Re: [PATCH 2/2] Suricata: Add port 3128 (Transparent Proxy) to group of HTTP ports.

On 1 Apr 2020, at 11:24, Arne Fitzenreiter arne_f@ipfire.org wrote:

I think it should be better to read the proxy config which port is used. Many installtions still use 800

Absolutely.

Why do we only add the transparent port here and not the default port?

-Michael

Arne

Am 2020-04-01 11:02, schrieb Stefan Schantl:

...

Fixes #12308. Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org

---

config/suricata/suricata.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/suricata/suricata.yaml b/config/suricata/suricata.yaml index cb7ececb4..4a605c272 100644 --- a/config/suricata/suricata.yaml +++ b/config/suricata/suricata.yaml @@ -30,7 +30,7 @@ vars: ENIP_SERVER: "$HOME_NET" port-groups:

• HTTP_PORTS: "[80,81]"

• HTTP_PORTS: "[80,81,3128]" SHELLCODE_PORTS: "!80" ORACLE_PORTS: 1521 SSH_PORTS: "[22,222]"