yeah, this doesn't look right, but what do I know? @filippo_carletti
[root@server32 pulledpork.conf]# cat 30policy |more
# What is the base ruleset that you want to use, please uncomment to use
# and see the README.RULESETS for a description of the options.
# Note that setting this value will disable all ET rulesets if you are
# Running such rulesets
{
my $policy = $pulledpork{'Policy'} || 'connectivity';
if ($policy eq 'expert') {
$OUT .= "#ips_policy DISABLED - EXPERT MODE\n";
} else {
$OUT .= "ips_policy=$policy\n";
}
}