[Oisf-users] equivalent of react?

CEPLEANU, ADRIAN ac1471 at att.com
Thu Jan 17 16:33:53 UTC 2019

I know that using action reject sends a reset (for TCP) to kill the session.
For http, is there a suricata equivalent to snort's react, allowing a page to be sent to the client indicative of the fact that the site is blocked?


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20190117/4b1ba3d0/attachment.html>

More information about the Oisf-users mailing list