Messages

1

Intrusion Detection and Prevention / Re: log4j vulnerability detection

« on: December 13, 2021, 10:11:04 am »

https://rules.emergingthreatspro.com/open/suricata-5.0/
Suricata seems to have updated their rules set to detect this.

2

Intrusion Detection and Prevention / log4j vulnerability detection

« on: December 13, 2021, 08:51:01 am »

It is possible to detect and block the log4j hacking attempts with the OPNSense firewall (or other parts) rules?
I know other firewalls already have rules available to detect and block possible attempts, like https://cloud.google.com/blog/products/identity-security/cloud-armor-waf-rule-to-help-address-apache-log4j-vulnerability