Snort with bridge

[flow544]

Hello,
My PFSENSE is configured in bridge mode.
I perform filtering on the interfaces that are part of the bridge.
I would like to block the port scan with snort.
When I configure the WAN interface with Snort and perform a port scan from a WAN machine to a LAN machine, the port scan is not seen (no alerts).

Can you help me ?

Thank you :)

[NollipfSense]

@flow544 said in Snort with bridge:

My PFSENSE is configured in bridge mode

Do you realize that mode defeats your pfSense box!