mirror of
https://github.com/telekom-security/tpotce.git
synced 2025-07-02 01:27:27 -04:00
Update update.sh
Download rules via URL
This commit is contained in:
17
docker/suricata/dist/update.sh
vendored
17
docker/suricata/dist/update.sh
vendored
@ -40,3 +40,20 @@ if [ "$myCHECK" == "0" ];
|
||||
else
|
||||
echo "/etc/suricata/null.bpf"
|
||||
fi
|
||||
|
||||
# Download rules via URL
|
||||
if [ "$FROMURL" != "" ] ; then
|
||||
SAVEIFS=$IFS ; IFS='|'
|
||||
for URL in $FROMURL; do
|
||||
if [ $(curl -I --silent --output /dev/null --write-out "%{http_code}" $URL) -eq 200 ] ; then
|
||||
rm -rf /tmp/*
|
||||
curl "$URL" -o /tmp/rules.tar.gz
|
||||
tar -xvf /tmp/rules.tar.gz -C /tmp
|
||||
suricata-update --local /tmp/rules --no-test
|
||||
rm -rf /tmp/*
|
||||
else
|
||||
continue
|
||||
fi
|
||||
done
|
||||
IFS=$SAVEIFS
|
||||
fi
|
||||
|
Reference in New Issue
Block a user