From c99bc3b9ded37ee868eedaf1f9784d19f13ae3d0 Mon Sep 17 00:00:00 2001
From: Ad Schellevis <ad@opnsense.org>
Date: Mon, 25 Sep 2017 19:38:17 +0200
Subject: [PATCH] IDS/IPS, don't allow group interface types. closes
 https://github.com/opnsense/core/issues/1845

---
 src/opnsense/mvc/app/models/OPNsense/IDS/IDS.xml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/opnsense/mvc/app/models/OPNsense/IDS/IDS.xml b/src/opnsense/mvc/app/models/OPNsense/IDS/IDS.xml
index 6d62c3940..a427c90a0 100644
--- a/src/opnsense/mvc/app/models/OPNsense/IDS/IDS.xml
+++ b/src/opnsense/mvc/app/models/OPNsense/IDS/IDS.xml
@@ -116,6 +116,7 @@
                 <AddParentDevices>Y</AddParentDevices>
                 <filters>
                     <enable>/^(?!0).*$/</enable>
+                    <type>/(?s)^((?!group).)*$/</type>
                 </filters>
             </interfaces>
             <homenet type="NetworkField">