Actions
Bug #3656
openMatching and modifies requires double backslash in front of $ characters
Affected Versions:
Effort:
Difficulty:
Label:
Description
For example, when modifying a rule one would think the following should work in modify.conf:
2000418 "tcp \$EXTERNAL_NET !\$HTTP_PORTS" "tcp $EXTERNAL_NET [!$HTTP_PORTS,!$OTHER_PORTS]"
but the following is actually required:
2000418 "tcp \\$EXTERNAL_NET !\\$HTTP_PORTS" "tcp $EXTERNAL_NET [!$HTTP_PORTS,!$OTHER_PORTS]"
The source of this behaviour is due to some compatibility with PulledPork that may have been handled badly.
I'd like to see if we can support the single \ case while not breaking existing configurations, and verify PulledPork compatibility.
No data to display
Actions