PFSense V.2.4.5-RELEASE (amd64) and Snort 3.2.9.10_3 not starting


  • Haven't paid attention.

    ***Apr 5 09:06:46 php /tmp/snort_em136912_startcmd.php: The command '/usr/local/bin/snort -R 36912 -D -q --suppress-config-log -l /var/log/snort/snort_em136912 --pid-path /var/run --nolock-pidfile -G 36912 -c /usr/local/etc/snort/snort_36912_em1/snort.conf -i em1' returned exit code '1', the output was ''

    Apr 5 09:06:46 snort 71684 FATAL ERROR: /usr/local/etc/snort/snort_36912_em1/snort.conf(6) !any is not allowed in EXTERNAL_NET.***

    First thought it was my cloud flare DNS entry of 1.1.1.1. Removed it and it still errored out. Then disabled IPv6 on my WAN link and Snorts starts with no errors.

    Not sure what my issue is. I want to keep using IPv6 if I can and I did not understand the IPv6 entries that I see in my External interface list.