# Trusted IP's Where a put

**URL:** https://forum.suricata.io/t/trusted-ips-where-a-put/761
**Category:** Help
**Created:** [October 23, 2020, 6:36pm UTC](https://forum.suricata.io/t/trusted-ips-where-a-put/761 "2020-10-23T18:36:21Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![Douglas\_Ribeiro](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.suricata.io/douglas_ribeiro/32/377_2.png) [@Douglas\_Ribeiro](https://forum.suricata.io/u/Douglas_Ribeiro)
#### Post date: [October 23, 2020, 6:36pm UTC](https://forum.suricata.io/t/trusted-ips-where-a-put/761/1 "2020-10-23T18:36:21Z")

</div>

Hello guys, all right? Is there a place in Suricata where I can put trusted IP’s? As if it were a white list? I say this because sometimes Suricata ends up blocking my own valid IP Public.

---

<div class="post-metadata">

### Author: ![syoc](https://avatars.discourse-cdn.com/v4/letter/s/f475e1/32.png) [@syoc](https://forum.suricata.io/u/syoc)
#### Post date: [October 24, 2020, 12:22pm UTC](https://forum.suricata.io/t/trusted-ips-where-a-put/761/2 "2020-10-24T12:22:24Z")

</div>

I would recommend either writing a pass rule or using thresholds.  
Example pass rule: `pass 10.10.0.1 any <> any any (msg:"Skip all traffic related to my IP"; sid:1; rev:1;)`  
That would stop Suritcata from alerting or dropping all packets bound to or from 10.10.0.1.

Have a look at [https://suricata.readthedocs.io/en/latest/configuration/global-thresholds.html?highlight=threshold#id2](https://suricata.readthedocs.io/en/latest/configuration/global-thresholds.html?highlight=threshold#id2) for thresholds.

Putting `suppress gen_id 0, sig_id 0, track by_both, ip 10.10.0.1` in /etc/suricata/threshold.config should also stop any alerts from having effect on traffic.

I would recommend using a pass rule.
