lucaspalomodevelop/core
1
0
Fork 0
mirror of https://github.com/lucaspalomodevelop/core.git synced 2026-03-13 16:14:40 +00:00
Code Issues Packages Projects Releases Wiki Activity

IDS, replace tls.fingerprint with tls_fingerprint for better performance in custom rules

Browse Source
This commit is contained in:
Ad Schellevis 2018-10-05 16:16:00 +02:00
parent 81c2ec9721
commit a00e646ca2
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/opnsense/service/templates/OPNsense/IDS/OPNsense.rules
View File

@ -10,7 +10,7 @@
{% if rule.enabled|default('0') == '1' %}
{{rule.action}}{% if rule.fingerprint|default('') != ""
%} tls {% else %} ip {% endif %} {% if rule.source|default('') != "" %} {{ rule.source }} {% else %} any {% endif %} any -> {% if rule.destination|default('') != "" %} {{ rule.destination }} {% else %} any {% endif %} any (msg:"{{rule.description.replace('"','\"')}}"; {%
if rule.fingerprint|default('') != "" %} tls.fingerprint:"{{rule.fingerprint.lower()}}";{% endif
if rule.fingerprint|default('') != "" %} tls_fingerprint:"{{rule.fingerprint.lower()}}";{% endif
%}{%
if rule.geoip|default('') != ""%} geoip:{% if rule.geoip_direction|default('') != '' %}{{rule.geoip_direction}},{% endif %}{{rule.geoip}} ;{% endif
%} sid:{{