How to use custom rules?

Rules
1

Hello,
If I want to use a custom rule then I must create a “.rules” file and then create a “local.rules” under “/etc/suricata/” directory and put the name of that rule file into it?

Thank you.

2

See my previous post to see if this answers your question: <Error> - [ERRCODE: SC_ERR_NO_RULES_LOADED(43)] - Loading signatures failed

1 Like
3

To be honest, because of that I asked this question.
The contents of local.rules file must be my custom rules?

Thank you.