Are "noisy" Suricata rules still disabled in CU189?

[bloater99 (Tim Zakharov)]

In the CU188 notes it mentioned disabling noisy Suricata rules. Then we found out that actually had not happened. No mention in the CU189 notes. So do we know if Suricata default rules are disabled in CU189?

Thanks!

[ms (Michael Tremer)]

Yes they are disabled since Core Update 188.

This was fixed in the updater back then as well.

[bonnietwin (Adolf Belka)]

@bloater99

So do we know if Suricata default rules are disabled

You can easily check by looking in

/var/ipfire/suricata/suricata-used-rulesfiles.yaml

and you will find that those rules are no longer listed, only the ones that you have selected in your ruleset providers rules.