[Oisf-users] How to prevent Suricata from inspecting traffic already locally blocked by iptables

[Giuseppe Longo]

On 27/04/2018 00:59, Kevin Branch wrote:
> Giuseppe,
> 
> That made all the difference!  I thought this feature was available in 
> the latest stable Suricata, not only in the dev version.  Your syntax 
> works now:
> 

NFLOG feature is available also in stable version but looks like there
is a bug or something like that.
I will try 4.0.4 with NFLOG to see if I can reproduce your issue.

--
Giuseppe