You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I have nProbe pro and ntopng pro running in IPS mode. Initially, nProbe was enforcing the L7 policies I had created, but now is not. ntopng can see the flows (using ZMQ interface), but ignores the enforcement (traffic is allowed through).
My setup is as follows:
Debian 11
1 x LAN and 1 x WAN interface (not bridged)
iptables forwarding all traffic to NFQUEUE: iptables -A FORWARD -j NFQUEUE --queue-num 0 --queue-bypass
zmq on tcp 1234
zmq publish events on tcp 5557
The text was updated successfully, but these errors were encountered:
you specified "not bridged", does this mean you are not setting up a bridge with the LAN and WAN interfaces? Are you using the box as a router (ip forwarding)?
what did you do to break the old working configuration? Did you update the software? From which to which version? Did you also change something in the configuration?
Thank you
I have nProbe pro and ntopng pro running in IPS mode. Initially, nProbe was enforcing the L7 policies I had created, but now is not. ntopng can see the flows (using ZMQ interface), but ignores the enforcement (traffic is allowed through).
My setup is as follows:
Debian 11
1 x LAN and 1 x WAN interface (not bridged)
iptables forwarding all traffic to NFQUEUE: iptables -A FORWARD -j NFQUEUE --queue-num 0 --queue-bypass
zmq on tcp 1234
zmq publish events on tcp 5557
The text was updated successfully, but these errors were encountered: