You should be able to go the other direction and set up a  pass list 
that allows everything but these IPs.  Remember to add the pass list to the 
interface though.

        However if you just enable the alerting and select to not automatically 
block the bad traffic that may be easier.

--

Steve Yates
ITS, Inc.

-----Original Message-----
From: List [mailto:list-boun...@lists.pfsense.org] On Behalf Of Daniel Eschner
Sent: Monday, June 20, 2016 1:28 PM
To: pfSense Support and Discussion Mailing List <list@lists.pfsense.org>
Subject: [pfSense] add Blocking in suricata just for some IPs

Hi to everyone,

is it possible to add blocking mode just to some IPs from a /24 Network?
I want to run that in test mode to see who much false positiv i will see ;)

Cheers

Daniel


_______________________________________________
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold
_______________________________________________
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold

Reply via email to