Does the Suricata service have to restart or does the firewall have to be completely restarted?
I change rules and they don't work until I restart everything
No body an Idea?
can you please be a little more specific. what have you changed in the rule? what steps did you take?
I have set "ET SCAN Suspicious inbound to MSSQL port 1433" to Alarm only.
Butt the Suricata is still blocking. What must i make after change Rules / Rulesets.
Suricata doesnt use the new Rules.
I have already the Apply Button on Rules and also the Download and apply button.
"Apply" should be enough.
in suricata log shoud be strings -- rule reload starting and -- rule reload complete. after that changes starts working.