Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Snort issues

    pfSense Packages
    3
    3
    1477
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C
      cylent last edited by

      two quick questions;

      when snort blocks someone what file does it write the ip in? i looked in /usr/local/etc/snort but couldnt find where it lists the host ip…

      also,

      on the block page it says: "This page lists hosts that have been blocked by Snort. Hosts are automatically deleted every hour."  however on the front settings page theres an option that says: "Remove blocked hosts every" ... which one is true then? if i set the option for 12 hours will it remain blocked for 12 hours? what about the text on the blocked page above?

      1 Reply Last reply Reply Quote 0
      • H
        Hugovsky last edited by

        The text changes with the setting.

        1 Reply Last reply Reply Quote 0
        • J
          jamesdean last edited by

          @cylent:

          two quick questions;

          when snort blocks someone what file does it write the ip in? i looked in /usr/local/etc/snort but couldnt find where it lists the host ip…

          also,

          on the block page it says: "This page lists hosts that have been blocked by Snort. Hosts are automatically deleted every hour."   however on the front settings page theres an option that says: "Remove blocked hosts every" ... which one is true then? if i set the option for 12 hours will it remain blocked for 12 hours? what about the text on the blocked page above?

          Snort does not write blocked ips to file.
          Snort adds blocked ips to pf table.

          James

          1 Reply Last reply Reply Quote 0
          • First post
            Last post

          Products

          • Platform Overview
          • TNSR
          • pfSense Plus
          • Appliances

          Services

          • Training
          • Professional Services

          Support

          • Subscription Plans
          • Contact Support
          • Product Lifecycle
          • Documentation

          News

          • Media Coverage
          • Press
          • Events

          Resources

          • Blog
          • FAQ
          • Find a Partner
          • Resource Library
          • Security Information

          Company

          • About Us
          • Careers
          • Partners
          • Contact Us
          • Legal
          Our Mission

          We provide leading-edge network security at a fair price - regardless of organizational size or network sophistication. We believe that an open-source security model offers disruptive pricing along with the agility required to quickly address emerging threats.

          Subscribe to our Newsletter

          Product information, software announcements, and special offers. See our newsletter archive to sign up for future newsletters and to read past announcements.

          © 2021 Rubicon Communications, LLC | Privacy Policy