From: Michael Tremer <michael.tremer@ipfire.org>
Date: Tue, 23 Apr 2019 19:45:42 +0000 (+0100)
Subject: suricata: EXTERNAL_NET should equal any
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=50612920913946b77505459af671d572332a5137;p=people%2Fms%2Fipfire-2.x.git

suricata: EXTERNAL_NET should equal any

This enables that we scan servers in ORANGE for clients in
GREEN which absolutely makes sense.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---

diff --git a/config/suricata/suricata.yaml b/config/suricata/suricata.yaml
index cb4f338658..e921781cf7 100644
--- a/config/suricata/suricata.yaml
+++ b/config/suricata/suricata.yaml
@@ -11,8 +11,7 @@ vars:
     # Include HOME_NET declaration from external file.
     include: /var/ipfire/suricata/suricata-homenet.yaml
 
-    EXTERNAL_NET: "!$HOME_NET"
-    #EXTERNAL_NET: "any"
+    EXTERNAL_NET: "any"
 
     HTTP_SERVERS: "$HOME_NET"
     SMTP_SERVERS: "$HOME_NET"