I'm configure a pfsense 2.0.1 64bits firewal to work in transparent mode
(bridge) using this how to:
http://blog.qcsitter.com/BSDay/
WAN (em0) ----- LAN (em1) --- External network
|PF| } ----> [bridge0]
----- OPT1 (em2) --- Internal network
Snort is listening in bridge0 interface.
When i use backtrack (nmap) to test the snort, i'm not see any alert on log
or web interface.
I'm wirte icmp rules to test and i see any trigers on log, but exploits or
portscan dont show in log alert
The question is: PF sense 2.0.1 Snort work in bridge mode (IPS) ?
_______________________________________________
List mailing list
[email protected]
http://lists.pfsense.org/mailman/listinfo/list