Core 141 - Suricata won't start if DNS is updated

Hello,

I noticed the following error on the logs :
[ERRCODE: SC_ERR_INVALID_YAML_CONF_ENTRY(139)] - failed to parse address var “DN S_SERVERS” with value “[ 1.1.1.1 8.8.8.8]”. Please check it’s syntax

It turns out tha there is missing comma on this file : /var/ipfire/suricata/suricata-dns-servers.yaml

Fixed it manually but it seems this file is autogenerated ?

Yes this file is auto-generated.

Could you please file a ticket for this?

There is no ticket (yet) - this bug is fixed in Core 141.

HTH,
Matthias

thanks guys !