Suricata Address List Not Updating

sandrockcstm commented 2 months ago

I'm trying to get the Mikrocata2selks list to sync up with my Mikrotik and am not having any luck getting it to work. I'm using the recommended testing ID from SELKS's documentation, but the curl script keeps resolving instead of timing out as expected, and when I check the Suricata address list on the tik I don't see any entries being created. Troubleshooting so far:

Confirmed that the username and password on the mikrocata2selks and the mikrotik 5009 match.
Followed the troubleshooting steps on the readme (confirmed that the services are running, traffic is hitting the dummy interface, and that the docker containers are up and running).
Confirmed ports for API access are correct
Confirmed API is allowed under IP > Services from the mikrocata2selks machine to the Mikrotik
Enabled "Add_On_Start" in mikrocata.py
Lots of reboots

sandrockcstm commented 2 months ago

Was able to figure it out. There was a cert on the API-SSL service in Mikrotik. Removed it and everything started working. Does mikrocata2selks support cert-enabled API-SSL access?

angolo40 commented 1 month ago

Hello,was your cert a self signed certificate?

sandrockcstm commented 1 day ago

Yes, it was self-signed.

angolo40 / mikrocata2selks

Suricata Address List Not Updating #21