From 823ece817fb2c3c95954a658dd1ed6fa3e1a9028 Mon Sep 17 00:00:00 2001 From: Stefan Schantl Date: Sun, 18 Aug 2024 11:15:31 +0200 Subject: [PATCH] suricata: Use correct red device when using QMI When using QMI the dial-in option has to be set to "ppp" during setup. In this case the initscript of suricata will create all related firewall rules for the ppp0 interface which is not correct when using QMI where the RED device is called red0. Signed-off-by: Stefan Schantl Signed-off-by: Michael Tremer --- src/initscripts/system/suricata | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/initscripts/system/suricata b/src/initscripts/system/suricata index 938ea66de..79f9478c3 100644 --- a/src/initscripts/system/suricata +++ b/src/initscripts/system/suricata @@ -86,7 +86,7 @@ function generate_fw_rules { # Check if the IDS is enabled for this network zone. if [ "${!enable_ids_zone}" == "on" ]; then # Check if the current processed zone is "red" and the configured type is PPPoE dialin. - if [ "$zone" == "red" ] && [ "$RED_TYPE" == "PPPOE" ]; then + if [ "$zone" == "red" ] && [ "$RED_TYPE" == "PPPOE" ] && [ "$RED_DRIVER" != "qmi_wwan" ]; then # Set device name to ppp0. network_device="ppp0" elif [ "$zone" == "ovpn" ]; then -- 2.39.5