I am fairly new to using suricata 7.0.8_2 plugin on Opnsense and was wondering when a rule blocks an Ip address how long is it blocked for and can I change the length of time a rule blocks an ip address. Also how would I unblock an ip that was blocked that is a false positive.
This is an OPNsense specific implementation, please ask at the OPNSense forum https://forum.opnsense.org/
Thanks. I kind of figured that but thought I would ask here because nobody on the opnsense forum answere this question and thought maybe some opnsense users were here that might be able to answer this for me.