This is still a Beta.
- Basic concept is to create GUI Interface for Suricata IPS
- Made for Qubes 4.1
- Show desktop notifications on every suspicious packet
- TODO Option to edit Suricata rules with GUI
git clone https://github.com/control-owl/suriGUI/
sudo mkdir /srv/salt/config
sudo qvm-run --pass-io sys-firewall ’cat /home/user/suriGUI/qubes-salt/sys-ips.top’ | sudo tee /srv/salt/sys-ips.top
sudo qvm-run --pass-io sys-firewall ’cat /home/user/suriGUI/qubes-salt/config/sys-ips.sls’ | sudo tee /srv/salt/config/sys-ips.sls
sudo qvm-run --pass-io sys-firewall ’cat /home/user/suriGUI/qubes-salt/config/sys-ips-template.sls’ | sudo tee /srv/salt/config/sys-ips-template.sls
sudo qvm-run --pass-io sys-firewall ’cat /home/user/suriGUI/qubes-salt/config/sys-ips-template-config.sls’ | sudo tee /srv/salt/config/sys-ips-template-config.sls
sudo qvm-run --pass-io sys-firewall ’cat /home/user/suriGUI/qubes-salt/config/sys-ips-config.sls’ | sudo tee /srv/salt/config/sys-ips-config.sls
sudo qubesctl top.enable sys-ips
sudo qubesctl --show-output --all state.highstate
- dom0: Install debian-11-minimal
- dom0: Clone debian-11-minimal as sys-ips-template
- sys-ips-template: Install required apps
- sys-ips-template: Install suriGUI in /usr/share/suriGUI
- sys-ips-template: create autostart script for suriGUI
- dom0: Create qube sys-ips based on sys-ips-template
- sys-ips: bind-dir /usr/share/suriGUI
- sys-ips: start suriGUI
- (dom0: Make sys-ips as Network provider)
Project is free.
Donation are welcome.
Motivation even more.
BTC 1JDYtxVvisQxFX1KrZ8yhYYQiqnfS4sFaa