Dear madam/sir,
As you might know there is a feature in pfsense called suppress list where you can add source or destination ip addresses along with a rule causing the alert to bypass it. But that is not available in ipfire. So is there any way so I can add suppress list on suricata by hand? Would you please add this feature in ipfire?. Thanks.
https://pfsense-docs.readthedocs.io/en/latest/ids-ips/snort-suppress-list.ht...
Regards, Reza.
Hello Reza,
IPFire has a whitelist feature where you can add hosts so that they won’t be blocked at all.
Is it this what you are looking for?
-Michael
On 23 Feb 2021, at 21:59, Reza Fathi rezafathi20032003@yahoo.com wrote:
Dear madam/sir,
As you might know there is a feature in pfsense called suppress list where you can add source or destination ip addresses along with a rule causing the alert to bypass it. But that is not available in ipfire. So is there any way so I can add suppress list on suricata by hand? Would you please add this feature in ipfire?. Thanks.
https://pfsense-docs.readthedocs.io/en/latest/ids-ips/snort-suppress-list.ht...
Regards, Reza.
-
Michael Tremer -
Reza Fathi