webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-09 18:45:54 +02:00
Code Issues Packages Projects Releases Wiki Activity

convert-ids-backend-files: Convert MONITOR_TRAFFIC_ONLY settings.

Browse Source 
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
This commit is contained in:
Stefan Schantl
2022-04-16 14:39:09 +02:00
parent a2c56ead73
commit 2e558477da
1 changed files with 37 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

40
config/suricata/convert-ids-backend-files
View File

@@ -184,14 +184,48 @@ foreach my $provider (@providers) {
}
#
## Step 4: Regenerate the ruleset.
## Step 4: Convert MONTIOR_TRAFFIC_ONLY setting.
#
my %ids_settings = ();
my %provider_settings = ();
&General::readhash("$IDS::ids_settings_file", \%ids_settings);
&General::readhasharray("$IDS::providers_settings_file", \%provider_settings);
# Default to IPS mode.
my $mode = "IPS";
# Check if MONTOR_TRAFFIC_ONLY has been activated.
if(($ids_settings{'MONITOR_TRAFFIC_ONLY'} && $ids_settings{'MONITOR_TRAFFIC_ONLY'} eq "on")) {
$mode = "IDS";
}
# Loop through the hash of providers.
foreach my $key (keys %provider_settings) {
# Get and dereference settings array from hash.
my @settings = @{ $provider_settings{$key} };
# Add the mode as last element to the settings array.
push(@settings, $mode);
# Assign the new settings to the hash.
$provider_settings{$key} = [ @settings ];
}
# Write back providers settings.
&General::writehasharray("$IDS::providers_settings_file", \%provider_settings);
#
## Step 5: Regenerate the ruleset.
#
#
# Call oinkmaster wrapper function.
&IDS::oinkmaster();
#
## Step 5: Write new config file for suricata which contains the used rulesfiles.
## Step 6: Write new config file for suricata which contains the used rulesfiles.
#
# Get enabled providers.
@@ -201,7 +235,7 @@ my @enabled_providers = &IDS::get_enabled_providers();
&IDS::write_used_rulefiles_file(@enabled_providers);
#
## Step 6: Remove unneeded orphaned files.
## Step 7: Remove unneeded orphaned files.
#
# Loop through the array of files which are safe to drop.