psad

function f_psad {
  echo "[$SCRIPT_COUNT] Enable psad"

  if ! test -f "$PSADCONF"; then
    echo "$PSADCONF does not exist."

    if ! dpkg -l | grep psad 2> /dev/null 1>&2; then
      echo 'psad package is not installed.'
    fi

    return
  fi

  echo "127.0.0.1    0;" >> "$PSADDL"
  echo "$SERVERIP    0;" >> "$PSADDL"
  sed -i "s/EMAIL_ADDRESSES             root@localhost;/EMAIL_ADDRESSES             $ADMINEMAIL;/" "$PSADCONF"
  sed -i "s/HOSTNAME                    _CHANGEME_;/HOSTNAME                    $(hostname --fqdn);/" "$PSADCONF"
  sed -i 's/ENABLE_AUTO_IDS             N;/ENABLE_AUTO_IDS               Y;/' "$PSADCONF"
  sed -i 's/DANGER_LEVEL2               15;/DANGER_LEVEL2               15;/' "$PSADCONF"
  sed -i 's/DANGER_LEVEL3               150;/DANGER_LEVEL3               150;/' "$PSADCONF"
  sed -i 's/DANGER_LEVEL4               1500;/DANGER_LEVEL4               1500;/' "$PSADCONF"
  sed -i 's/DANGER_LEVEL5               10000;/DANGER_LEVEL5               10000;/' "$PSADCONF"
  sed -i 's/EMAIL_ALERT_DANGER_LEVEL    1;/EMAIL_ALERT_DANGER_LEVEL    5;/' "$PSADCONF"
  sed -i 's/EMAIL_LIMIT                 0;/EMAIL_LIMIT                 5;/' "$PSADCONF"
  sed -i 's/EXPECT_TCP_OPTIONS             *;/EXPECT_TCP_OPTIONS             Y;/' "$PSADCONF"
  sed -i 's/ENABLE_MAC_ADDR_REPORTING   N;/ENABLE_MAC_ADDR_REPORTING   Y;/' "$PSADCONF"
  sed -i 's/AUTO_IDS_DANGER_LEVEL       5;/AUTO_IDS_DANGER_LEVEL       1;/' "$PSADCONF"
  sed -i 's/ENABLE_AUTO_IDS_EMAILS      ;/ENABLE_AUTO_IDS_EMAILS      Y;/' "$PSADCONF"
  sed -i 's/IGNORE_PORTS             *;/IGNORE_PORTS             NONE;/' "$PSADCONF"
  sed -i 's/IPT_SYSLOG_FILE             \/var\/log\/messages;/IPT_SYSLOG_FILE             \/var\/log\/syslog;/' "$PSADCONF"
  sed -i 's/SIG_UPDATE_URL              http:\/\/www.cipherdyne.org\/psad\/signatures;/SIG_UPDATE_URL              https:\/\/www.cipherdyne.org\/psad\/signatures;/'  "$PSADCONF"

  psad --sig-update
  psad -H
  psad --fw-analyze

  if [[ $VERBOSE == "Y" ]]; then
    systemctl status psad.service --no-pager
    psad -S
    echo
  fi

  ((SCRIPT_COUNT++))
}