mirror of
https://github.com/vincentmli/bpfire.git
synced 2026-04-10 02:55:55 +02:00
ids-functions.pl: Set bypass flag for whitelisted hosts.
When adding a host to the whitelist set the bypass flag to immediate take the load from the IDS. Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
This commit is contained in:
@@ -1692,7 +1692,7 @@ sub generate_ignore_file() {
|
||||
# Check if the address/network is valid.
|
||||
if ((&General::validip($address)) || (&General::validipandmask($address))) {
|
||||
# Write rule line to the file to pass any traffic from this IP
|
||||
print FILE "pass ip $address any -> any any (msg:\"pass all traffic from/to $address\"\; sid:$sid\;)\n";
|
||||
print FILE "pass ip $address any -> any any (msg:\"pass all traffic from/to $address\"\; bypass; sid:$sid\;)\n";
|
||||
|
||||
# Increment sid.
|
||||
$sid++;
|
||||
|
||||
Reference in New Issue
Block a user