suricata: Change midstream policy to "pass-flow"

[ipfire-2.x.git] / config / cron / crontab

diff --git a/config/cron/crontab b/config/cron/crontab
index d94dd65c2f6ef3c7d94a358e8446ab650b53c75b..7088e0b750a755b860a478b47d6be8809aacd803 100644 (file)
--- a/config/cron/crontab
+++ b/config/cron/crontab
@@ -62,6 +62,12 @@ HOME=/
 # Update location database
 %hourly,random * [ -f "/var/ipfire/red/active" ] && /usr/local/bin/update-location-database >/dev/null 2>&1
 
+# Perform a surciata rules update every 12 hours.
+@ 12h [ -f "/var/ipfire/red/active" ] && /usr/local/bin/update-ids-ruleset >/dev/null 2>&1
+
+# Update Lists for IP-based blocking every 15 minutes.
+@ 15 [ -f "/var/ipfire/red/active" ] && /usr/local/bin/update-ipblocklists >/dev/null 2>&1
+
 # Retry sending spooled mails regularly
 %hourly * /usr/sbin/dma -q
 
@@ -74,5 +80,8 @@ HOME=/
 # Cleanup the mail spool directory
 %weekly * * /usr/sbin/dma-cleanup-spool
 
+# Cleanup the collectd RRD (graphs)
+%weekly * * /bin/find /var/log/rrd -mtime +365 -type f -name '*.rrd' -delete -o -type d -empty -delete
+
 # Update DNS trust anchor
 %daily,random * * @runas(nobody) /usr/sbin/unbound-anchor -a /var/lib/unbound/root.key -c /etc/unbound/icannbundle.pem