Suricata: abuse.ch rulesets garbage [SOLVED]

[Stephan]

Hi,

I constantly get the error:

<Error> - [ERRCODE: SC_ERR_INVALID_SIGNATURE(39)] - error parsing signature "‹" from file /usr/local/etc/suricata/opnsense.rules/abuse.ch.sslblacklist.rules at line 1

When I take a look at the /usr/local/etc/suricata/opnsense.rules/abuse.ch.* files, they all seem to be completly garbage!?

So I already deleteted them all (also @ suricata/rules folder) and started the rules downloader - still the same garbage in the files...

Any idea?

Thanx,

Stephan

[AdSchellevis]

Hi Stephan,

I looks like the other end enabled gzip compression and our scripting ignored it, I just pushed a fix for it which you can try using:

Code Select Expand

opnsense-patch 30fde1ef05


Best regards,

Ad

[Stephan]

Thank You Ad!

This fixed it!

Cheers,

Stephan

Btw - here's the patch: https://github.com/opnsense/core/commit/30fde1ef05bebba9c37e0b5c85176bd3c663d79b

[mw01]

Thank you.  Patch works.

[franco]

This fix will be in 17.7.2 on Wednesday.


Cheers,
Franco