Actions
Support #4160
closedsuricata-update remove comment in rules file
Affected Versions:
Label:
Description
After downloading the ET rule file, I commented out the unused rules.
After executing suricata-update, suricata.rules file was created, but the rule I commented out was uncommented.
There was also a problem in that the rule registered in disable.conf for the rule with flowbit warning was continuously activated.
Doesn't suricata-update check the presence or absence of comments when reading the rule file?
In order to disable the rule, is the only way to register in disable.conf?
Actions