webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-19 07:23:03 +02:00
Code Issues Packages Projects Releases Wiki Activity

ids-functions.pl: Tune rules to always monitor in both directions.

Browse Source 
This will allow to scan the traffic from an EXTERNAL_NET to the HOME_NET and from
the HOME_NET to the EXTERNAL_NET.

Reference: 10273

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
This commit is contained in:
Stefan Schantl
2019-02-18 10:55:27 +01:00
parent 20b4c4d863
commit 7c3b7cdcca
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
config/cfgroot/ids-functions.pl
View File

@@ -742,6 +742,9 @@ sub write_modify_sids_file($) {
# Write file header.
print FILE "#Autogenerated file. Any custom changes will be overwritten!\n";
# Tune rules to monitor in both directions.
print FILE "modifysid \* \"\-\>\" \| \"\<\>\"\n";
# Check if the traffic only should be monitored.
unless($ruleaction eq "alert") {
# Tell oinkmaster to switch all rules from alert to drop.