Best way to separate IOTs from main LAN?

[bthoven]

@bthoven said in Best way to separate IOTs from main LAN?:

Thanks. I add IOT to Network Interface, press save, and it is now running.................same symptom as when I selected ALL........still waiting..............

Hi,
I solved this problem by stopping the DNS Resolver first, then additionally chose IOT interface and save. Then it registered the new setting and the resolver restarted itself.

Thanks Steve and John for your help.

ps. Strange, now Snort blocked Netgate forum ip 208.123.73.199. I had to remove it from the block list. :)

[NogBadTheBad]

Have you just installed Snort, if you have I'd advise not putting it into block mode and baseline what it doesn't like.

FYI here are the rules I've disabled:-

[bthoven]

I monitored Snort for a week before enabling block mode.

Could you explain why you disabled those rules? One by one rule explanation would be great.

Thanks

[NogBadTheBad]

Most of the ET Policy ones are related to my IOT network, I should really tighten up $home_net now I'm running Snort on the parent interface.

The SIP stuff is related to a VOIP phone sat on my network.

The rest was just normal day to day traffic.