SNORT Not Adding IP's To Block List

ghostshell · Oct 31, 2013, 4:00 AM

On the latest greatest PFSense

On the newest SNORT package

I am getting alerts, but before i would have IP's showing up in the Blocked list due to port scanning or decoy port scanning
and now i have nothing under Blocked at all.

Any ideas?

Today after checking again i updated the rules and ill have to see if i now get IP's listed under the Blocked tab

My next step is to reinstall SNORT.

Anyone have any other ideas?

NelsonLopes · Oct 31, 2013, 10:40 AM

@ghostshell:

On the latest greatest PFSense

On the newest SNORT package

I am getting alerts, but before i would have IP's showing up in the Blocked list due to port scanning or decoy port scanning
and now i have nothing under Blocked at all.

Any ideas?

Today after checking again i updated the rules and ill have to see if i now get IP's listed under the Blocked tab

My next step is to reinstall SNORT.

Anyone have any other ideas?

That's for everyone on pfsense 2.1. Check this out:

http://forum.pfsense.org/index.php/topic,68171.0.html

ghostshell · Nov 1, 2013, 3:39 AM

Well now i have tons of IPs listed under blocked so something i did worked