|
|
|
@@ -19,11 +19,12 @@ |
|
|
|
|
|
|
|
|
|
|
|
<LI><A href="#Download">Download the Sniffer Plugin</A> |
|
|
|
<LI><A href="#Install">Installation</A> |
|
|
|
<LI><A href="#Install" name=Install>Installation</A> |
|
|
|
<UL> |
|
|
|
<LI><A href="#WIN32">Installing on a MS Windows 200x/NT/XP/9x System</A> |
|
|
|
<LI><A href="#Linux">Installing on a Linux System</A> |
|
|
|
<LI><A href="#FreeBSD">Installing on a FreeBSD or OpenBSD System</A> |
|
|
|
<LI><A href="#Source">Installing from source</A> |
|
|
|
</UL> |
|
|
|
<LI><A href="#Upgrading">Upgrading to a newer version</A> |
|
|
|
<LI><A href="#Config">Configuring the Sniffer Plugin</A> |
|
|
|
@@ -69,38 +70,62 @@ CommuniGatePro version 5.2.3 or later. |
|
|
|
<TR> |
|
|
|
<TD ALIGN=CENTER>Microsoft Windows NT/2000/XP<BR>Microsoft Windows 95/98</TD> |
|
|
|
<TD ALIGN=CENTER>x86</TD> |
|
|
|
<TD ALIGN=CENTER><A HREF="http://www.armresearch.com/pub/plugins/SNF4CGP-Win32-Intel.zip"> |
|
|
|
<TD ALIGN=CENTER><A HREF="http://www.armresearch.com/pub/plugins/CGPSNF-Win32-Intel.zip"> |
|
|
|
<IMG SRC="DownLoad.gif" BORDER=0 WIDTH=16 HEIGHT=16></A></TD> |
|
|
|
<TD ALIGN=CENTER><A HREF="ftp://ftp.armresearch.com/pub/plugins/SNF4CGP-Win32-Intel.zip"> |
|
|
|
<TD ALIGN=CENTER><A HREF="ftp://ftp.armresearch.com/pub/plugins/CGPSNF-Win32-Intel.zip"> |
|
|
|
<IMG SRC="DownLoad.gif" BORDER=0 WIDTH=16 HEIGHT=16></A></TD> |
|
|
|
</TR> |
|
|
|
|
|
|
|
<TR> |
|
|
|
<TD ALIGN=CENTER>Linux<BR>Kernel 2.6 (stdc++ library version = 6.0)</TD> |
|
|
|
<TD ALIGN=CENTER rowspan=2>Linux (RedHat/Fedora/CentOS, Ubuntu, SuSE)</TD> |
|
|
|
<TD ALIGN=CENTER>x86</TD> |
|
|
|
<TD ALIGN=CENTER><A HREF="http://www.armresearch.com/pub/plugins/SNF4CGP-Linux-Intel.tar.gz"> |
|
|
|
<IMG SRC="DownLoad.gif" BORDER=0 WIDTH=16 HEIGHT=16></A></TD> |
|
|
|
<TD ALIGN=CENTER><A HREF="ftp://ftp.armresearch.com/pub/plugins/SNF4CGP-Linux-Intel.tar.gz"> |
|
|
|
<IMG SRC="DownLoad.gif" BORDER=0 WIDTH=16 HEIGHT=16></A></TD> |
|
|
|
<TD ALIGN=CENTER><A HREF="http://www.armresearch.com/pub/plugins/CGPSNF-Linux-Intel.tar.gz"><IMG SRC="DownLoad.gif" |
|
|
|
BORDER=0 WIDTH=16 HEIGHT=16></A></TD> |
|
|
|
<TD ALIGN=CENTER><A HREF="ftp://ftp.armresearch.com/pub/plugins/CGPSNF-Linux-Intel.tar.gz"><IMG SRC="DownLoad.gif" |
|
|
|
BORDER=0 WIDTH=16 HEIGHT=16></A></TD> |
|
|
|
|
|
|
|
<TR> |
|
|
|
<TD ALIGN=CENTER>x86_64</TD> |
|
|
|
<TD ALIGN=CENTER><A HREF="http://www.armresearch.com/pub/plugins/CGPSNF-Linux-x86_64.tar.gz"><IMG SRC="DownLoad.gif" |
|
|
|
BORDER=0 WIDTH=16 HEIGHT=16></A></TD> |
|
|
|
<TD ALIGN=CENTER><A HREF="ftp://www.armresearch.com/pub/plugins/CGPSNF-Linux-x86_64.tar.gz"><IMG SRC="DownLoad.gif" |
|
|
|
BORDER=0 WIDTH=16 HEIGHT=16></A></TD> |
|
|
|
|
|
|
|
</TR> |
|
|
|
|
|
|
|
<TR> |
|
|
