snort2pf

block "nasty" hosts with pf(4) based on Snort's rules

WWW CVSWeb GITHub
  1. Package version
    snort2pf-4.5p7
  2. Maintainer
    The OpenBSD ports mailing-list

Snort2Pf is a small Perl daemon which greps Snort's alertfile and blocks
the "naughty" hosts for a given amount of time using pfctl.

+-----------------------------------------------------------------------
| Running ${PKGSTEM} on OpenBSD
+-----------------------------------------------------------------------

Adjusting pf.conf(5)
====================
In order to make use of snort2pf, one must add an anchor for in your pf.conf(5)
file, like:

anchor snort2pf

Or you can use a table, which is allows for more flexibility:

block in quick from <snort2pf>

  • net/p5-Net-Patricia