[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 3e945cb3f0644f9dae356b0cbe0ddf9e532497b1

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 3e945cb3f0644f9dae356b0cbe0ddf9e532497b1

[Michael Tremer]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "IPFire 2.x development tree".

The branch, next has been updated
       via  3e945cb3f0644f9dae356b0cbe0ddf9e532497b1 (commit)
       via  38617a4acd4485be7b019a72e549d222ecba1ad6 (commit)
      from  dab0e52df496e83e797a80ffb19ee863e086b1d1 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 3e945cb3f0644f9dae356b0cbe0ddf9e532497b1
Author: Michael Tremer <michael.tremer@ipfire.org>
Date:   Mon Jul 21 15:43:38 2025 +0000

    core197: Ship Suricata's ruleset sources
    
    Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit 38617a4acd4485be7b019a72e549d222ecba1ad6
Author: Adolf Belka <adolf.belka@ipfire.org>
Date:   Mon Jul 21 16:34:52 2025 +0200

    ruleset-sources: Remove the abuse.ch SSL list from the suricata sources
    
    - The abuse.ch ssl suricata list has stopped being updated since 2025-06-25
    - Looking at all of the abuse.ch lists, none of them are being updated anymore so abuse.ch
       becoming part of spamhaus looks to have stopped all work on free versions of the lists
    - This change modifies the abuse.ch entry so that it no longer can be installed but also
       if already installed it will remove it.
    - The patch has also made a few minor typo corrections in comments.
    
    Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
    Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

-----------------------------------------------------------------------

Summary of changes:
 config/rootfiles/core/197/filelists/files | 1 +
 config/suricata/ruleset-sources           | 9 +++------
 2 files changed, 4 insertions(+), 6 deletions(-)

Difference in files:
diff --git a/config/rootfiles/core/197/filelists/files b/config/rootfiles/core/197/filelists/files
index ba7fa34c41..cf1a0b3f9d 100644
--- a/config/rootfiles/core/197/filelists/files
+++ b/config/rootfiles/core/197/filelists/files
@@ -24,4 +24,5 @@ var/ipfire/menu.d/20-status.menu
 var/ipfire/menu.d/40-services.menu
 var/ipfire/main/manualpages
 var/ipfire/ovpn/collectd.vpn
+var/ipfire/suricata/ruleset-sources
 var/ipfire/wireguard-functions.pl
diff --git a/config/suricata/ruleset-sources b/config/suricata/ruleset-sources
index 4e9ea5fa93..b843d3e499 100644
--- a/config/suricata/ruleset-sources
+++ b/config/suricata/ruleset-sources
@@ -27,7 +27,7 @@ our %Providers = (
 		dl_type => "archive",
 	},
 
-	# Ruleset for registered sourcefire users with a valid subsription.
+	# Ruleset for registered sourcefire users with a valid subscription.
 	subscripted => {
 		summary => "Talos VRT rules with subscription",
 		website => "https://www.snort.org",
@@ -47,7 +47,7 @@ our %Providers = (
 		dl_type => "archive",
 	},
 
-	# Emerging threads community rules.
+	# Emerging threats community rules.
 	emerging => {
 		summary => "Emergingthreats.net Community Rules",
 		website => "https://emergingthreats.net/",
@@ -57,7 +57,7 @@ our %Providers = (
 		dl_type => "archive",
 	},
 
-	# Emerging threads Pro rules.
+	# Emerging threats Pro rules.
 	emerging_pro => {
 		summary => "Emergingthreats.net Pro Rules",
 		website => "https://emergingthreats.net/",
@@ -72,9 +72,6 @@ our %Providers = (
 		summary => "Abuse.ch SSLBL Blacklist Rules",
 		website => "https://sslbl.abuse.ch/",
 		tr_string => "sslbl blacklist rules",
-		requires_subscription => "False",
-		dl_url => "https://sslbl.abuse.ch/blacklist/sslblacklist.rules",
-		dl_type => "plain",
 	},
 
 	# Etnetera Aggressive Blacklist.


hooks/post-receive
--
IPFire 2.x development tree