|
<TD ALIGN=CENTER>FreeBSD 7.x</TD> |
|
|
|
<TD ALIGN=CENTER rowspan=2>FreeBSD 7.x</TD> |
|
|
|
<TD ALIGN=CENTER>x86</TD> |
|
|
|
<TD ALIGN=CENTER><A HREF="http://www.armresearch.com/pub/plugins/SNF4CGP-FreeBSD7-Intel.tar.gz"> |
|
|
|
<IMG SRC="DownLoad.gif" BORDER=0 WIDTH=16 HEIGHT=16></A></TD> |
|
|
|
<TD ALIGN=CENTER><A HREF="ftp://ftp.armresearch.com/pub/plugins/SNF4CGP-FreeBSD7-Intel.tar.gz"> |
|
|
|
<IMG SRC="DownLoad.gif" BORDER=0 WIDTH=16 HEIGHT=16></A></TD> |
|
|
|
<TD ALIGN=CENTER><A HREF="http://www.armresearch.com/pub/plugins/CGPSNF-FreeBSD7.x-Intel.tar.gz"><IMG SRC="DownLoad.gif" |
|
|
|
BORDER=0 WIDTH=16 HEIGHT=16></A></TD> |
|
|
|
<TD ALIGN=CENTER><A HREF="ftp://ftp.armresearch.com/pub/plugins/CGPSNF-FreeBSD7.x-Intel.tar.gz"><IMG SRC="DownLoad.gif" |
|
|
|
BORDER=0 WIDTH=16 HEIGHT=16></A></TD> |
|
|
|
|
|
|
|
<TR> |
|
|
|
<TD ALIGN=CENTER>x86_64</TD> |
|
|
|
<TD ALIGN=CENTER><A HREF="http://www.armresearch.com/pub/plugins/CGPSNF-FreeBSD7.x-x86_64.tar.gz"><IMG SRC="DownLoad.gif" |
|
|
|
BORDER=0 WIDTH=16 HEIGHT=16></A></TD> |
|
|
|
<TD ALIGN=CENTER><A HREF="ftp://www.armresearch.com/pub/plugins/CGPSNF-FreeBSD7.x-x86_64.tar.gz"><IMG SRC="DownLoad.gif" |
|
|
|
BORDER=0 WIDTH=16 HEIGHT=16></A></TD> |
|
|
|
|
|
|
|
</TR> |
|
|
|
|
|
|
|
<TR> |
|
|
|
<TD ALIGN=CENTER>OpenBSD 4.3</TD> |
|
|
|
<TD ALIGN=CENTER rowspan=2>OpenBSD 4.4 or later</TD> |
|
|
|
<TD ALIGN=CENTER>x86</TD> |
|
|
|
<TD ALIGN=CENTER><A HREF="http://www.armresearch.com/pub/plugins/SNF4CGP-OpenBSD4.3-Intel.tar.gz"> |
|
|
|
<IMG SRC="DownLoad.gif" BORDER=0 WIDTH=16 HEIGHT=16></A></TD> |
|
|
|
<TD ALIGN=CENTER><A HREF="ftp://ftp.armresearch.com/pub/plugins/SNF4CGP-OpenBSD4.3-Intel.tar.gz"> |
|
|
|
<IMG SRC="DownLoad.gif" BORDER=0 WIDTH=16 HEIGHT=16></A></TD> |
|
|
|
</TR> |
|
|
|
<TD ALIGN=CENTER><A HREF="http://www.armresearch.com/pub/plugins/CGPSNF-OpenBSD4.4-Intel.tar.gz"><IMG SRC="DownLoad.gif" |
|
|
|
BORDER=0 WIDTH=16 HEIGHT=16></A></TD> |
|
|
|
<TD ALIGN=CENTER><A HREF="ftp://ftp.armresearch.com/pub/plugins/CGPSNF-OpenBSD4.4-Intel.tar.gz"><IMG SRC="DownLoad.gif" |
|
|
|
BORDER=0 WIDTH=16 HEIGHT=16></A></TD> |
|
|
|
|
|
|
|
<TR> |
|
|
|
<TD ALIGN=CENTER>x86_64</TD> |
|
|
|
<TD ALIGN=CENTER><A HREF="http://www.armresearch.com/pub/plugins/CGPSNF-OpenBSD4.4-x86_64.tar.gz"><IMG SRC="DownLoad.gif" |
|
|
|
BORDER=0 WIDTH=16 HEIGHT=16></A></TD> |
|
|
|
<TD ALIGN=CENTER><A HREF="ftp://www.armresearch.com/pub/plugins/CGPSNF-OpenBSD4.4-x86_64.tar.gz"><IMG SRC="DownLoad.gif" |
|
|
|
BORDER=0 WIDTH=16 HEIGHT=16></A></TD> |
|
|
|
|
|
|
|
</TR> |
|
|
|
|
|
|
|
</TABLE> |
|
|
|
|
|
|
|
@@ -111,7 +136,7 @@ CommuniGatePro version 5.2.3 or later. |
|
|
|
|
|
|
|
|
|
|
|
<H3><HR><A name=Upgrading></A>Upgrading to a newer version.</H3> |
