Posted by Grommish on Jul 12, 2019; 4:35pm
URL: https://itus.accessinnov.com/FIRMWARE-Itus-Networks-Shield-Firmware-Upgrade-WIP-tp1726p1803.html

I appreciate the comments.

I think I'm going to have to shelve the Suricata package for now.  While 4.1.4 works, the current 5.0.0-beta1 is going to result in a change to Suricata that requires rust-lang and cargo.  I've been talking with the Suricata dev team about it, and we are working through it.  I don't mind having rust-lang and cargo on the build machine, and we are trying to figure out if rustc and cargo are used AFTER the compile or not.  However, it may be a moot point given the fact that as far as I can tell, the rust lang isn't mips64 compatible (yet?).  Dunno.  I'll leave it as an option for 4.1.4, but I'm not sure if it'll be able to be upgraded in the future.

Aside from that issue, unless I get suggestions/comments on what else can/should be included by default (remember, opkg works and will allow each user to install things they want on top of the base image), then I'm going to close it out and begin the process of organizing, cleanup, and finalizing the image.

Todo List:
- Redo/Finalize Firstboot process
- Define Shield mode configuration requirements (Router/Gateway/Bridge)
-- Set network configs
-- Set snort configs
- Verify e2guardian settings
- Create snort update script
-- On this point, I need suggestions on where to get the rules from (if different from the previous suggested ones)
- Figure out the Firmware update system to allow delta tar file updates through luCi interface
-- This sort of works now, but reports an error and requires a forced update (unacceptable)
- Remove various debugging /dev/kmsg messages

Turrican wrote

Nice one Grommish, enjoying watching the progress you’re making in this, just wanted to let you know we’re listening, even if some of us can’t contribute per se. Must admit my 2 shields haven’t seen action for over a year since I switched to sophos utm but now looking forward to the possibility of bringing the shield back online! Thanks for your efforts.