Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - rgranger

#1
rules.sqlite.LCK, i tried to update that once, it seems to fail, nothing else tries to install from the "ET Open" after this fails.
Also, should the rules checked become unchecked once the download fails?
I am stuck in that they won't download and I can't uncheck/bypass them.
I can delete them and then apply an empty policy and they still come back. It is like that dang Chucky! Can't kill him either.

OPNsense 26.1.6-amd64
FreeBSD 14.3-RELEASE-p10
Thanks in advance,
Rob

/
-rw-r--r--  1 root wheel      98 Apr 17 22:34 OPNsense.rules
-rw-r-----  1 root wheel    1893 Apr 17 22:34 abuse.ch.feodotracker.rules
-rw-r-----  1 root wheel  3086378 Apr 17 22:34 abuse.ch.sslblacklist.rules
-rw-r-----  1 root wheel      517 Apr 17 22:34 abuse.ch.sslipblacklist.rules
-rw-r-----  1 root wheel 57615431 Apr 17 22:34 abuse.ch.threatfox.rules
-rw-r-----  1 root wheel 16237448 Apr 17 22:34 abuse.ch.urlhaus.rules
-rw-r-----  1 root wheel  217376 Apr 17 22:34 emerging-sql.rules
-rw-r-----  1 root wheel  514601 Apr 17 22:34 emerging-web_server.rules
-rw-r-----  1 root wheel 60833792 Apr 17 22:35 rules.sqlite
-rw-r-----  1 root wheel        0 Apr 17 22:35 rules.sqlite.LCK

update:
i have removed the policy after unchecking all the rules. Still the
I have removed the policy  after unchecking all the rulesets, and still it trys to download rules.sqlite
How can I kill that as it seems to kill all the other downloads.

root@OPNsense:/usr/local/etc/suricata/rules # ll
total 2
-rw-r--r--  1 root wheel    98 Apr 17 23:19 OPNsense.rules
-rw-r-----  1 root wheel 28672 Apr 17 23:19 rules.sqlite
-rw-r-----  1 root wheel     0 Apr 17 23:19 rules.sqlite.LCK