• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Snort: How to Determine Which IP to put in Pass List?

Scheduled Pinned Locked Moved IDS/IPS
1 Posts 1 Posters 373 Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • D
    DaHai8
    last edited by Mar 17, 2018, 2:12 AM

    There is an app on my phone that doesn't work in the pfSense/Snort network, but works on CellData and friends' networks.
    I'm thinking it must be Snort blocking the source IP, but there are many.
    How can I determine which IP this app is trying to access so that I can add it to the Pass List?
    I can't find anything in the Snort Service that gives me current data - everything seems to be hours old (Alert lists, block lists, etc)
    If I unblock everything, then Snort will just block that source again next time I use the app. So I need to know the source IP and the rule its using (maybe the rule is unnecessary…)
    Thank you for your help.

    1 Reply Last reply Reply Quote 0
    1 out of 1
    • First post
      1/1
      Last post
    Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
      This community forum collects and processes your personal information.
      consent.not_received