Getting Snort to send emails of the alerts blocked etc
I have a pfsense sg2440 and i have setup snort and growl but i dont get any alerts though if i go to the package i see ip addresses getting blocked can anyone point me into how to get email alerts so i know whats happening on the wan of the firewall
i have the same need : how can we be alerted by email upon blocked from snort ?
Here is the solution I found so far :
Install the mailreport package. Then setup a rule to email (daily email), log extract from system with a following filter criteria : snort[