services.suricata.dropRules

NixOS option

List of matchers specifying which rules should be converted to drop rules. These can be raw SID numbers or something like “group:emerging-coinminer.rules”.

type: list of string
Default
[ ]
Example
[ "2274852" "4327876" "902244405" ]
declared in: nixos/modules/services/networking/suricata/default.nixView source on NixOS/nixpkgs →