The content of this topic has been archived on 31 Mar 2018. There are no obvious gaps in this topic, but there may still be some posts missing at the end.
Hello,
is there anything similar like iBlock or Guardian available for OpenWRT and Suricata (Snort)? It's basically a tool that checks Snort alerts and puts the IP adresses of attackers on a blacklist of the router. It uses iptables to block these IP adresses from accessing routers WAN adress. The IDS is running on it's own machine, but in same subnet like the router.
Regards,
CHERRY*
(Last edited by CHERRY* on 7 Oct 2014, 17:16)
You can use Snort and Snortsam (http://www.snortsam.net/) to do this...
Awesome! Do you think it would work with Suricata the same way? I can't set it up with my router, but I'm not very skilled. Is there someone who might give it a try and create an ipkg for ar71xx chipset (Router: TL-1043ND)? 
(Last edited by CHERRY* on 10 Oct 2014, 01:57)
The discussion might have continued from here.