services.suricata.dropRules
NixOS option
List of matchers specifying which rules should be converted to drop rules. These can be raw SID numbers or something like “group:emerging-coinminer.rules”.
type: list of stringDefault
[ ]
Example
declared in: nixos/modules/services/networking/suricata/default.nixView source on NixOS/nixpkgs →[ "2274852" "4327876" "902244405" ]