pfsense/pfsense-packages — pull request #652 by bmeeks8 (2014-04-28 22:03:14+00:00)
Title: Suricata 1.4.6 pkg v1.0 -- Update

Suricata 1.4.6 pkg v1.0 for pfSense
-----------------------------------------------

This update implements the "blocking" function for Suricata on pfSense. The same technique used for the Snort package is now available for the Suricata package. The IP address of offenders can now be automatically added to the packet filter firewall.

NOTE -- this implementation uses the same libpcap system and alias table as the Snort package and is thus not yet a true inline IPS solution. Additionally, because Suricata now shares the blocking alias table with Snort, DO NOT run both Suricata and Snort in blocking mode on the same machine! It is OK to run them both side-by-side on the same machine, but just make sure only one is configured for blocking operation.