[Oisf-users] Exceptions to IPFW divert rule in FreeBSD

[Shirkdog]

Put the ssh rule before the divert rule. ipfw is evaluated in order.
---
Michael Shirk


On Thu, Sep 19, 2013 at 2:25 PM, Jose Carlos Álvarez
<jcalvarezvg at gmail.com> wrote:
> Hi all,
>
> I have made Suricata work in inline mode in FreeBSD 8, however I would
> like to add an exception to the divert rule:
>
> 110 divert 8000 ip from any to any via em0
>
> How can I exclude the SSH default port (22) from the divert rule above?
>
> Thank you.
> _______________________________________________
> Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
> Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/
> List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
> OISF: http://www.openinfosecfoundation.org/