2020-08-27 09:46:17 +00:00
|
|
|
# Run Suricata 5.0.3 with custom rules
|
2023-02-22 16:49:54 +00:00
|
|
|
|
2021-05-25 17:42:32 +00:00
|
|
|
## UBNT updated Suricata in 1.9.x firmwares make this unneeded
|
2023-02-22 16:49:54 +00:00
|
|
|
|
2020-08-27 09:46:17 +00:00
|
|
|
## Features
|
|
|
|
|
|
2021-05-25 17:42:32 +00:00
|
|
|
1. Run a newer suricata with custom rules
|
2020-08-27 09:46:17 +00:00
|
|
|
2. Persists through reboots and firmware updates.
|
|
|
|
|
|
|
|
|
|
## Requirements
|
|
|
|
|
|
2022-06-24 15:16:09 +00:00
|
|
|
1. You have successfully setup the on boot script described [here](https://github.com/unifi-utilities/unifios-utilities/tree/main/on-boot-script)
|
2020-08-27 09:46:17 +00:00
|
|
|
|
|
|
|
|
## Customization
|
|
|
|
|
|
2023-02-22 16:49:54 +00:00
|
|
|
- Put customs rules files in /data/suricata-rules
|
2020-08-27 09:46:17 +00:00
|
|
|
|
|
|
|
|
## Steps
|
|
|
|
|
|
2023-02-22 16:49:54 +00:00
|
|
|
1. Copy [25-suricata.sh](on_boot.d/25-suricata.sh) to /data/on_boot.d and update its values to reflect your environment
|
|
|
|
|
2. Execute /data/on_boot.d/25-suricata.sh
|
