Differences

This shows you the differences between two versions of the page.

--- pfsense:suricata:custom_rules [2020/03/01 19:40] – peter
+++ pfsense:suricata:custom_rules [2021/01/21 10:21] (current) – removed peter
@@ Line 1: / Line 1: @@
-====== PFSense - Suricata - Custom Rules ======
-To create custom passlist rules go to the RULES tab for the interface, choose CUSTOM RULES in the Category drop-down and then type in the rules you need.
-There are plenty of examples on the web.
-You can add restrictions by protocol, port and source or destination IP address.
-<WRAP important>
-WARNING:  Just really think about what your rule is allowing when creating it.
-</WRAP>
-<code>
-pass ip 1.2.3.4 any <> any any (msg:"pass all traffic from/to 1.2.3.4"; sid:100000;)
-pass ip 192.168.1.22/32 80 <- any any (msg: "Pass List Entry - allow all traffic to/from 192.168.1.22/32"; sid:1000006;
-</code>
-----
-===== References =====
-https://www.cnblogs.com/lsgxeva/p/11392627.html