Project

General

Profile

Actions

Bug #299

closed

default suricata.yaml settings

Added by Victor Julien about 11 years ago. Updated almost 11 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

Need to consider adding more sane defaults to our default suricata.yaml. Might break QA, so need to do this with care.

Addresses would need to be something like this:

  1. Holds variables that would be used by the engine.
    vars:
    1. Holds the address group vars that would be passed in a Signature.
    2. These would be retrieved during the Signature address parsing stage.
      address-groups:

      HOME_NET: "[192.168.0.0/16,10.0.0.0/8,172.16.0.0/12]"

      EXTERNAL_NET: "!$HOME_NET"

      HTTP_SERVERS: "$HOME_NET"

      SMTP_SERVERS: "$HOME_NET"

      SQL_SERVERS: "$HOME_NET"

      DNS_SERVERS: "$HOME_NET"

      TELNET_SERVERS: "$HOME_NET"

      AIM_SERVERS: "$EXTERNAL_NET"

Actions #1

Updated by Victor Julien about 11 years ago

  • Target version set to 1.2beta1
Actions #2

Updated by Victor Julien almost 11 years ago

  • Status changed from New to Closed
  • Assignee set to Victor Julien
  • % Done changed from 0 to 100

Addresses in default yaml have been updated.

Actions

Also available in: Atom PDF