Results 1 to 3 of 3

Thread: Problems with ACID / BASE interface for SNORT IDS on remote host

  1. #1
    Join Date
    Oct 2010
    Beans
    2
    Distro
    Ubuntu 10.10 Maverick Meerkat

    Problems with ACID / BASE interface for SNORT IDS on remote host

    I've just installed SNORT and ACID/BASE following this step by step tutorial: https://help.ubuntu.com/community/SnortIDS on a remote host over SSH. The main difference being that I have already setup a firewall that fillers all incoming traffic except for SSH, HTTPS and loopback.

    Now when I try to access https://domain.xx/acidbase/base_db_setup.php , i.e. acidbase's front end in the final configuration step I get the following error:

    Code:
     403 FORBIDDEN
    You don't have permission to access /acidbase/base_db_setup.php on this server.
    I have already run this command:
    Code:
    :/$ sudo sed -i "s#allow\ from\ 127.0.0.0/255.0.0.0#allow\ from\  127.0.0.0/255.0.0.0\ 10.10.1.10/255.255.255.0 my-vpn-gateway.xx#"  /etc/acidbase/apache.conf
    and restarted Apache.


    I also tried to access the URL from within my SSH session via Lynx web browser but whenever I type: https ://localhost/ it tells me:
    Code:
    Unable to make secure connection to remote host.
    However when I type: https ://mydomain.xx/ it works. So maybe I also have some bug in my Apache configuration.


    The remote host is running an Apache 2.2 web server, and I disabled the VirtualHost on port 80 and left only the one for port 443.


    Any help would be greatly appreciated.


    Thank you,
    Benny

  2. #2
    Join Date
    May 2007
    Location
    Phoenix, Arizona USA
    Beans
    2,909
    Distro
    Ubuntu 8.04 Hardy Heron

    Re: Problems with ACID / BASE interface for SNORT IDS on remote host

    Do you have
    Code:
     
    NameVirtualHost *:80
    Listen 80
    in your ports.conf file?

    -Tim
    www.pcchopshop.net

    Hard to find and obsolete PC and server parts. "If we can't find it, it probably doesn't exist"

  3. #3
    Join Date
    Feb 2007
    Location
    Amsterdam
    Beans
    39
    Distro
    Ubuntu 10.04 Lucid Lynx

    Re: Problems with ACID / BASE interface for SNORT IDS on remote host

    The setup has moved to here

    http://localhost/acidbase/setup/

    But if you type the same password as the snort user it will work without configuration at

    http://localhost/acidbase
    Last edited by kat_ams; December 17th, 2010 at 07:06 PM. Reason: added more information about acidbase url
    Experiences flowing into dreams, into experiences.

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •