https://nightly.ipfire.org/next/2020-04-06%2014%3A04%3A00%20%2B0000-e698090e/aarch64 commit e698090e7f696923ff146b272b587a3eeca34c6c Author: Stefan Schantl Date: Fri Apr 3 16:25:01 2020 +0200 IDS: Dynamically generate and import the HTTP ports. With this commit suricata reads the HTTP port declarations from a newly introduced external file (/var/ipfire/suricata/suricata-http-ports.yaml). This file dynamically will be generated. HTTP ports always are the default port "80" and "81" for update Accelerator and HTTP access to the WUI. In case the Web-proxy is used, the configured proxy port and/or Transparent Proxy port also will be declared as a HTTP port and written to that file. In case one of the proxy ports will be changed, the HTTP port file will be re-generated and suricate restarted if launched. Also if an old backup with snort will be restored the convert script handles the generation of the HTTP ports file. Finally the suricata-generate-http-ports-file as a tiny script which simply generates the http ports file and needs to be launched during the installation of a core update. (The script will no be required anymore, so it could be deleted afterwards.) Fixes #12308. Signed-off-by: Stefan Schantl Signed-off-by: Arne Fitzenreiter https://git.ipfire.org/?p=ipfire-2.x.git;a=shortlog;h=e698090e7f696923ff146b272b587a3eeca34c6c