Actions
Bug #3656
open
JI
JI
Matching and modifies requires double backslash in front of $ characters
Bug #3656:
Matching and modifies requires double backslash in front of $ characters
Affected Versions:
Effort:
Difficulty:
Label:
Description
For example, when modifying a rule one would think the following should work in modify.conf:
2000418 "tcp \$EXTERNAL_NET !\$HTTP_PORTS" "tcp $EXTERNAL_NET [!$HTTP_PORTS,!$OTHER_PORTS]"
but the following is actually required:
2000418 "tcp \\$EXTERNAL_NET !\\$HTTP_PORTS" "tcp $EXTERNAL_NET [!$HTTP_PORTS,!$OTHER_PORTS]"
The source of this behaviour is due to some compatibility with PulledPork that may have been handled badly.
I'd like to see if we can support the single \ case while not breaking existing configurations, and verify PulledPork compatibility.
PA Updated by Philippe Antoine almost 2 years ago
- Target version set to TBD
Actions