[Oisf-users] Running Suricata in Inline mode with Netfilter
manojrk at setsindia.net
Wed Dec 11 11:57:23 UTC 2019
I've been trying to run Suricata in Inline mode using this rule:
iptables -I forward -j NFQUEUE
While I've found no problems in getting Suricata to work, I simply
couldn't add any further rules in forward chain. As soon as the packets
hit nfqueue, it doesn't hit the rules that are added after it.
For Ex: If I add an icmp drop rule after nfqueue, ping packets are not
Am I doing this right? Any help is appreciated.
More information about the Oisf-users