2020-08-27 09:46:17 +00:00
|
|
|
# Run Suricata 5.0.3 with custom rules
|
2021-05-25 17:42:32 +00:00
|
|
|
## UBNT updated Suricata in 1.9.x firmwares make this unneeded
|
2020-08-27 09:46:17 +00:00
|
|
|
## Features
|
|
|
|
|
|
2021-05-25 17:42:32 +00:00
|
|
|
1. Run a newer suricata with custom rules
|
2020-08-27 09:46:17 +00:00
|
|
|
2. Persists through reboots and firmware updates.
|
|
|
|
|
|
|
|
|
|
## Requirements
|
|
|
|
|
|
2022-06-24 10:33:29 +00:00
|
|
|
1. You have successfully setup the on boot script described [here](https://github.com/boostchicken-dev/udm-utilities/tree/main/on-boot-script)
|
2020-08-27 09:46:17 +00:00
|
|
|
|
|
|
|
|
## Customization
|
|
|
|
|
|
|
|
|
|
* Put customs rules files in /mnt/data/suricata-rules
|
|
|
|
|
|
|
|
|
|
## Steps
|
|
|
|
|
|
|
|
|
|
1. Copy [25-suricata.sh](on_boot.d/25-suricata.sh) to /mnt/data/on_boot.d and update its values to reflect your environment
|
|
|
|
|
2. Execute /mnt/data/on_boot.d/25-suricata.sh
|
