Project

General

Profile

Actions

Feature #11210

open

3rd party rulesets

Added by Viktor Gurov 11 months ago. Updated 5 days ago.

Status:
Feedback
Priority:
Normal
Assignee:
Category:
Suricata
Target version:
-
Start date:
01/01/2021
Due date:
% Done:

0%

Estimated time:
Plus Target Version:

Description

It would be useful to add the ability to use any additional third party rulesets,
and download/update them just like the current rulesets

For example https://sslbl.abuse.ch/blacklist/#ssl-certificates-suricata
or https://github.com/ptresearch/AttackDetection

Actions #3

Updated by Renato Botelho 4 months ago

  • Status changed from New to Feedback
  • Assignee set to Viktor Gurov

PR has been merged. Thanks!

Actions #4

Updated by Marcos Mendoza 4 months ago

Tested fine here. Only issue I see is the Delete button will remove the Check MD5 label as well. Also, when adding a new entry, the checkbox defaults to whatever the last entry is. It should probably default to unchecked.

This also has the side effect of disabling previously enabled categories; this should be avoided if possible.

Actions #5

Updated by Viktor Gurov 5 days ago

Marcos Mendoza wrote in #note-4:

Tested fine here. Only issue I see is the Delete button will remove the Check MD5 label as well. Also, when adding a new entry, the checkbox defaults to whatever the last entry is. It should probably default to unchecked.

I see the same issue on the services_ntpd.php page
it seems to be related to pfSense.js

Actions

Also available in: Atom PDF