[Feature] Editable Suricata Network Configuration

[realaquaman]

When using the OPNsense between two different private networks the IDS won't work.

Reason is that the ruleset placeholder $HOME_NET gets replaced with the networks configured inside:
/usr/local/opnsense/service/templates/OPNsense/IDS/suricata.yaml

This setting is lost after an upgrade. It would be nice to specify these networks using the web GUI.

[AdSchellevis]

@realaquaman I thought about this some time ago, but kind of forgot about it. 5d457fe and
c4bbef0 should add the option (in advanced mode).

[L1ghtn1ng]

Can this go in to 17.7.1?

…

________________________________ From: Ad Schellevis <notifications@github.com> Sent: Tuesday, August 29, 2017 8:13:26 PM To: opnsense/core Cc: Subscribed Subject: Re: [opnsense/core] [Feature] Editable Suricata Network Configuration (#1793) @realaquaman<https://github.com/realaquaman> I thought about this some time ago, but kind of forgot about it. 5d457fe<5d457fe> and c4bbef0<c4bbef0> should add the option (in advanced mode). — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub<#1793 (comment)>, or mute the thread<https://github.com/notifications/unsubscribe-auth/ADddQpHLoXDgToLRbqOxypaL8UFPNBEiks5sdGLVgaJpZM4PFYVi>.

[fichtner]

No, 17.7.1 is currently being finalised.

…

On 29. Aug 2017, at 21:27, J.Townsend ***@***.***> wrote: Can this go in to 17.7.1? ________________________________ From: Ad Schellevis ***@***.***> Sent: Tuesday, August 29, 2017 8:13:26 PM To: opnsense/core Cc: Subscribed Subject: Re: [opnsense/core] [Feature] Editable Suricata Network Configuration (#1793) @realaquaman<https://github.com/realaquaman> I thought about this some time ago, but kind of forgot about it. 5d457fe<5d457fe> and c4bbef0<c4bbef0> should add the option (in advanced mode). — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub<#1793 (comment)>, or mute the thread<https://github.com/notifications/unsubscribe-auth/ADddQpHLoXDgToLRbqOxypaL8UFPNBEiks5sdGLVgaJpZM4PFYVi>. — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub, or mute the thread.

[L1ghtn1ng]

Ah okay fair enough

________________________________ From: Franco Fichtner <notifications@github.com> Sent: Tuesday, August 29, 2017 8:51:28 PM To: opnsense/core Cc: J.Townsend; Comment Subject: Re: [opnsense/core] [Feature] Editable Suricata Network Configuration (#1793) No, 17.7.1 is currently being finalised.

On 29. Aug 2017, at 21:27, J.Townsend ***@***.***> wrote: Can this go in to 17.7.1? ________________________________ From: Ad Schellevis ***@***.***> Sent: Tuesday, August 29, 2017 8:13:26 PM To: opnsense/core Cc: Subscribed Subject: Re: [opnsense/core] [Feature] Editable Suricata Network Configuration (#1793) @realaquaman<https://github.com/realaquaman> I thought about this some time ago, but kind of forgot about it. 5d457fe<5d457fe> and c4bbef0<c4bbef0> should add the option (in advanced mode). — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub<#1793 (comment)>, or mute the thread<https://github.com/notifications/unsubscribe-auth/ADddQpHLoXDgToLRbqOxypaL8UFPNBEiks5sdGLVgaJpZM4PFYVi>. — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub, or mute the thread.

— You are receiving this because you commented. Reply to this email directly, view it on GitHub<#1793 (comment)>, or mute the thread<https://github.com/notifications/unsubscribe-auth/ADddQi2I_d6kvgQmGl3VSa8_b0scYHG7ks5sdGvAgaJpZM4PFYVi>.

[mimugmail]

Really nice feature for public only/private only networks, thanks! 👍

[mimugmail]

Close this one since it was released with 17.7.2?

[fichtner]

yep, thanks!

[realaquaman]

Thank you very much!