From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail02.haj.ipfire.org (localhost [IPv6:::1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4jH7nd4MPtz32XL for ; Sat, 31 Oct 2026 19:48:53 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [IPv6:2001:678:b28::25]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail01.haj.ipfire.org", Issuer "YR1" (not verified)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4jH7nW28x3z2xHk for ; Sat, 31 Oct 2026 19:48:47 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4jH7nT0W1mz4gj; Sat, 31 Oct 2026 19:48:44 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1793476125; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=Bct3WtZ+gUczCXtDnWcXbB6CkwhTzQ8H+JoMRhIo0SM=; b=pB21NdZCEuFu05Etmtyq4l2YuMaKyoY0lZ19bKdD4OC1S1A5rvITAJVHUP1slE0BnNQShP qF43KEwKLse9iPCA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1793476125; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=Bct3WtZ+gUczCXtDnWcXbB6CkwhTzQ8H+JoMRhIo0SM=; b=o9DShTrkKjI3H85FsN1XkDOgumCGnO06zz2XjMml5Vdhk/Kj6YbUm3XRNnACnXsNUgJJKp Nudnb6GP4unUHg3nzbva3rpcm6dCkZmWWumCSq9LB3HhhDsgJPTv96KkwFt9V9pwSS0/TE qFt87SxbU2AQEnXGKyp6cBjwVG38XXE7gAnvpSlKEYaa2cF/XcA2kwnNOhQK19fzFtTSFp om3uOTDPP0WtmBT9I429Q1CTXDzkxNAlbPzPhTpM3WLnakU5C1omDiXmFXWLUrK3nbcR4r j2ZLwOxAhdMT9YEZeSNQzsVVvS7rPxoxRrCHunc5+y1oTYOwtT4kxZVmLpLJfA== Message-ID: <01bc914c-1126-45b0-9534-1027aa39717a@ipfire.org> Date: Sat, 31 Oct 2026 20:48:41 +0100 Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: MIME-Version: 1.0 Subject: Re: [PATCH] Suricata rule: Antiphishing fix url for datasets and sids information To: development@lists.ipfire.org References: Content-Language: en-GB Cc: jul10l1r4@disroot.org From: Adolf Belka In-Reply-To: Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit Hi All, This patch is related to https://bugzilla.ipfire.org/show_bug.cgi?id=14616 I reported the issue into the julioliraup github issues#13 and this patch is the proposed solution which is to have a tailored rules tarball for IPFire in the same way as for other firewalls. The commit for the creation of an IPFire specific tarball is https://github.com/julioliraup/Antiphishing/commit/c674976b3f0818db11aa9c920dd1162a136d47f6 Many thanks julioliraup for the speedy response on this. Regards, Adolf. On 31/10/2026 18:59, jul10l1r4@disroot.org wrote: > From d5cb2a1c4156ef830e49d92679b4038739620808 Mon Sep 17 00:00:00 2001 > From: jul10l1r4 > Date: Sat, 31 Oct 2026 14:46:43 -0300 > Subject: [PATCH] Suricata rule: Antiphishing fix url for datasets and sids information > > --- >  config/suricata/ruleset-sources | 3 ++- >  1 file changed, 2 insertions(+), 1 deletion(-) > > diff --git a/config/suricata/ruleset-sources b/config/suricata/ruleset-sources > index 71d18c780..ff1289902 100644 > --- a/config/suricata/ruleset-sources > +++ b/config/suricata/ruleset-sources > @@ -166,9 +166,10 @@ our %Providers = ( >          website => "https://github.com/julioliraup/Antiphishing", >          tr_string => "julioliraup/Antiphishing for protect against phishing attack", >          requires_subscription => "False", > -        dl_url => "https://raw.githubusercontent.com/julioliraup/Antiphishing/refs/heads/main/antiphishing.tar.gz", > +        dl_url => "https://raw.githubusercontent.com/julioliraup/Antiphishing/refs/heads/main/antiphishing-ipfire.tar.gz", >          dl_type => "archive", >          sid_range => ["6000000", "6100000"], > +        sid_info_url => "https://julioliraup.github.io/AT/signature.html?sid=", >      }, > >      ipfire_dbl => {