From mboxrd@z Thu Jan 1 00:00:00 1970 From: Stefan Schantl To: development@lists.ipfire.org Subject: [PATCH] suricata: Use correct red device when using QMI Date: Sun, 18 Aug 2024 11:15:31 +0200 Message-ID: <20240818091531.2614-1-stefan.schantl@ipfire.org> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============3873892628617963801==" List-Id: --===============3873892628617963801== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable When using QMI the dial-in option has to be set to "ppp" during setup. In this case the initscript of suricata will create all related firewall rules for the ppp0 interface which is not correct when using QMI where the RED device is called red0. Signed-off-by: Stefan Schantl --- src/initscripts/system/suricata | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/initscripts/system/suricata b/src/initscripts/system/suricata index 938ea66de..79f9478c3 100644 --- a/src/initscripts/system/suricata +++ b/src/initscripts/system/suricata @@ -86,7 +86,7 @@ function generate_fw_rules { # Check if the IDS is enabled for this network zone. if [ "${!enable_ids_zone}" =3D=3D "on" ]; then # Check if the current processed zone is "red" and the configured type is= PPPoE dialin. - if [ "$zone" =3D=3D "red" ] && [ "$RED_TYPE" =3D=3D "PPPOE" ]; then + if [ "$zone" =3D=3D "red" ] && [ "$RED_TYPE" =3D=3D "PPPOE" ] && [ "$RED_= DRIVER" !=3D "qmi_wwan" ]; then # Set device name to ppp0. network_device=3D"ppp0" elif [ "$zone" =3D=3D "ovpn" ]; then --=20 2.39.2 --===============3873892628617963801==--