1
2

# This rule drops all tcp traffic on User Ports from the internet to your local network
drop tcp $EXTERNAL_NET any -> $HOME_NET [1024:65535] (msg:"Block User Ports"; classtype:bad-unknown; sid:9900001; rev:1;)

1
2
3
4
5
6
7
8

<?xml version="1.0"?>
<ruleset documentation_url="http://docs.opnsense.org/">
    <location url="https://www.mydomain.com/suricata/" prefix="Custom"/>
    <files>
        <file description="custom rules">Custom.rules</file>
        <file description="Custom" url="inline::rules/custom.rules">Custom.rules</file>
    </files>
</ruleset>