Intrusion Detection and Prevention

block udp quic connections - collateral damage? + the end of firewalls

Started by guernseybunker

Replies: 0
Views: 2,275

December 03, 2022, 05:32:15 PM
by guernseybunker

Block the activity not the entire IP from LAN

Started by gilberto.ferreira41

Replies: 0
Views: 329

April 10, 2026, 07:20:16 PM
by gilberto.ferreira41

Block suricata trigged hosts ?

Started by Helle

Replies: 2
Views: 4,217

September 29, 2020, 02:08:53 PM
by Helle

Block non HTTP/S traffic

Started by rafaelbs

Replies: 2
Views: 10,046

September 16, 2025, 04:42:49 PM
by meyergru

block IPs via Maltrail's output

Started by Ebeneezer

Replies: 0
Views: 2,840

June 11, 2020, 10:58:27 AM
by Ebeneezer

Block connection to IPs which are not in DNS cache

Started by CJ

Replies: 5
Views: 7,099

December 26, 2021, 08:19:55 PM
by CJ

Block Access Point Spy Traffic

Started by Brainlag

Replies: 2
Views: 4,195

July 02, 2021, 10:28:59 AM
by ToFu

Better IDS or a deny rule in firewall?

Started by bazbaz

Replies: 2
Views: 3,999

November 04, 2023, 01:49:51 PM
by OrwellianDenigrate

Backup and recover IDS rules

Started by dcol

Replies: 2
Views: 12,009

November 22, 2017, 09:05:55 PM
by dcol

B-Router

Started by Blackdragon83

Replies: 0
Views: 2,191

September 20, 2024, 07:11:53 AM
by Blackdragon83

Automated update of SSL Fingerprint blocking rules possible?

Started by abij

Replies: 0
Views: 5,274

January 13, 2021, 04:42:12 AM
by abij

Are there any configuration requirements to properly test with pcap traffic?

Started by marcus

Replies: 2
Views: 8,555

September 30, 2025, 02:24:17 AM
by someone

Are alerts with *.windowsupdate.com in the URL really a threat?

Started by Retired Miner

Replies: 2
Views: 4,736

March 08, 2024, 06:43:01 PM
by Retired Miner

Apu or Proxmox

Started by babou29

Replies: 3
Views: 7,998

March 30, 2020, 08:01:20 PM
by rc222

Apply policy from the commandline

Started by Deal11

Replies: 0
Views: 2,154

February 11, 2022, 10:05:58 AM
by Deal11

Apply policy from the commandline

Started by jphylips

Replies: 2
Views: 4,426

November 14, 2021, 05:18:12 PM
by jphylips

Anyone know how to configure monit to send alerts after IDS rule is updated.

Started by Thongtuk05

Replies: 0
Views: 2,255

August 10, 2022, 08:20:58 AM
by Thongtuk05

AMD zen 5 Hyperscan AVX-512 Suricata Throughput

Started by seed

Replies: 2
Views: 5,092

May 27, 2024, 10:42:17 AM
by damien92220

Alot of SSH Traffic

Started by spetrillo

Replies: 4
Views: 3,761

March 23, 2026, 01:57:18 PM
by PaulCYost

Allow a Block Rule to a set of IPs

Started by ArminF

Replies: 0
Views: 3,494

March 16, 2021, 10:56:29 AM
by ArminF