suricata: Change midstream policy to "pass-flow"

[ipfire-2.x.git] / config / cron / crontab

diff --git a/config/cron/crontab b/config/cron/crontab
index 4561f4a243239b8b5bd3525c067dc6a70395489c..7088e0b750a755b860a478b47d6be8809aacd803 100644 (file)
--- a/config/cron/crontab
+++ b/config/cron/crontab
@@ -31,12 +31,12 @@ HOME=/
 */5 * * * *    [ -f "/var/ipfire/red/active" ] && /usr/bin/ddns update-all
 
 # Logwatch
-01 0 * * *     /usr/local/bin/logwatch > /var/log/logwatch/`date -I -d yesterday`; \
+05 0 * * *     /usr/local/bin/logwatch > /var/log/logwatch/`date -I -d yesterday`; \
                LOGWATCH_KEEP=$(sed -ne 's/^LOGWATCH_KEEP=\([0-9]\+\)$/\1/p' /var/ipfire/logging/settings); \
                find /var/log/logwatch/ -ctime +${LOGWATCH_KEEP=56} -exec rm -f '{}' ';'
 
 # hddshutdown
-*/30 * * * *   /usr/local/bin/hddshutdown >/dev/null
+2,32 * * * *   /usr/local/bin/hddshutdown >/dev/null
 
 # connection-scheduler
 */5 * * * *    /usr/local/bin/connscheduler timer > /dev/null
@@ -59,8 +59,14 @@ HOME=/
 00 3 * 3 0          /usr/local/bin/timezone-transition /usr/local/bin/firewallctrl
 00 2 * 10-11 0      /usr/local/bin/timezone-transition /usr/local/bin/firewallctrl
 
-# Update GeoIP database once a month.
-%monthly,random * * * [ -f "/var/ipfire/red/active" ] && /usr/local/bin/xt_geoip_update >/dev/null 2>&1
+# Update location database
+%hourly,random * [ -f "/var/ipfire/red/active" ] && /usr/local/bin/update-location-database >/dev/null 2>&1
+
+# Perform a surciata rules update every 12 hours.
+@ 12h [ -f "/var/ipfire/red/active" ] && /usr/local/bin/update-ids-ruleset >/dev/null 2>&1
+
+# Update Lists for IP-based blocking every 15 minutes.
+@ 15 [ -f "/var/ipfire/red/active" ] && /usr/local/bin/update-ipblocklists >/dev/null 2>&1
 
 # Retry sending spooled mails regularly
 %hourly * /usr/sbin/dma -q
@@ -74,5 +80,8 @@ HOME=/
 # Cleanup the mail spool directory
 %weekly * * /usr/sbin/dma-cleanup-spool
 
+# Cleanup the collectd RRD (graphs)
+%weekly * * /bin/find /var/log/rrd -mtime +365 -type f -name '*.rrd' -delete -o -type d -empty -delete
+
 # Update DNS trust anchor
 %daily,random * * @runas(nobody) /usr/sbin/unbound-anchor -a /var/lib/unbound/root.key -c /etc/unbound/icannbundle.pem