services.suricata.disabledRules

NixOS option

List of matchers specifying which rules should be disabled. These can be raw SID numbers or something like “group:emerging-coinminer.rules”.

type: list of string
Default
[
  "2270000"
  "2270001"
  "2270002"
  "2270003"
  "2270004"
  "2270005"
  "2270006"
  "2270007"
]
declared in: nixos/modules/services/networking/suricata/default.nixView source on NixOS/nixpkgs →