Project

General

Profile

Actions

Feature #11210

closed

3rd party rulesets

Added by Viktor Gurov about 3 years ago. Updated about 1 year ago.

Status:
Resolved
Priority:
Normal
Assignee:
Viktor Gurov
Category:
Suricata
Target version:
-
Start date:
01/01/2021
Due date:
% Done:

0%

Estimated time:
Plus Target Version:

Description

It would be useful to add the ability to use any additional third party rulesets,
and download/update them just like the current rulesets

For example https://sslbl.abuse.ch/blacklist/#ssl-certificates-suricata
or https://github.com/ptresearch/AttackDetection


Related issues

Related to Regression #12643: Rule categories are cleared after clicking the save button on the Global Settings pageResolved

Actions
Actions #3

Updated by Renato Botelho over 2 years ago

  • Status changed from New to Feedback
  • Assignee set to Viktor Gurov

PR has been merged. Thanks!

Actions #4

Updated by Marcos M over 2 years ago

Tested fine here. Only issue I see is the Delete button will remove the Check MD5 label as well. Also, when adding a new entry, the checkbox defaults to whatever the last entry is. It should probably default to unchecked.

This also has the side effect of disabling previously enabled categories; this should be avoided if possible.

Actions #5

Updated by Viktor Gurov over 2 years ago

Marcos Mendoza wrote in #note-4:

Tested fine here. Only issue I see is the Delete button will remove the Check MD5 label as well. Also, when adding a new entry, the checkbox defaults to whatever the last entry is. It should probably default to unchecked.

I see the same issue on the services_ntpd.php page
it seems to be related to pfSense.js

Actions #6

Updated by Viktor Gurov about 2 years ago

  • Related to Regression #12643: Rule categories are cleared after clicking the save button on the Global Settings page added
Actions #7

Updated by Marcos M about 1 year ago

  • Status changed from Feedback to Resolved
Actions

Also available in: Atom PDF