From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail02.haj.ipfire.org (localhost [IPv6:::1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4jHY222qF7z32dV for ; Sun, 01 Nov 2026 11:46:02 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature ECDSA (secp384r1 raw public key) server-digest SHA384 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mail01.haj.ipfire.org", Issuer "YR1" (not verified)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4jHY1y74wPz2xTL for ; Sun, 01 Nov 2026 11:45:58 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4jHY1x4vGCz2W0; Sun, 01 Nov 2026 11:45:57 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1793533557; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=uY1J1iDUzhOymOv32thlANsDoJqTkb9uSPspsBhD6Mc=; b=7xK2qlAWUL29zOElNP4LNLacu2omAkcirrH8wicxhgQzBcwIMxVnYXGr3brOft2X8UAKH6 iJMQ5JEs10fxuhCA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1793533557; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=uY1J1iDUzhOymOv32thlANsDoJqTkb9uSPspsBhD6Mc=; b=aXAMIbNyAesppoAcKqNvZnuusFUfPKujyUd6NSUQmJJhRffUEQY1Q9zHb5/SeH3foG1sv/ qyUPsnRajk1ZB/wtYk8MAgFZkb1SuVIMQEfkWuz9KM3ovfHZfAtPzoqc4/t5Sa82JNzA/N QCYcTHP6wqLbpocwoKnKdksFdTxz9rOxdIzuOASpOIcDPxbIyiwycb1r/L62SMMjv7MPN6 7Ybjjj+vwZGfnI1IYAiufHVuiCWj7mPm6dUMwFU1YYAy0Med/iSnGPecyBA3qlg12CyxWi 6gzZ5r9+H/HfVeOCz4AKmfEu77XIZiTMfypPUr4ifcoKeXpICKHe8KeGS/f1Wg== Message-ID: Date: Sun, 1 Nov 2026 12:45:54 +0100 Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: MIME-Version: 1.0 Subject: Re: [PATCH] Suricata rule: Antiphishing fix url for datasets and sids information From: Adolf Belka To: development@lists.ipfire.org Cc: jul10l1r4@disroot.org References: <01bc914c-1126-45b0-9534-1027aa39717a@ipfire.org> Content-Language: en-GB In-Reply-To: <01bc914c-1126-45b0-9534-1027aa39717a@ipfire.org> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit Tested-by: Adolf Belka On 31/10/2026 20:48, Adolf Belka wrote: > Hi All, > > This patch is related to https://bugzilla.ipfire.org/show_bug.cgi?id=14616 > > I reported the issue into the julioliraup github issues#13 and this patch is the proposed solution which is to have a tailored rules tarball for IPFire in the same way as for other firewalls. > > The commit for the creation of an IPFire specific tarball is https://github.com/julioliraup/Antiphishing/commit/c674976b3f0818db11aa9c920dd1162a136d47f6 > > Many thanks julioliraup for the speedy response on this. > > Regards, > > Adolf. > > On 31/10/2026 18:59, jul10l1r4@disroot.org wrote: >>  From d5cb2a1c4156ef830e49d92679b4038739620808 Mon Sep 17 00:00:00 2001 >> From: jul10l1r4 >> Date: Sat, 31 Oct 2026 14:46:43 -0300 >> Subject: [PATCH] Suricata rule: Antiphishing fix url for datasets and sids information >> >> --- >>   config/suricata/ruleset-sources | 3 ++- >>   1 file changed, 2 insertions(+), 1 deletion(-) >> >> diff --git a/config/suricata/ruleset-sources b/config/suricata/ruleset-sources >> index 71d18c780..ff1289902 100644 >> --- a/config/suricata/ruleset-sources >> +++ b/config/suricata/ruleset-sources >> @@ -166,9 +166,10 @@ our %Providers = ( >>           website => "https://github.com/julioliraup/Antiphishing", >>           tr_string => "julioliraup/Antiphishing for protect against phishing attack", >>           requires_subscription => "False", >> -        dl_url => "https://raw.githubusercontent.com/julioliraup/Antiphishing/refs/heads/main/antiphishing.tar.gz", >> +        dl_url => "https://raw.githubusercontent.com/julioliraup/Antiphishing/refs/heads/main/antiphishing-ipfire.tar.gz", >>           dl_type => "archive", >>           sid_range => ["6000000", "6100000"], >> +        sid_info_url => "https://julioliraup.github.io/AT/signature.html?sid=", >>       }, >> >>       ipfire_dbl => { >