tue Aug 09, 2011 2:40 am 
Offline
Forum Regular
Forum Regular

Joined: Tue Jul 15, 2008 2:38 pm
Posts: 715
Location: Sweden
Upgraded to 3.0.5 still seeing both messages...


Top
 Profile  
 
 Post subject: Re: ASL 3.0.4 Released
Unread postPosted: Tue Aug 16, 2011 7:11 am 
Offline
Forum Regular
Forum Regular

Joined: Tue Jul 15, 2008 2:38 pm
Posts: 715
Location: Sweden
Issue #1 seems to be fixed in 3.0.7


Top
 Profile  
 
 Post subject: Re: ASL 3.0.4 Released
Unread postPosted: Tue Aug 16, 2011 7:52 am 
Offline
Forum Regular
Forum Regular

Joined: Sat Dec 11, 2004 2:33 pm
Posts: 195
Location: South Africa
biggles wrote:
Issue #1 seems to be fixed in 3.0.7


Same for me: Advanced Attack Ruleset: on [OK]

_________________
Mark Brindley
2Large Networks - Web solutions that work


Top
 Profile  
 
 Post subject: Re: ASL 3.0.4 Released
Unread postPosted: Tue Aug 16, 2011 11:42 am 
Offline
Forum Regular
Forum Regular

Joined: Tue Jul 15, 2008 2:38 pm
Posts: 715
Location: Sweden
Yes,that one is fixed as well. But now I see "Strict Multiform Ruleset: off" marked as a MODERATE risk...


Top
 Profile  
 
 Post subject: Re: ASL 3.0.4 Released
Unread postPosted: Tue Aug 16, 2011 11:58 am 
Offline
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin
User avatar

Joined: Thu Feb 07, 2008 7:49 pm
Posts: 3264
Location: Chantilly, VA
Quote:
Yes,that one is fixed as well. But now I see "Strict Multiform Ruleset: off" marked as a MODERATE risk...


That ruleset is disabled by default, just log into the GUI and enabled it if you want to use it.

_________________
Michael Shinn
Atomicorp - Security For Everyone

Co-Author of Troubleshooting Linux Firewalls.


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic Share/Bookmark  [ 8 posts ] 

» Feed - Atomicorp

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 0 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group