diff mbox series

suricata: Use correct red device when using QMI

Message ID 20240818091531.2614-1-stefan.schantl@ipfire.org
State Staged
Commit 823ece817fb2c3c95954a658dd1ed6fa3e1a9028
Headers
Series suricata: Use correct red device when using QMI |

Commit Message

Stefan Schantl Aug. 18, 2024, 9:15 a.m. UTC 
  When using QMI the dial-in option has to be set to "ppp" during setup.

In this case the initscript of suricata will create all related firewall
rules for the ppp0 interface which is not correct when using QMI where
the RED device is called red0.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
---
 src/initscripts/system/suricata | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
diff mbox series

Patch

diff --git a/src/initscripts/system/suricata b/src/initscripts/system/suricata
index 938ea66de..79f9478c3 100644
--- a/src/initscripts/system/suricata
+++ b/src/initscripts/system/suricata
@@ -86,7 +86,7 @@  function generate_fw_rules {
 		# Check if the IDS is enabled for this network zone.
 		if [ "${!enable_ids_zone}" == "on" ]; then
 			# Check if the current processed zone is "red" and the configured type is PPPoE dialin.
-			if [ "$zone" == "red" ] && [ "$RED_TYPE" == "PPPOE" ]; then
+			if [ "$zone" == "red" ] && [ "$RED_TYPE" == "PPPOE" ] && [ "$RED_DRIVER" != "qmi_wwan" ]; then
 				# Set device name to ppp0.
 				network_device="ppp0"
 			elif [ "$zone" == "ovpn" ]; then