Whitelist IP address Blocked By Suricata

Started by spidysense, August 24, 2018, 07:39:00 AM

Previous topic - Next topic
I'm using Suricata IPS. It keeps blocking a single specific IP address with a rule. I would like to keep the rule in place just not block the single IP. What is the correct way to whitelist the IP address so it is not blocked with the Suricata IPS rule?

Yes I miss having this feature in the UI.
You can do this via exclusion config files but that means SSHing into the router and creating new file and loading it via suricata.

I just got that feature working, and am a bit surprised that it is so hard to whitelist.
+1 for that feature request.