This is somewhat related to a more specific question regarding the IPS (see here), however more questions on the IPS arise.
Can anyone point me towards a more detailed docu on the IPS used by IPfire?
My IPS does this sometimes:
What is happening during this “Scanned”-spike? And, what does “Bypassed” and “Scanned” mean? What is the FW doing here?
Where is this documented in detail?
Thanks in advance