Suricata on BSD with PF firewall

syoc April 1, 2022, 7:35am 2

Hi.

This recent thread might help.

IPS mode alert action and FreeBSD packet filter integration Help

Hi, i am currently using suricata on FreeBSD 11.4 and trying to run suricata IPS mode but in IPS mode suricata only uses FreeBSD’s IPFW which is i can’t use for performance concerns and action modes only drop and reject I want to use IPS mode with alert action and FreeBSD’s Packet Filter (PF) both for example: İf an intrusion detected suricata will send src_ip, src_port, dst_ip dst_port to PF and i will decide pass or block is it possible . i am beginner at suricata any help at this point w…

show post in topic

Home
Categories
Guidelines
Terms of Service
Privacy Policy

Powered by Discourse, best viewed with JavaScript enabled