OPNsense Forum

English Forums => Intrusion Detection and Prevention => Topic started by: rob9999 on April 22, 2026, 11:04:21 AM

Title: Update et open rules in air gapped environment
Post by: rob9999 on April 22, 2026, 11:04:21 AM
Hello community,

I am new to suricata so please excuse my questions. We are running suricata 8.0.3 on an opnsense fw in an air gapped environment and need some help. What is the best way to import the rules file from et open to suricata ?

We tried to copy the unzipped rule file (emerging-all.rules) into the path /usr/local/etc/suricate/opnsense.rules and /usr/local/etc/suricate/rules

The rule files are visible in the gui but in the suricata logfile we see the following warning: "1 rule files specified, but no rules were loaded!" and " No rule files math the pattern /usr/local/etc/suricata/opnsense.rules/suricata.rules"

We also tried to use the command suricata-update --local "path_to_rules_file" --output /usr/local/etc/suricate/opnsense.rules --no-test. The error message in the log file is still "1 rule files specified, but no rules were loaded!" and no rules are visible in the gui.

Thanks.