]> git.ipfire.org Git - people/pmueller/ipfire-2.x.git/commitdiff
suricata: drop unsupported JA3 rule provider
authorArne Fitzenreiter <arne_f@ipfire.org>
Sat, 26 Feb 2022 14:19:45 +0000 (14:19 +0000)
committerArne Fitzenreiter <arne_f@ipfire.org>
Sat, 26 Feb 2022 14:19:45 +0000 (14:19 +0000)
our current suricata version not support JA3 based rules so
this drop the providers from the list.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
config/suricata/ruleset-sources

index 7da1ecc1d61d4f8e1e731c56870c7d8185ba247d..58ab91aabed04c1dbfe2f3a97cffa757b2252e29 100644 (file)
@@ -67,16 +67,6 @@ our %Providers = (
                dl_type => "archive",
        },
 
-       # Abuse.ch SSLBL JA3 fingerprint rules.
-       sslbl_ja3 => {
-               summary => "Abuse.ch SSLBL JA3 Rules",
-               website => "https://sslbl.abuse.ch/",
-               tr_string => "sslbl ja3 fingerprint rules",
-               requires_subscription => "False",
-               dl_url => "https://sslbl.abuse.ch/blacklist/ja3_fingerprints.rules",
-               dl_type => "plain",
-       },
-
        # Abuse.ch SSLBL Blacklist rules.
        sslbl_blacklist => {
                summary => "Abuse.ch SSLBL Blacklist Rules",
@@ -87,16 +77,6 @@ our %Providers = (
                dl_type => "plain",
        },
 
-       # Abuse.ch URLhaus Blacklist rules.
-       urlhaus => {
-               summary => "Abuse.ch URLhaus Blacklist Rules",
-               website => "https://urlhaus.abuse.ch/",
-               tr_string => "urlhaus blacklist rules",
-               requires_subscription => "False",
-               dl_url => "https://urlhaus.abuse.ch/downloads/urlhaus_suricata.tar.gz",
-               dl_type => "archive",
-       },
-
        # Etnetera Aggressive Blacklist.
        etnetera_aggresive => {
                summary => "Etnetera Aggressive Blacklist Rules",