|
|
|
<P>When upgrading the Plugin to a newer version, do the following steps: |
|
|
|
<P>When upgrading the Plugin to a newer version, do the following: |
|
|
|
<UL> |
|
|
|
<LI>Stop the current copy of the plugin application via CommuniGate Pro WebAdmin interface. |
|
|
|
<LI>Install and configure the new version of the Plugin as described above in this document. |
|
|
|
@@ -122,7 +147,7 @@ CommuniGatePro version 5.2.3 or later. |
|
|
|
<LI>Open the command-line interface window and |
|
|
|
change the current directory to the CommuniGate Pro <I>base directory</I>. |
|
|
|
<LI>Use any "unzip"-type tool to unpack the |
|
|
|
<TT>SNF4CGP-Win32-Intel.zip</TT> file. The <TT>SNF4CGP</TT> directory will be created inside the <I>base directory</I>. |
|
|
|
<TT>CGPSNF-Win32-Intel.zip</TT> file. The <TT>CGPSNF</TT> directory will be created inside the <I>base directory</I>. |
|
|
|
<LI>Proceed with <A HREF="#Config">Configuring the Sniffer Plugin</A>. |
|
|
|
</UL> |
|
|
|
|
|
|
|
@@ -132,9 +157,9 @@ CommuniGatePro version 5.2.3 or later. |
|
|
|
<LI>Change the current directory to the CommuniGate Pro <I>base directory</I>. |
|
|
|
<LI>Unpack the Plugin archive with the <TT>gtar</TT> command (or |
|
|
|
with the <TT>gunzip</TT> and <TT>tar</TT> commands):<TT><BR> |
|
|
|
gunzip SNF4CGP-Linux-Intel.tar.gz<BR> |
|
|
|
tar -xf SNF4CGP-Linux-Intel.tar</TT><BR> |
|
|
|
The <TT>SNF4CGP</TT> directory will be created inside the <I>base directory</I>. |
|
|
|
gunzip CGPSNF-Linux-Intel.tar.gz<BR> |
|
|
|
tar -xf CGPSNF-Linux-Intel.tar</TT><BR> |
|
|
|
The <TT>CGPSNF</TT> directory will be created inside the <I>base directory</I>. |
|
|
|
<LI>Proceed with <A HREF="#Config">Configuring the Sniffer Plugin</A>. |
|
|
|
</UL> |
|
|
|
|
|
|
|
@@ -144,15 +169,37 @@ CommuniGatePro version 5.2.3 or later. |
|
|
|
<LI>Change the current directory to the CommuniGate Pro <I>base directory</I>. |
|
|
|
<LI>Unpack the Plugin archive with the <TT>gtar</TT> command (or |
|
|
|
with the <TT>gunzip</TT> and <TT>tar</TT> commands):<TT><BR> |
|
|
|
gunzip SNF4CGP-FreeBSD-Intel.tar.gz<BR> |
|
|
|
tar -xf SNF4CGP-FreeBSD-Intel.tar</TT><BR> |
|
|
|
The <TT>SNF4CGP</TT> directory will be created inside the <I>base directory</I>. |
|
|
|
gunzip CGPSNF-FreeBSD-Intel.tar.gz<BR> |
|
|
|
tar -xf CGPSNF-FreeBSD-Intel.tar</TT><BR> |
|
|
|
The <TT>CGPSNF</TT> directory will be created inside the <I>base directory</I>. |
|
|
|
<LI>Proceed with <A HREF="#Config">Configuring the Sniffer Plugin</A>. |
|
|
|
</UL> |
|
|
|
|
|
|
|
<H3><HR><A name=Source></A>Installing from source.</H3> |
|
|
|
You can build the Sniffer Plugin from source: |
|
|
|
<UL> |
|
|
|
<LI>Download the <TT>snf4cgp-X.Y.Z.tar.gz</TT>, where X.Y.Z is the |
|
|
|
version. |
|
|
|
