aboutsummaryrefslogtreecommitdiffstats
path: root/config/suricata
diff options
context:
space:
mode:
authorbmeeks8 <bmeeks8@bellsouth.net>2014-02-24 20:32:57 -0500
committerbmeeks8 <bmeeks8@bellsouth.net>2014-02-24 20:32:57 -0500
commit348de1c7372ec0b1d7a21955939373df5eb675ba (patch)
tree88a73454b5dfb108c1ae92d1927f1676b820ad27 /config/suricata
parentc1717f2d9752d19c54e86e1bcb6cb81f5b253710 (diff)
downloadpfsense-packages-348de1c7372ec0b1d7a21955939373df5eb675ba.tar.gz
pfsense-packages-348de1c7372ec0b1d7a21955939373df5eb675ba.tar.bz2
pfsense-packages-348de1c7372ec0b1d7a21955939373df5eb675ba.zip
Add temp fix in post-install to add default rules back to enabled rules.
Diffstat (limited to 'config/suricata')
-rw-r--r--config/suricata/suricata_post_install.php11
1 files changed, 11 insertions, 0 deletions
diff --git a/config/suricata/suricata_post_install.php b/config/suricata/suricata_post_install.php
index 653f47fd..6603d5ab 100644
--- a/config/suricata/suricata_post_install.php
+++ b/config/suricata/suricata_post_install.php
@@ -87,6 +87,17 @@ if ($config['installedpackages']['suricata']['config'][0]['forcekeepsettings'] =
foreach ($suriconf as $value) {
$if_real = get_real_interface($value['interface']);
+ // ## BETA pkg bug fix-up -- be sure default rules enabled ##
+ $rules = explode("||", $value['rulesets']);
+ foreach (array( "decoder-events.rules", "files.rules", "http-events.rules", "smtp-events.rules", "stream-events.rules" ) as $r){
+ if (!in_array($r, $rules))
+ $rules[] = $r;
+ }
+ natcasesort($rules);
+ $value['rulesets'] = implode("||", $rules);
+ write_config();
+ // ## end of BETA pkg bug fix-up ##
+
// create a suricata.yaml file for interface
suricata_generate_yaml($value);