Hi,
I am linux newbie :-). I need router, fw and ids for my home network. I`ve used freesco floppy router but now I cannot live without IDS and precise logs ;-) Thats why I start installing Smoothwall.

I have problems with configuring smoothwall.

To connect to internet I am using special modem called HIS - its ericcson invention. It is basically standard modem with 112/112 bit/sec and static IP. It is leased line. I had to use special strings to made connection possible. I,ve passed it sucessfully after over one week of searching over net. I had to change /etc/ppp/options,
/etc/ppp/pap-secret and /etc/inittab. Everything goes fine and I was finally able to connect to internet.

My problem is that I cannot use DHCP. When I turn it on computers get their IP, I can ping (from client machines or smoothwall console) to sites using 1.2.3.4 format but When I use names I cannot connect. It is DNS problem. Ive fixed it by turning off dhcp and configure clients (winows) manually providing my ISP dns adress. I think other problems are connected with that issue. When I am trying to traceroute or made update from S-W console It always fails.

But the biggest problem for me is that SNORT is not working(I think?).
In status window it is always down. Even after I check the option to turn it on, its status is still down, and I dont have any logs in logs/IDS section. Firewall works flawlesly. After security scan fron sygate.com page firewall shows me all port scan but Snort log is empty.

Maybe some of You, Gurus, out there will have any clues?
;-)


ps - I will post same question in smoothwall forum.

no gurus there??? ;-)

Ive change /etc/resolv.conf file manually and add my ISP DNS adress there. It helps in almost all issues. I couldn`t do this from web panel.

I still cannot run snort. Does snort don`t like me?:-)

I see if you have problem you have to face it alone
But anyway I now know more
The problem was in configuration of the modem . snort didnt know that connection is present and dont run.
I think it was because modem connection to internet was made by brute force. snort wasn`t know about it because ipcop don`t see it either.
It is just an simple explenation made by newbee.
I use modem whitch should be standard modem but its somechow different (erricson HIS / SDI modem 112/112kbit/sec) Thatswhy standard procedure to setting modem dont works here. I have to settup it manually.
Today Ive try different approach. Ive made fresh install. than go to web panel. setup modem (put pass/user, dns from my ISP, persist, 115200 baud etc etc, but NOT start at startup)
THAN log as root at console and make new file /etc/rc.d/ "rc.sdi" add
#!/bin/sh
pppd /dev/ttyS1 115200 modem persist defalutroute lock crtscts noauth user ******
than chmod u+x /etc/rc.d/rc.sdi
than to have auto dialup at boot Ive edit /etc/rc.d/rc.local and add
if [ -x /etc/rc.d/rc.sdi ]; then

/etc/rc.d/rc.sdi
fi

voila! it works and pig is working.
Ive write that long story because someone maybe had the same problem.
bye