[Oisf-users] How to prevent Suricata from inspecting traffic already locally blocked by iptables

Giuseppe Longo lists at glongo.it
Fri Apr 27 06:53:56 UTC 2018

On 27/04/2018 00:59, Kevin Branch wrote:
> Giuseppe,
> That made all the difference!  I thought this feature was available in 
> the latest stable Suricata, not only in the dev version.  Your syntax 
> works now:

NFLOG feature is available also in stable version but looks like there
is a bug or something like that.
I will try 4.0.4 with NFLOG to see if I can reproduce your issue.


More information about the Oisf-users mailing list