# Passing traffic helps

**URL:** <https://forum.suricata.io/t/passing-traffic-helps/1558>\
**Category:** Help\
**Created:** [July 28, 2021, 8:46pm UTC](https://forum.suricata.io/t/passing-traffic-helps/1558 "2021-07-28T20:46:48Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Douglas\_Ribeiro](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.suricata.io/douglas_ribeiro/32/377_2.png) [@Douglas\_Ribeiro](https://forum.suricata.io/u/Douglas_Ribeiro)\
**Post date:** [July 28, 2021, 8:46pm UTC](https://forum.suricata.io/t/passing-traffic-helps/1558/1 "2021-07-28T20:46:49Z")

</div>

Hi guys, so I have a Suricata on my network, it only has an ethernet interface to ens18. My router forwards the traffic that comes from the WAN to it, it analyzes it and there is a script that when it finds an Alert it automatically creates a firewall rule on my router. Problem is it seems that it sends the wrong IP, usually it sends my Public IP as source, so I wanted some help I think I should create a virtual interface something like that, so that when an alert occurs it sends the correct Source IP , not mine, I believe that as everything comes and goes on the same interface, it is changing the IP, is there a way to do this?