I noticed the following error on the logs :
[ERRCODE: SC_ERR_INVALID_YAML_CONF_ENTRY(139)] - failed to parse address var “DN S_SERVERS” with value “[ 126.96.36.199 188.8.131.52]”. Please check it’s syntax
It turns out tha there is missing comma on this file : /var/ipfire/suricata/suricata-dns-servers.yaml
Fixed it manually but it seems this file is autogenerated ?