From: Michael Tremer <michael.tremer@ipfire.org>
Date: Tue, 23 Apr 2019 19:45:42 +0000 (+0100)
Subject: suricata: EXTERNAL_NET should equal any
X-Git-Tag: v2.23-core131~10
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=a86bc6dfc6f391ed4c91a9a0ecb503da2ee8a80d;p=ipfire-2.x.git

suricata: EXTERNAL_NET should equal any

This enables that we scan servers in ORANGE for clients in
GREEN which absolutely makes sense.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---

diff --git a/config/suricata/suricata.yaml b/config/suricata/suricata.yaml
index e7e27c731e..7252e10b95 100644
--- a/config/suricata/suricata.yaml
+++ b/config/suricata/suricata.yaml
@@ -11,8 +11,7 @@ vars:
     # Include HOME_NET declaration from external file.
     include: /var/ipfire/suricata/suricata-homenet.yaml
 
-    EXTERNAL_NET: "!$HOME_NET"
-    #EXTERNAL_NET: "any"
+    EXTERNAL_NET: "any"
 
     HTTP_SERVERS: "$HOME_NET"
     SMTP_SERVERS: "$HOME_NET"