Quote from: Mark_the_Red on Today at 04:45:01 PM[...]Is there a "MAKE THIS god dam @#$@!#%@# device / MAC address move to this VLAN!!!" hidden setting somewhere in the DHCP menu?[...]
Quote# AP scanning/selection
.
.
.
# 0: This mode must only be used when using wired Ethernet drivers
# (including MACsec).
1 rule files specified, but no rules were loaded!Info: conf-yaml-loader: Configuration node 'rule-files' redefined.default-rule-path: /usr/local/etc/suricata/opnsense.rules
rule-files:
- suricata.rules
...
include:
- installed_rules.yamlgrep -r "suricata.rules" /usr/local/opnsense/service/templates/
/usr/local/opnsense/service/templates/OPNsense/IDS/suricata.yaml: - suricata.rulesecho 'alert tcp any any -> 192.168.10.10 any (msg:"Possible Nmap SYN scan detected"; flow:stateless; flags:S; threshold:type both, track by_src, count 5, seconds 1; classtype:attempted-recon; sid:9000001; rev:1;)' > /usr/local/etc/suricata/opnsense.rules/custom-nmap-test.rules
sed -i '' 's/rule-files:/rule-files:\n - custom-nmap-test.rules/' /usr/local/etc/suricata/installed_rules.yaml
pkill -f suricata
sleep 3
service suricata start