Feature #11210
closed
3rd party rulesets
0%
Description
It would be useful to add the ability to use any additional third party rulesets,
and download/update them just like the current rulesets
For example https://sslbl.abuse.ch/blacklist/#ssl-certificates-suricata
or https://github.com/ptresearch/AttackDetection
Related issues
Updated by Viktor Gurov almost 2 years ago
For example https://sslbl.abuse.ch/blacklist/#ssl-certificates-suricata
- added to 6.0.0_11
see https://forum.netgate.com/topic/164593/suricata-6-0-0_11-package-update-release-notes
Updated by Viktor Gurov over 1 year ago
Updated by Renato Botelho over 1 year ago
- Status changed from New to Feedback
- Assignee set to Viktor Gurov
PR has been merged. Thanks!
Updated by Marcos M over 1 year ago
Tested fine here. Only issue I see is the Delete button will remove the Check MD5 label as well. Also, when adding a new entry, the checkbox defaults to whatever the last entry is. It should probably default to unchecked.
This also has the side effect of disabling previously enabled categories; this should be avoided if possible.
Updated by Viktor Gurov over 1 year ago
Marcos Mendoza wrote in #note-4:
Tested fine here. Only issue I see is the
Deletebutton will remove theCheck MD5label as well. Also, when adding a new entry, the checkbox defaults to whatever the last entry is. It should probably default to unchecked.
I see the same issue on the services_ntpd.php page
it seems to be related to pfSense.js
Updated by Viktor Gurov over 1 year ago
- Related to Regression #12643: Rule categories are cleared after clicking the save button on the Global Settings page added