Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - adgyhya

#1
That .LCK file means the rules DB is stuck in a locked/failed update state.

Quick fix:

Stop Suricata

Delete both files:

rm /usr/local/etc/suricata/rules/rules.sqlite*
Restart OPNsense IDS/IPS (or reboot)
Reapply config, then re-enable ET Open and update again

If it still auto-downloads, check Services → Intrusion Detection → Administration and disable auto rule updates temporarily.

The issue isn't the rules themselves—it's the locked SQLite DB blocking everything.bitlife online
#2
You've got a path and structure issue, not a rule problem.
Suricata on OPNsense expects rules inside a directory with a valid suricata.yaml reference, not a single file dropped randomly. Also your path has a typo: it should be /usr/local/etc/suricata/ (not suricate).bitlife
Quick fix:


Put your rules in: /usr/local/etc/suricata/rules/emerging-all.rules


Make sure suricata.yaml includes:
rule-files:  - emerging-all.rules


Or better: use
suricata-update --local /path/to/emerging-all.rules


Then restart Suricata.
The error "no rules were loaded" usually means wrong path or rule-files not referenced, not that the rules themselves are invalid.