OPNsense Forum

English Forums => Intrusion Detection and Prevention => Topic started by: guyp2k on September 08, 2020, 02:26:49 am

Title: Snort Rule Set and Rules
Post by: guyp2k on September 08, 2020, 02:26:49 am
Question about rule-sets and rules, if you disable all rule-sets under Download Tab in Intrusion and Detection shouldn't that disable all the rules associated w/ that rule-set under rules and vice-versa (enable rulesets will enable all rules)?

I disabled all the snort rule-sets and I assumed that would disable all the rules, but I still see the rules as enabled and receiving alerts.

I was able to disable the snort rulesets and rules, now the rules tab is clear. I went back and enabled 3 snort rule-sets, enabled and downloaded rules however, no rules are showing under the rules tab even though I have 3 rule-sets enabled and installed. Having a challenge understanding the logic.

Thanks