From 1634310e8a97511d6e9357c1e943a05f019ebbe4 Mon Sep 17 00:00:00 2001 From: Brady Sullivan Date: Wed, 31 Oct 2018 15:45:28 -0700 Subject: [PATCH 1/2] Use HTTPS over HTTP when connecting to emergingthreats. --- Makefile.am | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Makefile.am b/Makefile.am index 5e534ee07bc7..20aa8a1c9e83 100644 --- a/Makefile.am +++ b/Makefile.am @@ -29,9 +29,9 @@ install-rules: install -d "$(e_sysconfrulesdir)" if HAVE_FETCH_COMMAND if HAVE_WGET_COMMAND - $(HAVE_WGET) -qO - http://rules.emergingthreats.net/open/suricata-2.0/emerging.rules.tar.gz | tar -x -z -C "$(e_sysconfdir)" -f - + $(HAVE_WGET) -qO - https://rules.emergingthreats.net/open/suricata-2.0/emerging.rules.tar.gz | tar -x -z -C "$(e_sysconfdir)" -f - else - $(HAVE_CURL) -s http://rules.emergingthreats.net/open/suricata-2.0/emerging.rules.tar.gz | tar -x -z -C "$(e_sysconfdir)" -f - + $(HAVE_CURL) -s https://rules.emergingthreats.net/open/suricata-2.0/emerging.rules.tar.gz | tar -x -z -C "$(e_sysconfdir)" -f - endif else @echo "UNABLE to load ruleset wget or curl are not installed on system." From 9a9186d80d5b3c731db4c59ded9f244a46b1455d Mon Sep 17 00:00:00 2001 From: William Harding <57780704+wrharding@users.noreply.github.com> Date: Fri, 14 Jan 2022 21:44:11 -0500 Subject: [PATCH 2/2] Update Emerging Threat's Suricata Link In April 16th 2020 Proofpoint created an "old" folder and placed suricata 2.0 rules in it. Deploying the MHN suricata sensor today will yield the following error: ``` install -d "/opt/suricata/etc/suricata/rules" /usr/bin/wget -qO - http://rules.emergingthreats.net/open/suricata-2.0/emerging.rules.tar.gz | tar -x -z -C "/opt/suricata/etc/suricata/" -f - gzip: stdin: not in gzip format tar: Child returned status 1 tar: Error is not recoverable: exiting now Makefile:888: recipe for target 'install-rules' failed make: *** [install-rules] Error 2 ``` Closes pwnlandia/mhn#836 and pwnlandia/mhn#798 --- Makefile.am | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Makefile.am b/Makefile.am index 20aa8a1c9e83..51c2ced682a8 100644 --- a/Makefile.am +++ b/Makefile.am @@ -29,9 +29,9 @@ install-rules: install -d "$(e_sysconfrulesdir)" if HAVE_FETCH_COMMAND if HAVE_WGET_COMMAND - $(HAVE_WGET) -qO - https://rules.emergingthreats.net/open/suricata-2.0/emerging.rules.tar.gz | tar -x -z -C "$(e_sysconfdir)" -f - + $(HAVE_WGET) -qO - https://rules.emergingthreats.net/open/old/suricata-2.0/emerging.rules.tar.gz | tar -x -z -C "$(e_sysconfdir)" -f - else - $(HAVE_CURL) -s https://rules.emergingthreats.net/open/suricata-2.0/emerging.rules.tar.gz | tar -x -z -C "$(e_sysconfdir)" -f - + $(HAVE_CURL) -s https://rules.emergingthreats.net/open/old/suricata-2.0/emerging.rules.tar.gz | tar -x -z -C "$(e_sysconfdir)" -f - endif else @echo "UNABLE to load ruleset wget or curl are not installed on system."