Messages

Appears to be a bug when trying to create a rule in the new FW GUI that uses the q-feed blocklist alias.
I installed the Q-feed plugin as per the documentation and confirmed the API key is working and downloads the IP and DNS feed.
The alias is also populated with 200K odd entries.

The error when trying to save the rule is "__qfeeds_malware_ip is not a valid source IP address or alias"

When I create the rule using the old FW GUI, the rule is created without any issues.

I experienced the same problem as donks described. Before that, I migrated the old rules to the new ones (via migration assistant and according to the process described there).
Later on that day I tried to setup q-feeds as written in their setup guide for opnsense.
I can confirm that it works in the old fw rules section, but not in the new one. As workaround I created this as an old rule and imported it within the new rules section.

Cheers, Mario

I have tried the suggestion made by mimugmail but have the same result as ChrisChros - it will not work.

I can confirm that 24.1.2_1 makes no difference, VOIP is not working as long IPS is active.

Is it possible that there is a connection between this thread and the topic "Suricata - NUMA nodes" in suricata 7.0.3?
I had the same issues as desribed above as well as the errors in the log regarding the numa nodes mentioned by fadern.