Suricata rules Managment

[jclendineng]

First off new user from pfsense, this is absolutely awesome.  Like it way better.  Question: Are there plans to implement any form of rules management for suricata? Suppression, rules whitelist, etc. I can manually edit specific rules but when you have hundreds if not thousands of rules, it can become a bit time consuming :D

[franco]

This is happening at the moment, a purpose-built fork: https://github.com/OPNids

Hopefully they will help in adding more of these features you talk about and push them back to OPNsense.

As I'm not involved I can't possibly say more.


Cheers,
Franco

[mimugmail]

How old/young/new is this project?

[franco]

very early stage


Cheers,
Franco

[l0rdraiden]

very early stage


Cheers,
Franco

What are the plans to integrate this into opensense?
It will be as a pluging or it will be part of the core?

[franco]

https://twitter.com/OPNids/status/1075110790775169024

Best to be asked to the people who work on the project. :)


Cheers,
Franco