Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Suricata inline mode mark packet and process it with firewall rule??

    IDS/IPS
    2
    3
    362
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • H
      HelloWorld 0 last edited by

      I would like to do some policy routing base on contents of a packet, but the firewall rule does not have complex dpi function i.e. deep packet inspection. I had a try with suricata, and it could perfectly inspect the packet by creating my custom rules. But it only allows me to drop the packet. I wonder if it can somehow tag the packet; and later, there could be some firewall rules to process these packet with certain tags.

      1 Reply Last reply Reply Quote 0
      • H
        HelloWorld 0 last edited by

        I've searched the "whole" internet for days, but I haven't notice anything on this topic. Would someone please help me?

        1 Reply Last reply Reply Quote 0
        • bmeeks
          bmeeks last edited by

          What you want to do is not currently possible with either Suricata or Snort on pfSense.  The firewall and the IDS/IPS do not cooperate with other at that level.

          Bill

          1 Reply Last reply Reply Quote 0
          • First post
            Last post

          Products

          • Platform Overview
          • TNSR
          • pfSense
          • Appliances

          Services

          • Training
          • Professional Services

          Support

          • Subscription Plans
          • Contact Support
          • Product Lifecycle
          • Documentation

          News

          • Media Coverage
          • Press
          • Events

          Resources

          • Blog
          • FAQ
          • Find a Partner
          • Resource Library
          • Security Information

          Company

          • About Us
          • Careers
          • Partners
          • Contact Us
          • Legal
          Our Mission

          We provide leading-edge network security at a fair price - regardless of organizational size or network sophistication. We believe that an open-source security model offers disruptive pricing along with the agility required to quickly address emerging threats.

          Subscribe to our Newsletter

          Product information, software announcements, and special offers. See our newsletter archive to sign up for future newsletters and to read past announcements.

          © 2021 Rubicon Communications, LLC | Privacy Policy