Snort creates a warning but does not block!
-
Snort creates a warning but does not block.
pfsense:2.7.2
interface : LAN
Block Offenders: selectedKill States: selected
Which IP to Block: both
I wanted to uninstall and reinstall it, but snort is not listed in the "Available Packages" section.
Finally, would you recommend Suricata instead of snort?
Which one is better and hassle-free? -
@enesas Even though I changed many settings, it did not fix it. I reset the device and now it started blocking. Strange...
Now I can take your advice on suricata and snort.
I didn't delete the message, in case it happens to someone else. They can fix it by resetting it.
-
@enesas I would recommend Suricata. The package maintainer for both has said he will probably not develop a package for Snort v3.
You uninstall from the Installed Packages tab.