CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-14 13:12:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

Suricata Airgap

Browse Source
This commit is contained in:
Mike Reeves
2023-05-24 15:47:07 -04:00
parent 11d7e66ea0
commit edf531739c
3 changed files with 6 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
salt/idstools/etc/rulecat.conf
View File

@@ -1,12 +1,12 @@
{%- from 'vars/globals.map.jinja' import GLOBALS %} {%- from 'vars/globals.map.jinja' import GLOBALS -%}
{%- from 'idstools/map.jinja' import IDSTOOLSMERGED %} {%- from 'idstools/map.jinja' import IDSTOOLSMERGED -%}
--merged=/nsm/rules/suricata/all.rules --merged=/nsm/rules/suricata/all.rules
--local=/nsm/rules/local/local.rules --local=/nsm/rules/local/local.rules
{%- if GLOBALS.md_engine == "SURICATA" %} {%- if GLOBALS.md_engine == "SURICATA" %}
--local=/nsm/rules/sorules/ids/extraction.rules --local=/nsm/rules/sorules/ids/extraction.rules
--local=/nsm/rules/sorules/filters.rules --local=/nsm/rules/sorules/filters.rules
{%- endif %} {%- endif %}
--url=http://{{ GLOBALS.manager }}:7788/rules/emerging-all.rules --url=http://{{ GLOBALS.manager }}:7788/suricata/emerging-all.rules
--disable=/opt/so/idstools/etc/disable.conf --disable=/opt/so/idstools/etc/disable.conf
--enable=/opt/so/idstools/etc/enable.conf --enable=/opt/so/idstools/etc/enable.conf
--modify=/opt/so/idstools/etc/modify.conf --modify=/opt/so/idstools/etc/modify.conf

1
salt/nginx/enabled.sls
View File

@@ -42,6 +42,7 @@ so-nginx:
- /opt/so/conf/navigator/enterprise-attack.json:/opt/socore/html/navigator/assets/enterprise-attack.json:ro - /opt/so/conf/navigator/enterprise-attack.json:/opt/socore/html/navigator/assets/enterprise-attack.json:ro
- /opt/so/conf/navigator/pre-attack.json:/opt/socore/html/navigator/assets/pre-attack.json:ro - /opt/so/conf/navigator/pre-attack.json:/opt/socore/html/navigator/assets/pre-attack.json:ro
- /nsm/repo:/opt/socore/html/repo:ro - /nsm/repo:/opt/socore/html/repo:ro
- /nsm/rules:/nsm/rules:ro
{% endif %} {% endif %}
{% if DOCKER.containers['so-nginx'].custom_bind_mounts %} {% if DOCKER.containers['so-nginx'].custom_bind_mounts %}
{% for BIND in DOCKER.containers['so-nginx'].custom_bind_mounts %} {% for BIND in DOCKER.containers['so-nginx'].custom_bind_mounts %}

4
salt/nginx/etc/nginx.conf
View File

@@ -84,8 +84,8 @@ http {
server { server {
listen 7788; listen 7788;
server_name {{ GLOBALS.url_base }}; server_name {{ GLOBALS.url_base }};
root /opt/socore/html/repo; root /nsm/rules;
location /rules/ { location / {
allow all; allow all;
sendfile on; sendfile on;
sendfile_max_chunk 1m; sendfile_max_chunk 1m;