OPNsense Forum

English Forums => Intrusion Detection and Prevention => Topic started by: Alphakilo on March 23, 2018, 05:23:45 pm

Title: Different rulesets per network
Post by: Alphakilo on March 23, 2018, 05:23:45 pm

Hello,

I'm wondering if it is possible to apply different rulesets for different networks.
For instance: Drop P2P for one VLAN, while allowing it for a different.

Cheers

Title: Re: Different rulesets per network
Post by: elektroinside on March 23, 2018, 06:00:18 pm

You probably can (the options are there), with custom rules. Check out "source and destination" here: https://redmine.openinfosecfoundation.org/projects/suricata/wiki/Suricata_Rules

And how to create custom rules here: https://forum.opnsense.org/index.php?topic=7209.0

Please note that I have never tried this, don't actually know if it works.