security/maltrail: add syslog support (#2222)

This commit is contained in:
Michael
2021-04-10 10:15:19 +02:00
committed by GitHub
parent e856da6018
commit 8181542c66
5 changed files with 31 additions and 3 deletions
+1 -2
View File
@@ -1,6 +1,5 @@
PLUGIN_NAME= maltrail
PLUGIN_VERSION= 1.6
PLUGIN_REVISION= 1
PLUGIN_VERSION= 1.7
PLUGIN_COMMENT= Malicious traffic detection system
PLUGIN_DEPENDS= maltrail
PLUGIN_MAINTAINER= m.muenz@gmail.com
+4
View File
@@ -11,6 +11,10 @@ WWW: https://github.com/stamparm/maltrail
Changelog
---------
1.7
* Add syslog export
1.6
* Allow to set capture buffer size
@@ -29,4 +29,16 @@
<type>text</type>
<help>Port of the logging server. Leave empty when sensor and server run on the same system.</help>
</field>
<field>
<id>sensor.syslogserver</id>
<label>Syslog Server</label>
<type>text</type>
<help>IP address of the remote syslog server.</help>
</field>
<field>
<id>sensor.syslogport</id>
<label>Syslog Port</label>
<type>text</type>
<help>Port of the syslog server.</help>
</field>
</form>
@@ -1,7 +1,7 @@
<model>
<mount>//OPNsense/maltrail/sensor</mount>
<description>Maltrail sensor configuration</description>
<version>0.0.2</version>
<version>0.0.3</version>
<items>
<enabled type="BooleanField">
<default>0</default>
@@ -24,5 +24,12 @@
<default>8337</default>
<Required>Y</Required>
</remoteport>
<syslogserver type="HostnameField">
<Required>N</Required>
</syslogserver>
<syslogport type="PortField">
<default>514</default>
<Required>Y</Required>
</syslogport>
</items>
</model>
@@ -26,6 +26,12 @@ DISABLE_LOCAL_LOG_STORAGE false
{% endif %}
{% endif %}
{% if helpers.exists('OPNsense.maltrail.sensor.enabled') and OPNsense.maltrail.sensor.enabled == '1' %}
{% if helpers.exists('OPNsense.maltrail.sensor.syslogserver') and OPNsense.maltrail.sensor.syslogserver != '' %}
SYSLOG_SERVER {{ OPNsense.maltrail.sensor.syslogserver }}:{{ OPNsense.maltrail.sensor.syslogport }}
{% endif %}
{% endif %}
SENSOR_NAME $HOSTNAME
CUSTOM_TRAILS_DIR /usr/local/maltrail/trails/custom/
PROCESS_COUNT $CPU_CORES