From: Arne Fitzenreiter <arne_f@ipfire.org>
Date: Sat, 26 Feb 2022 14:19:45 +0000 (+0000)
Subject: suricata: drop unsupported JA3 rule provider
X-Git-Url: http://git.ipfire.org/?p=people%2Fmfischer%2Fipfire-2.x.git;a=commitdiff_plain;h=6e2c8f48182c169edb177526d7f639b0631d57cc

suricata: drop unsupported JA3 rule provider

our current suricata version not support JA3 based rules so
this drop the providers from the list.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
---

diff --git a/config/suricata/ruleset-sources b/config/suricata/ruleset-sources
index 7da1ecc1d6..58ab91aabe 100644
--- a/config/suricata/ruleset-sources
+++ b/config/suricata/ruleset-sources
@@ -67,16 +67,6 @@ our %Providers = (
 		dl_type => "archive",
 	},
 
-	# Abuse.ch SSLBL JA3 fingerprint rules.
-	sslbl_ja3 => {
-		summary => "Abuse.ch SSLBL JA3 Rules",
-		website => "https://sslbl.abuse.ch/",
-		tr_string => "sslbl ja3 fingerprint rules",
-		requires_subscription => "False",
-		dl_url => "https://sslbl.abuse.ch/blacklist/ja3_fingerprints.rules",
-		dl_type => "plain",
-	},
-
 	# Abuse.ch SSLBL Blacklist rules.
 	sslbl_blacklist => {
 		summary => "Abuse.ch SSLBL Blacklist Rules",
@@ -87,16 +77,6 @@ our %Providers = (
 		dl_type => "plain",
 	},
 
-	# Abuse.ch URLhaus Blacklist rules.
-	urlhaus => {
-		summary => "Abuse.ch URLhaus Blacklist Rules",
-		website => "https://urlhaus.abuse.ch/",
-		tr_string => "urlhaus blacklist rules",
-		requires_subscription => "False",
-		dl_url => "https://urlhaus.abuse.ch/downloads/urlhaus_suricata.tar.gz",
-		dl_type => "archive",
-	},
-
 	# Etnetera Aggressive Blacklist.
 	etnetera_aggresive => {
 		summary => "Etnetera Aggressive Blacklist Rules",