Hi everyone, I’m working on a Python script that monitors the /var/log/suricata/fast.log file to detect intrusion attempts. When an intrusion is detected, the script sends an email alert to the administrator. Once it’s complete, I’ll be happy to share it with the community! :slight_smile: I’m look…

INPUT is for traffic to IPF itself. FORWARD is for traffic through IPF to and from the LAN behind. And you don’t need -p all in your rules.

Blocking an IP Address via Console Command

hvacguy (Shaun HVAC) 19 August 2024 18:28 4

This may help