Open Information Security Foundation

11/07/2013

08:15 AM Suricata Support #1034: Help needed with proper IP block rule syntax using Suricata

drop ip [XXX.XXX.XXX.XXX,....] any <> any any (........)
Lambert Osas

05:15 AM Suricata Support #1034: Help needed with proper IP block rule syntax using Suricata

Update: Issue has been resolved with the current version 1.4.3.
I made some modifications to the rules and now it ... Lambert Osas

11/06/2013

11:29 AM Suricata Support #1034: Help needed with proper IP block rule syntax using Suricata

Hi, again, just a quick question regarding the IP block rules. Does Suricata currently support this IP block rule syn... Lambert Osas

10:26 AM Suricata Support #1034: Help needed with proper IP block rule syntax using Suricata

I just tried upgrading to version 1.4.6 but despite following the setup guide at: https://redmine.openinfosecfoundati... Lambert Osas

10:01 AM Suricata Support #1034: Help needed with proper IP block rule syntax using Suricata

OK. I will upgrade and test again and update you when I finish.
Thanks Lambert Osas

09:46 AM Suricata Support #1034: Help needed with proper IP block rule syntax using Suricata

Thanks for the quick reply. My suricata is setup as INLINE/IPS mode using NFQ and has been configured to force all tr... Lambert Osas

08:43 AM Suricata Support #1034 (Closed): Help needed with proper IP block rule syntax using Suricata

Hi, I have setup Suricata sometime ago and I intend to use it to block inbound & outbound connection to malicious IPs... Lambert Osas

03/08/2012

01:46 AM Suricata Bug #420: Suricata failed to start

OK. Thanks for the tip.
How how to increase the limit for the log files?
Presently these are the log files si... Lambert Osas

03/07/2012

06:22 PM Suricata Bug #420 (Closed): Suricata failed to start

Hi,
My Suricata has been running for months without issues. However, today when I attempt to start it, I get "Fil... Lambert Osas

01/28/2012

10:59 AM Suricata Support #406: How to make Suricata auto start at system starup

In IPS mode using NFQUEUE in Centos , I simply added the following lines to my /etc/rc.local file:
iptables -A FOR... Lambert Osas