Snort except block, there is a packet drop feature?

[magura]

Just automatically  discarded illegal packets
I do not want to block SRC OR DST IP
Whether to make?

[fragged]

Can't be done as Snort can't work in 'inline' mode yet on pfSense.

[magura]

in-line mode will develop the future?  ;D

[bmeeks]

Yes, there are future plans for in-line mode.  Changes are necessary in the pfSense kernel code to fully support this (primarily full support for netmap).

Bill

[magura]

what pfsense version will be provided. ;D
Thank you

[bmeeks]

Not yet known.  That will be up to the pfSense core developers.  I'm just a volunteer package maintainer for Snort and Suricata… :).  It has been posted here and elsewhere this is a planned feature, but no specific version/timetable has been given.

Bill