services.suricata.settings.vars.address-groups

The address group variables for suricata, if not defined the default value of suricata (see example) will be used. Your settings will extend the predefined values in example.

Declarations

nixos/modules/services/networking/suricata/default.nix

Type

submodule

Default

{ }

Example

{
  AIM_SERVERS = "$EXTERNAL_NET";
  DC_SERVERS = "$HOME_NET";
  DNP3_CLIENT = "$HOME_NET";
  DNP3_SERVER = "$HOME_NET";
  DNS_SERVERS = "$HOME_NET";
  ENIP_CLIENT = "$HOME_NET";
  ENIP_SERVER = "$HOME_NET";
  EXTERNAL_NET = "!$HOME_NET";
  HOME_NET = "[192.168.0.0/16,10.0.0.0/8,172.16.0.0/12]";
  HTTP_SERVERS = "$HOME_NET";
  MODBUS_CLIENT = "$HOME_NET";
  MODBUS_SERVER = "$HOME_NET";
  SMTP_SERVERS = "$HOME_NET";
  SQL_SERVERS = "$HOME_NET";
  TELNET_SERVERS = "$HOME_NET";
}