IPS rule selection

[jon]

I strongly agree with Adolf’s comments!

Also -

@bonnietwin

If you use apt-get with Debian or Ubuntu that rule blocks the OS update traffic. There have been forum threads on that issue.

That one bit me for a few days! When I enabled a single rule, one of the sub-rules blocked anything related to apt. Very frustrating to figure out!

Problems with DNS Configuration

I had an issue with apt update when IPS is enabled. Try disabling IPS temporarily (this is just a test). For me there was single rule I had enabled that caused the problem. (Sorry I cannot remember the rule but I’ll keep looking for my notes!) EDIT: Found it! In an IPS rule named: emerging-policy.rules Is a item called: ET POLICY GNU/Linux APT User-Agent Outbound likely related to package management And it was blocking my apt-get update.

There was also one sub-rule that blocked my DNS. (I’ll see if I can find that one)