[Oisf-users] equivalent of react?

[CEPLEANU, ADRIAN]

I know that using action reject sends a reset (for TCP) to kill the session.
For http, is there a suricata equivalent to snort's react, allowing a page to be sent to the client indicative of the fact that the site is blocked?

thanks

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20190117/4b1ba3d0/attachment.html>