OPNsense Forum

English Forums => Intrusion Detection and Prevention => Topic started by: spidysense on August 24, 2018, 07:39:00 am

Title: Whitelist IP address Blocked By Suricata
Post by: spidysense on August 24, 2018, 07:39:00 am

I'm using Suricata IPS. It keeps blocking a single specific IP address with a rule. I would like to keep the rule in place just not block the single IP. What is the correct way to whitelist the IP address so it is not blocked with the Suricata IPS rule?

Title: Re: Whitelist IP address Blocked By Suricata
Post by: Nekromantik on September 05, 2018, 12:26:32 am

Yes I miss having this feature in the UI.
You can do this via exclusion config files but that means SSHing into the router and creating new file and loading it via suricata.

Title: Re: Whitelist IP address Blocked By Suricata
Post by: jds on October 12, 2018, 12:50:11 am

I just got that feature working, and am a bit surprised that it is so hard to whitelist.
+1 for that feature request.