Commit fc110d02 authored by Ad Schellevis's avatar Ad Schellevis Committed by Franco Fichtner

(ids) add template for user defined rules

(cherry picked from commit 32c774fb)
parent 6ba4d79d
...@@ -5,3 +5,4 @@ newsyslog.conf:/etc/newsyslog.conf.d/suricata ...@@ -5,3 +5,4 @@ newsyslog.conf:/etc/newsyslog.conf.d/suricata
rule-updater.config:/usr/local/etc/suricata/rule-updater.config rule-updater.config:/usr/local/etc/suricata/rule-updater.config
classification.config:/usr/local/etc/suricata/classification.config classification.config:/usr/local/etc/suricata/classification.config
reference.config:/usr/local/etc/suricata/reference.config reference.config:/usr/local/etc/suricata/reference.config
OPNsense.rules:/usr/local/etc/suricata/rules/OPNsense.rules
# AUTO GENERATED, DO NOT EDIT.
#
# OPNsense.rules
# User defined rules
#
# -- SSL fingerprint rules
{% if helpers.exists('OPNsense.IDS.rules.fingerprint') %}
{% for rule in helpers.toList('OPNsense.IDS.rules.fingerprint') %}
{{rule.action}} tls any any -> any any (msg:"{{rule.description.replace('"','\"')}}"; tls.fingerprint:"{{rule.fingerprint.lower()}}"; sid:{{4294967295 - loop.index}}; rev:1;)
{% endfor %}
{% endif %}
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment