Getting Snort to send emails of the alerts blocked etc



  • I have a pfsense sg2440 and i have setup snort and growl but i dont get any alerts though if i go to the package i see ip addresses getting blocked can anyone point me into how to get email alerts so i know whats happening on the wan of the firewall



  • i have the same need : how can we be alerted by email upon blocked from snort ?



  • Here is the solution I found so far :
    Install the mailreport package. Then setup a rule to email (daily email), log extract from system with a following filter criteria : snort[