hello i am using suricata vesion 6.0.13 and i want set suricatain IPS mode with handling multiple interfaces. so kindly provide proper configuration required for same.
i am setting up LISTENMODE=nfqueue in default suricata file.
hello i am using suricata vesion 6.0.13 and i want set suricatain IPS mode with handling multiple interfaces. so kindly provide proper configuration required for same.
i am setting up LISTENMODE=nfqueue in default suricata file.
In NFQUEUE mode you don’t have to define interfaces, you just need to make sure you properly forward the traffic that you want to investigate via Netfilter. See 14. Setting up IPS/inline for Linux — Suricata 6.0.13 documentation