webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-28 11:43:25 +02:00
Code Issues Packages Projects Releases Wiki Activity

suricata: Do not always convert rules to be bi-directional

Browse Source 
This creates some overhead that we do not need and rules need to
be adjusted to match any direction they are supposed to match.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
This commit is contained in:
Michael Tremer
2019-04-21 01:32:07 +01:00
parent e967871e8f
commit 2dd5e64592
2 changed files with 1 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
config/cfgroot/ids-functions.pl
View File

@@ -742,9 +742,6 @@ sub write_modify_sids_file($) {
# Write file header.
print FILE "#Autogenerated file. Any custom changes will be overwritten!\n";
# Tune rules to monitor in both directions.
print FILE "modifysid \* \"\-\>\" \| \"\<\>\"\n";
# Check if the traffic only should be monitored.
unless($ruleaction eq "alert") {
# Tell oinkmaster to switch all rules from alert to drop.