Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Hello BMeeks, good morning I have performed all of the above, however legacy mode is not blocking. My suricata.log displays the following.

    Scheduled Pinned Locked Moved IDS/IPS
    7 Posts 2 Posters 497 Views 2 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A Offline
      alisson2904
      last edited by

      This post is deleted!
      1 Reply Last reply Reply Quote 0
      • A Offline
        alisson2904
        last edited by

        This post is deleted!
        1 Reply Last reply Reply Quote 0
        • A Offline
          alisson2904
          last edited by

          Re: Suricata Package v4.1.4_4 -- Release Notes

          Hello BMeeks, good morning
          I have performed all of the above, however legacy mode is not blocking.
          My
          suricata.log
          displays the following.!767c70b9-6fac-47d8-be53-aa7c44a697ab.jpeg

          bmeeksB 1 Reply Last reply Reply Quote 0
          • A Offline
            alisson2904
            last edited by alisson2904

            Re: Suricata Package v4.1.4_4 -- Release Notes

            <Warning> -- [ERRCODE: SC_ERR_INVALID_ARGUMENT(13)] - No output module named alert-pf

            1 Reply Last reply Reply Quote 0
            • bmeeksB Offline
              bmeeks
              last edited by

              Whoa! That error should not be there for sure. Let me see if something got dropped in the migration of the pull request.

              1 Reply Last reply Reply Quote 0
              • bmeeksB Offline
                bmeeks @alisson2904
                last edited by

                @alisson2904 :
                Is this on pfSense-2.4.4 RELEASE or pfSense-2.5 DEVEL? That error message would indicate the Legacy Blocking Mode patch was not applied to the Suricata binary, and that should not happen.

                1 Reply Last reply Reply Quote 0
                • bmeeksB Offline
                  bmeeks
                  last edited by

                  To folks trying to follow this thread. The user has opened a number of new threads with each reply. The main topic with my responses is hopefully isolated now to this thread: https://forum.netgate.com/topic/145895/suricata-not-blocking-legacy-mode.

                  1 Reply Last reply Reply Quote 0
                  • First post
                    Last post
                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.