<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div style="-webkit-text-size-adjust: auto;"><br></div><div style="-webkit-text-size-adjust: auto;"><br>On 11 sep 2014, at 18:42, "<a href="http://Mesra.net">Mesra.net</a> CEO" <<a href="mailto:admin@mesra.my">admin@mesra.my</a>> wrote:<br><br></div><blockquote type="cite" style="-webkit-text-size-adjust: auto;"><div>
<div dir="ltr">
<div style="FONT-SIZE: 12pt; FONT-FAMILY: 'Calibri'; COLOR: #000000">
<div>Dear All,</div>
<div> </div>
<div>Is it possible to whitelist specific of IP or based on countries with
Suricata rules ? For example I don’t want Suricata to ‘reject’ any access from
the list of IP’s</div>
<div> </div>
<div>Please help. Thank you so much.</div>
<div> </div>
<div> </div>
<div> </div></div></div></div></blockquote><div style="-webkit-text-size-adjust: auto;"><br></div><div style="-webkit-text-size-adjust: auto;"><br></div><div style="-webkit-text-size-adjust: auto;">Hi,</div><div style="-webkit-text-size-adjust: auto;">As far as countries go - you can use geoip based rules - </div><div><span style="-webkit-text-size-adjust: auto;"><a href="https://redmine.openinfosecfoundation.org/projects/suricata/wiki/GeoIP">https://redmine.openinfosecfoundation.org/projects/suricata/wiki/GeoIP</a></span></div><div><span style="-webkit-text-size-adjust: auto;"><br></span></div><div style="-webkit-text-size-adjust: auto;">Thanks</div><br><blockquote type="cite" style="-webkit-text-size-adjust: auto;"><div><div dir="ltr"><div style="FONT-SIZE: 12pt; FONT-FAMILY: 'Calibri'; COLOR: #000000">
<div> </div></div></div>
</div></blockquote><blockquote type="cite" style="-webkit-text-size-adjust: auto;"><div><span>_______________________________________________</span><br><span>Suricata IDS Users mailing list: <a href="mailto:oisf-users@openinfosecfoundation.org">oisf-users@openinfosecfoundation.org</a></span><br><span>Site: <a href="http://suricata-ids.org">http://suricata-ids.org</a> | Support: <a href="http://suricata-ids.org/support/">http://suricata-ids.org/support/</a></span><br><span>List: <a href="https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users">https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users</a></span><br><span>OISF: <a href="http://www.openinfosecfoundation.org/">http://www.openinfosecfoundation.org/</a></span></div></blockquote></body></html>