# Create rules on pfsense

**URL:** <https://forum.suricata.io/t/create-rules-on-pfsense/2735>\
**Category:** Rules\
**Tags:** ips, pfsense, suricata\
**Created:** [August 31, 2022, 5:22am UTC](https://forum.suricata.io/t/create-rules-on-pfsense/2735 "2022-08-31T05:22:30Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Irvink\_Eja](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.suricata.io/irvink_eja/32/1572_2.png) [@Irvink\_Eja](https://forum.suricata.io/u/Irvink_Eja)\
**Post date:** [August 31, 2022, 5:22am UTC](https://forum.suricata.io/t/create-rules-on-pfsense/2735/1 "2022-08-31T05:22:30Z")

</div>

I want suricata to detect NMAP, Brute force, DDOS attacks, is there an example for custome rule in pfsense? I’ve searched but can’t run on the suricata I installed

---

<div class="post-metadata">

**Author:** ![Andreas\_Herz](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.suricata.io/andreas_herz/32/52_2.png) [@Andreas\_Herz](https://forum.suricata.io/u/Andreas_Herz)\
**Post date:** [August 31, 2022, 9:09am UTC](https://forum.suricata.io/t/create-rules-on-pfsense/2735/2 "2022-08-31T09:09:42Z")

</div>

There are different rulesets, some are shipped with Suricata but there are also ones like the Emerging Threats Ruleset. There you can look for rules that try to match scans.  
How it’s enabled in pfsense should be asked at the pfsense forum.

---

<div class="post-metadata">

**Author:** ![Irvink\_Eja](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.suricata.io/irvink_eja/32/1572_2.png) [@Irvink\_Eja](https://forum.suricata.io/u/Irvink_Eja)\
**Post date:** [September 2, 2022, 2:34am UTC](https://forum.suricata.io/t/create-rules-on-pfsense/2735/3 "2022-09-02T02:34:05Z")

</div>

ok sir, but do you have sample rules for DDOS, Bruteforce and Nmap for suricata rule?