DNS_SERVERS contains a list of all DNS servers we have in place, so the DNS resolvers of a IPFire installations should be added there, too.
Since observing DNS traffic from or to the resolvers as such might have security implications, I am changing the priority of this.
Yes I agree. Stefan, please make this a priority.
Patchset has been sent to the development mailing list: https://patchwork.ipfire.org/patch/2573/ https://patchwork.ipfire.org/patch/2574/ https://patchwork.ipfire.org/patch/2575/ https://patchwork.ipfire.org/patch/2576/ https://patchwork.ipfire.org/patch/2577/
In order to ship this changes by a core update the changed files needs to be shipped and the red.up suricata script needs to be launched .
https://blog.ipfire.org/post/ipfire-2-23-core-update-139-is-available-for-testing
https://blog.ipfire.org/post/ipfire-2-23-core-update-139-released