Yesterday I was playing with the services and turned ON the IDS, then turned it OFF, now I have a Disabled entry in the Cron section in Settings:
Description: ids rule updates
Command: Update and reload intrusion detection rules
I have tried all the possible options to delete it and it is impossible, what should I do to remove it? Thank you
Have you tried enabling the IDS, deleting the cron job, disabling the IDS again?
Quote from: Patrick M. Hausen on September 15, 2024, 03:26:26 PM
Have you tried enabling the IDS, deleting the cron job, disabling the IDS again?
When IDS is enabled make sense for the cron to exist, I don't want to delete it then, I think when the IDS is being disable, in the clean up process, this leftover cron should have been deleted
I mean to get rid of it - enable, delete, disable. The end result is IDS disabled and cron job deleted.
Didn't work with the IDS service ON, this cron is coming from the Schedule Section in:
Services: Intrusion Detection: Administration: Schedule
Once, you have enabled IDS one time, I think this cron gets created, and it is not removed when IDS is Disabled.
Are you speaking about the cronjobs visible in System > Settings > Cron?
Those are created using configd in
/usr/local/opnsense/service/conf/actions.d/
Have a look there in the files, find the related task in the file that contains it and remove the task.
https://docs.opnsense.org/development/backend/configd.html
Regards,
S.
You don't get rid of the cron job, you just disable it.
Cheers,
Franco
Thank you