webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-05-11 09:48:24 +02:00
Code Issues Packages Projects Releases Wiki Activity

suricata: Do not always convert rules to be bi-directional

Browse Source 
This creates some overhead that we do not need and rules need to
be adjusted to match any direction they are supposed to match.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
This commit is contained in:
Michael Tremer
2019-04-21 01:32:07 +01:00
committed by Arne Fitzenreiter
parent 7b0c8a80af
commit 56f6d107ff
1 changed files with 0 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
config/cfgroot/ids-functions.pl
View File

@@ -742,9 +742,6 @@ sub write_modify_sids_file($) {
# Write file header.
print FILE "#Autogenerated file. Any custom changes will be overwritten!\n";
# Tune rules to monitor in both directions.
print FILE "modifysid \* \"\-\>\" \| \"\<\>\"\n";
# Check if the traffic only should be monitored.
unless($ruleaction eq "alert") {
# Tell oinkmaster to switch all rules from alert to drop.