[git.ipfire.org] IPFire 2.x development tree branch, master, updated. 551bc489408c1efc0d0899ead3894c3d04a0f300

[Arne Fitzenreiter <git@ipfire.org>]

[-- Attachment #1: Type: text/plain, Size: 3315 bytes --]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "IPFire 2.x development tree".

The branch, master has been updated
       via  551bc489408c1efc0d0899ead3894c3d04a0f300 (commit)
       via  b8fcb4956758b88b8a46eff5641aa80f244ed605 (commit)
      from  b518bee95c15ce626dc93e4aa7e39282448ee0b6 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 551bc489408c1efc0d0899ead3894c3d04a0f300
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date:   Wed Apr 8 15:48:20 2020 +0000

    suricata: disable dns flood protection
    
    this causes errors in unbound and also other linux clients if
    a dns rule triggers.
    
    Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>

commit b8fcb4956758b88b8a46eff5641aa80f244ed605
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date:   Wed Apr 8 15:43:35 2020 +0000

    suricata: update ET rulesets sources for suricata 5
    
    Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>

-----------------------------------------------------------------------

Summary of changes:
 config/rootfiles/core/143/filelists/files | 1 +
 config/suricata/ruleset-sources           | 4 ++--
 config/suricata/suricata.yaml             | 2 +-
 3 files changed, 4 insertions(+), 3 deletions(-)

Difference in files:
diff --git a/config/rootfiles/core/143/filelists/files b/config/rootfiles/core/143/filelists/files
index 9cb36e78c..34e9b92df 100644
--- a/config/rootfiles/core/143/filelists/files
+++ b/config/rootfiles/core/143/filelists/files
@@ -21,3 +21,4 @@ var/ipfire/backup/bin/backup.pl
 var/ipfire/backup/include
 var/ipfire/ids-functions.pl
 var/ipfire/suricata/oinkmaster.conf
+var/ipfire/suricata/ruleset-sources
diff --git a/config/suricata/ruleset-sources b/config/suricata/ruleset-sources
index 814a3e0d1..8b25346b5 100644
--- a/config/suricata/ruleset-sources
+++ b/config/suricata/ruleset-sources
@@ -8,8 +8,8 @@ subscripted = https://www.snort.org/rules/snortrules-snapshot-29151.tar.gz?oinkc
 community = https://www.snort.org/rules/community
 
 # Emerging threads community rules.
-emerging = https://rules.emergingthreats.net/open/suricata-4.0/emerging.rules.tar.gz
+emerging = https://rules.emergingthreats.net/open/suricata-5.0/emerging.rules.tar.gz
 
 # Emerging threads pro rules.
-emerging_pro = https://rules.emergingthreatspro.com/<oinkcode>/suricata-4.0/etpro.rules.tar.gz
+emerging_pro = https://rules.emergingthreatspro.com/<oinkcode>/suricata-5.0/etpro.rules.tar.gz
 
diff --git a/config/suricata/suricata.yaml b/config/suricata/suricata.yaml
index 1f33ea0f3..43f10c89d 100644
--- a/config/suricata/suricata.yaml
+++ b/config/suricata/suricata.yaml
@@ -435,7 +435,7 @@ app-layer:
 
       # How many unreplied DNS requests are considered a flood.
       # If the limit is reached, app-layer-event:dns.flooded; will match.
-      request-flood: 2048
+      #request-flood: 512
 
       tcp:
         enabled: yes


hooks/post-receive
--
IPFire 2.x development tree