[Discussion] Suricata as Inline Mode

[Will Metcalf]

Yes... You can. From doc/INSTALL:

   #if you would like to build suricata on FreeBSD with IPS
capabilities with IPFW via --enable-ipfw.
    You must do the following to enable ipfw and divert socket support
before starting the engine
    with -d.

    #edit /etc/rc.conf and add or modify the following lines
    firewall_enable="YES"
    firewall_type="open"

    #edit /boot/loader.conf and add or modify the following lines
    ipfw_load="YES"
    ipfw_nat_load="YES"
    ipdivert_load="YES"
    dummynet_load="YES"
    libalias_load="YES"

Regards,

Will

On Thu, May 20, 2010 at 3:10 PM, Miler Alberto Garcia Villanueva
<phl4kx at gmail.com> wrote:
> Hi all, Can I use Suricata like IPS (inline mode) with FreeBSD 8.0 IPFW?
>
> Thanks a lot
> _______________________________________________
> Discussion mailing list
> Discussion at openinfosecfoundation.org
> http://lists.openinfosecfoundation.org/mailman/listinfo/discussion
>