Firewall rule & add to alias

[andrei.butcu@gmail.com]

Dear all,
I want to creat the following rule:
If any IP try to hit 3389 port of my public IP firewall address, then:
 - block &
 - add the source IP to a Alias list "Block list"

I already configured the manual "Block list" and the rule to block any traffic from "Block list". I need to populate the "Block list" with anyone who is tryinng to hit the 3389 port of the WAN.

I don't see in the interface a option like "...and add the source IP Ip to alias list". Can someone help?

[Patrick M. Hausen]

There is to my knowledge no function in OPNsense that does that. You might want to look into Crowdsec.

[andrei.butcu@gmail.com]

There is to my knowledge no function in OPNsense that does that. You might want to look into Crowdsec.

Thank you. I'll stop the research then... .