This folder contains the test versions for additional service rules for the IDS subsystem.

To join testing please ensure you have running an IPFire instance with at least core update 169 installed.

Currently only rules for tor are available.

To install any of the test version do the following steps:

- Grab the latest test tarball and put it on your IPFire machine.
- Extract the tarball by using "tar -xvf ids-services-xxx.tar.gz -C /"

Navigate to the IDS or Tor page in the WUI of your IPFire system and press the
"Save" button to regenerate the configuration and use the additional IDS rules.

Now a lot of nasty alerts in your IDS log files should be silecend which helps to keep
it a lot cleaner and find network issues or real attacks.

Please post your feedback and issues to the development mailing list:
<development@lists.ipfire.org>

Version history:

001 - First test release
 * Support of tor.
 * No known bugs so far.

002 - Second test release
 * Fixed array access in ports helpers library.
 * Adjusted rules file to silence more events.

003 - Third test release
 * Update to work with Core 184