Tune IPS log output, how to disable default suricata rulesets?

[pmueller (Peter Müller)]

Hi,

sorry for my late reply.

@dark0ipfire

Since then I get a lot of stream related alerts, which floods the log and could mask real important events.

Which IPFire version are you running? This sounds like you are using the testing version of Core Update 162, which contained a few quirks on the IPS side. See here on how to fix this, and get the final released Core Update 162, where this has been fixed.

Thanks, and best regards,
Peter Müller