<LI>Extract the sources with the command:<TT><BR> |
|
|
|
tar -xzf snf4cgp-X.Y.Z.tar.gz</TT><BR> |
|
|
|
This creates a directory <TT>snf4cgp-X.Y.Z</TT>. |
|
|
|
<LI>Change directory to <TT>snf4cgp-X.Y.Z</TT>:<TT><BR> |
|
|
|
cd snf4cgp-X.Y.Z</TT><BR> |
|
|
|
<LI>Configure and build the system:<TT><BR> |
|
|
|
./configure<BR> |
|
|
|
./make</TT><BR> |
|
|
|
<LI>Become super-user (root). |
|
|
|
<LI>Create the Sniffer Plugin:<TT><BR> make |
|
|
|
module</TT><BR> This creates a Plugin archive |
|
|
|
named <TT>CGPSNF-X.Y.Z-MODULE.tar.gz</TT>. |
|
|
|
<LI>Proceed with <A HREF="#Install">Installing the Sniffer |
|
|
|
Plugin</A> for your system, using the Plugin archive that was |
|
|
|
created. |
|
|
|
</UL> |
|
|
|
|
|
|
|
<H3><HR><A name=Config></A>Configuring the Sniffer Plugin.</H3> |
|
|
|
|
|
|
|
<P>In the module directory (<TT>/var/CommuniGate/SNF4CGP</TT> on a |
|
|
|
<P>In the module directory (<TT>/var/CommuniGate/CGPSNF</TT> on a |
|
|
|
Linux or Linux-like system): |
|
|
|
<UL> |
|
|
|
<LI>Copy the configuration file <TT><BR> |
|
|
|
@@ -170,7 +217,7 @@ CommuniGatePro version 5.2.3 or later. |
|
|
|
|
|
|
|
<LI>Copy <TT><BR> |
|
|
|
getRulebase.sample</TT><BR> to <TT><BR> |
|
|
|
getRulebase.xml</TT><BR> and edit to include the |
|
|
|
getRulebase</TT><BR> and edit to include the |
|
|
|
license ID and authentication: |
|
|
|
|
|
|
|
<UL> |
|
|
|
@@ -188,7 +235,9 @@ CommuniGatePro version 5.2.3 or later. |
|
|
|
ARM Research Labs.</LI> |
|
|
|
|
|
|
|
</UL> |
|
|
|
<BR> |
|
|
|
|
|
|
|
<LI>Make <TT>getRulebase</TT> executable:<TT><BR> |
|
|
|
chmod 755 getRulebase</TT><BR> |
|
|
|
|
|
|
|
<LI>Copy <TT><BR> |
|
|
|
GBUdbIgnoreList.txt.sample</TT><BR> to <TT><BR> |
|
|
|
@@ -209,7 +258,7 @@ CommuniGatePro version 5.2.3 or later. |
|
|
|
This downloads the Sniffer database to the plugin directory. |
|
|
|
</UL> |
|
|
|
|
|
|
|
The <B><TT>SNF4CGP</TT></B> program automatically updates the |
|
|
|
The <B><TT>CGPSNF</TT></B> program automatically updates the |
|
|
|
Sniffer database as needed. |
|
|
|
|
|
|
|
<LI>Proceed with <A HREF="#Test">Testing the Sniffer Plugin</A>. |
|
|
|
@@ -221,31 +270,31 @@ CommuniGatePro version 5.2.3 or later. |
|
|
|
<P>On Windows System: |
|
|
|
<!-- |
|
|
|
<UL> |
|
|
|
<LI>Launch the <TT>SNF4CGP.exe</TT> application by typing:<TT><BR> |
|
|
|
SNF4CGP\SNF4CGP.exe SNF4CGP\snf_engine.xml</TT><BR> |
|
|
|
<LI>Launch the <TT>CGPSNF.exe</TT> application by typing:<TT><BR> |
|
|
|
CGPSNF\CGPSNF.exe CGPSNF\snf_engine.xml</TT><BR> |
|
|
|
It will report the Plugin version number and build date.<BR> |
|
|
|
|
|
|
|
<LI>Type:<TT><BR> |
|
|
|
1 FILE SNF4CGP\junkmsg.msg</TT><BR> |
|
|
|
1 FILE CGPSNF\junkmsg.msg</TT><BR> |
|
|
|
The plugin should report that the file is spam. |
