From 2d052a9bded496b8dceb613d905e3c5f76fe0905 Mon Sep 17 00:00:00 2001 From: Ad Schellevis Date: Fri, 15 May 2020 18:53:16 +0200 Subject: [PATCH] IDPS: simplify download parser a bit further as suggested by @Tra5is (https://github.com/opnsense/core/commit/38ea28d0ad24ce82ac3106e2ee9dc35088fbdb92) --- src/opnsense/scripts/suricata/lib/downloader.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/opnsense/scripts/suricata/lib/downloader.py b/src/opnsense/scripts/suricata/lib/downloader.py index 38ae80cc3..beee5b5dc 100755 --- a/src/opnsense/scripts/suricata/lib/downloader.py +++ b/src/opnsense/scripts/suricata/lib/downloader.py @@ -67,9 +67,9 @@ class Downloader(object): flowbits_noalert = line.replace(' ', '').find('flowbits:noalert;') > -1 if flowbits_noalert: pass - elif re.match("(\s?)*alert", line): + elif re.match("^\s*alert", line): line = "drop %s" % line[line.find('alert')+5:] - elif re.match("#(\s?)*alert", line): + elif re.match("^#\s*alert", line): line = '#drop %s' % line[line.find('alert')+5:] output.append(line) return '\n'.join(output)