OPNsense
  • Home
  • Help
  • Search
  • Login
  • Register

  • OPNsense Forum »
  • English Forums »
  • Intrusion Detection and Prevention »
  • DShield Rules in ET Pro
« previous next »
  • Print
Pages: [1]

Author Topic: DShield Rules in ET Pro  (Read 3809 times)

adrianschneider

  • Newbie
  • *
  • Posts: 18
  • Karma: 0
    • View Profile
DShield Rules in ET Pro
« on: November 08, 2019, 09:58:40 am »
Hi!

I activated the ET Pro Telemetry edition. Since then, the DShield Rules which I had in the ET Open version disappeared.
In the download section I have "ET telemetry/dshield" set to activated/drop. But when I search for "dshield" in the rules tab, there are no associated rules. How can I get them back?

Best wishes,
Adrian Schneider
Logged

adrianschneider

  • Newbie
  • *
  • Posts: 18
  • Karma: 0
    • View Profile
Re: DShield Rules in ET Pro
« Reply #1 on: November 08, 2019, 10:09:26 am »
Ok, I looked in the corresponding rules files (the problem applies also to other rules) and found "#@opnsense_download_hash:ec786a61cb5d93b6eb0907e29ca4c166" in the file.

So this seems to be the same problem as https://forum.opnsense.org/index.php?topic=12119.msg55567#msg55567 .

But I wonder -- in the open version there are DShield rules. So why should there be no rules in the Pro edition? And I see traffic that is NOT blocked, but listed on the Dshield website.

ET Open rules:
http://rules.emergingthreats.net/blockrules/emerging-dshield.rules

The same problem applies (at least) to:
drop.rules
compromised.rules
botcc.rules
botcc.portgrouped.rules
ciarmy.rules

« Last Edit: November 08, 2019, 10:33:11 am by adrianschneider »
Logged

  • Print
Pages: [1]
« previous next »
  • OPNsense Forum »
  • English Forums »
  • Intrusion Detection and Prevention »
  • DShield Rules in ET Pro
 

OPNsense is an OSS project © Deciso B.V. 2015 - 2024 All rights reserved
  • SMF 2.0.19 | SMF © 2021, Simple Machines
    Privacy Policy
    | XHTML | RSS | WAP2