|
|
|
<LI>Quit <TT>SNF4CGP.exe</TT> by typing Ctrl-Z. |
|
|
|
<LI>Quit <TT>CGPSNF.exe</TT> by typing Ctrl-Z. |
|
|
|
</UL> |
|
|
|
--> |
|
|
|
|
|
|
|
<P>On a Unix System: |
|
|
|
<UL> |
|
|
|
<LI> Change to the module directory:<TT><BR> |
|
|
|
cd /var/CommuniGate/SNF4CGP</TT><BR> |
|
|
|
cd /var/CommuniGate/CGPSNF</TT><BR> |
|
|
|
|
|
|
|
<LI>Launch the <TT>SNF4CGP</TT> application by typing:<TT><BR> |
|
|
|
./SNF4CGP snf_engine.xml</TT><BR> |
|
|
|
<LI>Launch the <TT>CGPSNF</TT> application by typing:<TT><BR> |
|
|
|
./CGPSNF snf_engine.xml</TT><BR> |
|
|
|
It will report the Plugin version number and build date.<BR> |
|
|
|
|
|
|
|
<LI>Type:<TT><BR> |
|
|
|
1 FILE junkmsg.txt</TT><BR> |
|
|
|
the plugin should report that the file is spam. |
|
|
|
|
|
|
|
<LI>Quit <TT>SNF4CGP</TT> by typing Ctrl-D. |
|
|
|
<LI>Quit <TT>CGPSNF</TT> by typing Ctrl-D. |
|
|
|
</UL> |
|
|
|
|
|
|
|
<H3><HR><A NAME="Options"></A>Command Line Options</H3> |
|
|
|
@@ -282,7 +331,7 @@ Create the Helper as follows: |
|
|
|
</TR><TR> |
|
|
|
<td align="right" width="25%">Log Level:</td><td><select name="L3"><option value="0">Crashes Only</option><option value="1">Failures</option><option value="2">Major & Failures</option><option value="3">Problems</option><option value="4" selected="selected">Low Level</option><option value="5">All Info</option></select></td> |
|
|
|
<td align="right" width="25%">Program Path:</td><td><input name="P3" |
|
|
|
value="SNF4CGP/SNF4CGP /var/CommuniGate/SNF4CGP/snf_engine.xml" size="30" maxlength="255" type="text" /></td> |
|
|
|
value="CGPSNF/CGPSNF /var/CommuniGate/CGPSNF/snf_engine.xml" size="30" maxlength="255" type="text" /></td> |
|
|
|
|
|
|
|
</TR><TR> |
|
|
|
<TD ALIGN=RIGHT>Time-out:</TD><TD><SELECT NAME="T0"><OPTION VALUE=0>disabled<OPTION VALUE="15">15 seconds<OPTION VALUE="30">30 seconds<OPTION VALUE="60">minute<OPTION VALUE="120">2 minutes<OPTION VALUE="180">3 minutes<OPTION VALUE="300" SELECTED>5 minutes<OPTION VALUE="600">10 minutes<OPTION VALUE="900">15 minutes<OPTION VALUE="1800">30 minutes<OPTION VALUE="3600">hour</SELECT></TD> |
|
|
|
@@ -294,10 +343,10 @@ Create the Helper as follows: |
|
|
|
|
|
|
|
|
|
|
|
<B>Note:</B> For Windows system the Program Path shold be |
|
|
|
<TT>SNF4CGP\SNF4CGP.exe SNF4CGP\snf_engine.xml</TT><BR> |
|
|
|
<TT>CGPSNF\CGPSNF.exe CGPSNF\snf_engine.xml</TT><BR> |
|
|
|
<B>Note:</B> On some versions of FreeBSD system you may need to |
|
|
|
specify the full path to the program, |
|
|
|
i.e. <tt>/var/CommuniGate/SNF4CGP/SNF4CGP /var/CommuniGate/SNF4CGP/snf_engine.xml</tt> |
|
|
|
i.e. <tt>/var/CommuniGate/CGPSNF/CGPSNF /var/CommuniGate/CGPSNF/snf_engine.xml</tt> |
|
|
|
|
|
|
|
<P>The recommended Scanning Rule is as follows:</P> |
|
|
|
|
