Re: [PATCH v2] suricata: add julioliraup/Antiphishing ruleset

[Michael Tremer <michael.tremer@ipfire.org>]

Hello Julio,

Thanks for the patch. As you can see, this was mangled as well, but I made the changes manually. Please let me know if this is all correct:

https://git.ipfire.org/?p=ipfire-2.x.git;a=commitdiff;h=b96061d75d4c7bc1950f6732af4b9c8863eaadb6

All the best,
-Michael

> On 13 Jul 2026, at 00:11, jul10l1r4@disroot.org wrote:
> 
> From 3fa7a324453227d2329ce068ca7e9bdfe386d4ff Mon Sep 17 00:00:00 2001 From: jul10l1r4 <jul10l1r4@disroot.org> Date: Mon, 6 Jul 2026 01:45:32 -0300 Subject: [PATCH v2] suricata: add julioliraup/Antiphishing ruleset This patch adds the 'julioliraup/antiphishing' ruleset to the Suricata configuration. This feed is hosted on GitHub and focuses on blocking phishing threats at the network layer. It is already officially indexed by suricata-update and frequently updated. --- config/suricata/ruleset-sources | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/config/suricata/ruleset-sources b/config/suricata/ruleset-sources index 5b9073d85..f7ae8b026 100644 --- a/config/suricata/ruleset-sources +++ b/config/suricata/ruleset-sources @@ -160,6 +160,17 @@ our %Providers = ( sid_range => ["2610000", "2619999"], }, + # julioliraup/Antiphishing protect against phishing attack + julioliraup_antiphishing => { + summary => "julioliraup/Antiphishing", + website => "https://github.com/julioliraup/Antiphishing", + tr_string => "julioliraup/Antiphishing to protect against phishing attack", + requires_subscription => "False", + dl_url => "https://raw.githubusercontent.com/julioliraup/Antiphishing/refs/heads/main/antiphishing.tar.gz", + dl_type => "archive", + sid_range => ["6000000", "6100000"], + }, + ipfire_dbl => { summary => "IPFire DBL - Domain Blocklist", website => "https://www.ipfire.org/dbl/", -- 2.39.5