security/maltrail: new plugin

[mimugmail]

Maltrail is a server/sensor system for detecting malicious traffic. It has a nice gui and fetches always updated trails to catch the bad guys. It's some kind of IDS and lets you collect from multiple OPNsense systems to one central unit. All scripts need the usual chmod :)

[fabianfrz]

you could deduplicate some code by using the tabbed view and I have some findings

[MikhailKasimov]

@mimugmail My two cents -- in GUI: Update Period -> Update Period (seconds) . This makes hint for user about field format. Thanks!

[mimugmail]

@MikhailKasimov Thanks for the note, we try to keep Labels short and put most things which could lead to confusion in help text:
https://github.com/mimugmail/plugins/blob/mt/security/maltrail/src/opnsense/mvc/app/controllers/OPNsense/Maltrail/forms/general.xml#L12

[mimugmail]

Ok, I'd say it looks good for a 0.1
Thanks for all reviews! 👍

[fichtner]

neat, thanks!

[mimugmail]

CC @juliocbc as you use wazuh/ossec you might be interested in this plugin too ..

[juliocbc]

@mimugmail Great!! I'll make some tests soon!! Thanks for CC me!

[emsofo]

Great stuff!! Just installed on a virtual instance of OPNSense 23.7.1_3 and seems to work except for one thing - when hovering over the Trail section - the searx results always say: "Sorry! we didn't find any results. Please use another query or search in more categories." - so seems broken ?!?

[mimugmail]

This is related to the software itself, maybe you can ask o er there?

[emsofo]

I just submitted a bug: stamparm/maltrail#19199 (comment)