OPNsense
  • Home
  • Help
  • Search
  • Login
  • Register

  • OPNsense Forum »
  • Archive »
  • 15.7 Legacy Series »
  • IDS Auto-block
« previous next »
  • Print
Pages: [1]

Author Topic: IDS Auto-block  (Read 3490 times)

smajor

  • Jr. Member
  • **
  • Posts: 74
  • Karma: 10
    • View Profile
IDS Auto-block
« on: July 31, 2015, 11:17:29 pm »
Is it (or will it be) possible to auto-block external addresses that are located by the IDS and Suricata rules?

The alerts are fantastic for tracking down a misbehaving host. It isn't always possible to 1) get to it right away and 2) monitor threats realtime.

Or does it already do this and I'm not seeing a setting or understanding that enabling will do this.

Thank you as always.
Logged

AdSchellevis

  • Administrator
  • Hero Member
  • *****
  • Posts: 850
  • Karma: 163
    • View Profile
Re: IDS Auto-block
« Reply #1 on: July 31, 2015, 11:22:48 pm »
Currently it's not possible, the ips part is still on the todo list and will come available later on.
Logged

  • Print
Pages: [1]
« previous next »
  • OPNsense Forum »
  • Archive »
  • 15.7 Legacy Series »
  • IDS Auto-block
 

OPNsense is an OSS project © Deciso B.V. 2015 - 2023 All rights reserved
  • SMF 2.0.19 | SMF © 2021, Simple Machines
    Privacy Policy
    | XHTML | RSS | WAP2