]> git.ipfire.org Git - ipfire-2.x.git/blob - src/initscripts/networking/red.up/23-suricata
suricata: Change midstream policy to "pass-flow"
[ipfire-2.x.git] / src / initscripts / networking / red.up / 23-suricata
1 #!/usr/bin/perl
2 #
3 # Helper script to regenerate the file which contains the HOME_NET declaration
4 # including the assigned IP-address of red and any configured aliases.
5
6 use strict;
7
8 require '/var/ipfire/general-functions.pl';
9 require "${General::swroot}/ids-functions.pl";
10
11 # Hash to store the IDS settings.
12 my %ids_settings = ();
13
14 # Read-in IDS settings.
15 &General::readhash("$IDS::ids_settings_file", \%ids_settings);
16
17 # Check if suricata is enabled.
18 if($ids_settings{'ENABLE_IDS'} eq "on") {
19 # Regenerate the file with HOME_NET details.
20 &IDS::generate_home_net_file();
21
22 # Regenerate the file with DNS_SERVERS details.
23 &IDS::generate_dns_servers_file();
24
25 # Set correct ownerships.
26 &IDS::set_ownership("$IDS::homenet_file");
27 &IDS::set_ownership("$IDS::dns_servers_file");
28
29 # Check if suricata is running.
30 if(&IDS::ids_is_running()) {
31 # Call suricatactrl to perform a restart of suricata.
32 &IDS::call_suricatactrl("restart");
33 } else {
34 # Call suricatactrl to start suricata.
35 &IDS::call_suricatactrl("start");
36 }
37 }