mirror of
https://github.com/openwrt/packages.git
synced 2025-12-21 23:34:31 +04:00
f21dffc2a3
- Add many options to config file. - Move rules and generated snort.lua to /tmp. - Add script for downloading rules. - Add preliminary reporting capabilites. Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>
19 lines
647 B
Ucode
19 lines
647 B
Ucode
# Do not edit, automatically generated. See /usr/share/snort/templates.
|
|
{%
|
|
// Copyright (c) 2023 Eric Fahlgren <eric.fahlgren@gmail.com>
|
|
// SPDX-License-Identifier: GPL-2.0
|
|
|
|
let queues = `${nfq.queue_start}-${int(nfq.queue_start)+int(nfq.queue_count)-1}`;
|
|
let chain_type = nfq.chain_type;
|
|
-%}
|
|
|
|
table inet snort {
|
|
chain {{ chain_type }}_{{ snort.mode }} {
|
|
type filter hook {{ chain_type }} priority {{ nfq.chain_priority }}
|
|
policy accept
|
|
{% if (nfq.include) { include(nfq.include, { snort, nfq }); } %}
|
|
# tcp flags ack ct direction original ct state established counter accept
|
|
counter queue flags bypass to {{ queues }}
|
|
}
|
|
}
|