ids-functions.pl: Tune rules to always monitor in both directions.

This will allow to scan the traffic from an EXTERNAL_NET to the HOME_NET and from
the HOME_NET to the EXTERNAL_NET.

Reference: 10273

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>

diff --git a/config/cfgroot/ids-functions.pl b/config/cfgroot/ids-functions.pl
index 042a976910a22a1fd8ff7423eec21051f37ac16f..016c0e49d609a80cdad6253f4560ccfdfcd1b002 100644 (file)
--- a/config/cfgroot/ids-functions.pl
+++ b/config/cfgroot/ids-functions.pl
@@ -742,6 +742,9 @@ sub write_modify_sids_file($) {
        # Write file header.
        print FILE "#Autogenerated file. Any custom changes will be overwritten!\n";
 
        # Write file header.
        print FILE "#Autogenerated file. Any custom changes will be overwritten!\n";
 

+       # Tune rules to monitor in both directions.
+       print FILE "modifysid \* \"\-\>\" \| \"\<\>\"\n";
+

        # Check if the traffic only should be monitored.
        unless($ruleaction eq "alert") {
                # Tell oinkmaster to switch all rules from alert to drop.
        # Check if the traffic only should be monitored.
        unless($ruleaction eq "alert") {
                # Tell oinkmaster to switch all rules from alert to drop.