diff options
author | bmeeks8 <bmeeks8@bellsouth.net> | 2014-02-24 20:32:57 -0500 |
---|---|---|
committer | bmeeks8 <bmeeks8@bellsouth.net> | 2014-02-24 20:32:57 -0500 |
commit | 348de1c7372ec0b1d7a21955939373df5eb675ba (patch) | |
tree | 88a73454b5dfb108c1ae92d1927f1676b820ad27 /config/suricata | |
parent | c1717f2d9752d19c54e86e1bcb6cb81f5b253710 (diff) | |
download | pfsense-packages-348de1c7372ec0b1d7a21955939373df5eb675ba.tar.gz pfsense-packages-348de1c7372ec0b1d7a21955939373df5eb675ba.tar.bz2 pfsense-packages-348de1c7372ec0b1d7a21955939373df5eb675ba.zip |
Add temp fix in post-install to add default rules back to enabled rules.
Diffstat (limited to 'config/suricata')
-rw-r--r-- | config/suricata/suricata_post_install.php | 11 |
1 files changed, 11 insertions, 0 deletions
diff --git a/config/suricata/suricata_post_install.php b/config/suricata/suricata_post_install.php index 653f47fd..6603d5ab 100644 --- a/config/suricata/suricata_post_install.php +++ b/config/suricata/suricata_post_install.php @@ -87,6 +87,17 @@ if ($config['installedpackages']['suricata']['config'][0]['forcekeepsettings'] = foreach ($suriconf as $value) { $if_real = get_real_interface($value['interface']); + // ## BETA pkg bug fix-up -- be sure default rules enabled ## + $rules = explode("||", $value['rulesets']); + foreach (array( "decoder-events.rules", "files.rules", "http-events.rules", "smtp-events.rules", "stream-events.rules" ) as $r){ + if (!in_array($r, $rules)) + $rules[] = $r; + } + natcasesort($rules); + $value['rulesets'] = implode("||", $rules); + write_config(); + // ## end of BETA pkg bug fix-up ## + // create a suricata.yaml file for interface suricata_generate_yaml($value); |