Suricata on BSD with PF firewall

[syoc]

Hi.

This recent thread might help.

IPS mode alert action and FreeBSD packet filter integration

Hi, i am currently using suricata on FreeBSD 11.4 and trying to run suricata IPS mode but in IPS mode suricata only uses FreeBSD’s IPFW which is i can’t use for performance concerns and action modes only drop and reject I want to use IPS mode with alert action and FreeBSD’s Packet Filter (PF) both for example: İf an intrusion detected suricata will send src_ip, src_port, dst_ip dst_port to PF and i will decide pass or block is it possible . i am beginner at suricata any help at this point w…