[Oisf-users] Whitelist IP or Countries

Peter Manev petermanev at gmail.com
Thu Sep 11 19:51:00 UTC 2014



> On 11 sep 2014, at 18:42, "Mesra.net CEO" <admin at mesra.my> wrote:
> 
> Dear All,
>  
> Is it possible to whitelist specific of IP or based on countries with Suricata rules ? For example I don’t want Suricata to ‘reject’ any access from the list of IP’s
>  
> Please help. Thank you so much.
>  
>  
>  


Hi,
As far as countries go - you can use geoip based rules - 
https://redmine.openinfosecfoundation.org/projects/suricata/wiki/GeoIP

Thanks

>  
> _______________________________________________
> Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
> Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/
> List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
> OISF: http://www.openinfosecfoundation.org/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20140911/a748d94e/attachment-0002.html>


More information about the Oisf-users mailing list