[solved] Suricata in legacy mode with Wireguard interface
-
To be honest, I am impatient, if it will work. I just have finished the setup with Suricata listening on a Wireguard interface to which only SMTP traffic will get NATed to from WAN. And I see no alerts.
I activated all of the Emerging Threats Open Rules, Feodo Tracker Botnet C2 IP Rules and ABUSE.ch SSL Blacklist Rules.
I haven't used IDS for a long time.
How long will it takes until I see an alert? And if I don't see one, does this means, Suricata can not be run on Wireguard? -
So it does work.
