Merge pull request #188 from PiBa-NL/suricata_308

pfsense · Sep 16, 2016 · b692156 · b692156
2 parents 8777990 + 137820e
commit b692156
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 1 deletion.
diff --git a/security/pfSense-pkg-suricata/Makefile b/security/pfSense-pkg-suricata/Makefile
@@ -2,7 +2,7 @@
 
 PORTNAME=	pfSense-pkg-suricata
 PORTVERSION=	3.0
-PORTREVISION=	7
+PORTREVISION=	8
 CATEGORIES=	security
 MASTER_SITES=	# empty
 DISTFILES=	# empty

diff --git a/...ity/pfSense-pkg-suricata/files/usr/local/pkg/suricata/suricata_check_for_rule_updates.php b/...ity/pfSense-pkg-suricata/files/usr/local/pkg/suricata/suricata_check_for_rule_updates.php
@@ -181,6 +181,9 @@ function suricata_download_file_url($url, $file_out) {
 		curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 2);
 		curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 10);
 		curl_setopt($ch, CURLOPT_TIMEOUT, 0);
+
+		// detect broken connection so it disconnects after +-10 minutes (with default TCP_KEEPIDLE and TCP_KEEPINTVL) to avoid waiting forever.
+		curl_setopt($ch, CURLOPT_TCP_KEEPALIVE, 1); 
 
 		// Honor any system restrictions on sending USERAGENT info
 		if (!isset($config['system']['do_not_send_host_uuid'])) {