geevo/snort3 repository overview

Intended to run on ESF Gateways:

1. Enable the container orchestrator in ESF.
2. Create a new container instance (e.g., Snort3-IPS).
3. Set the image name to geevo/snort3 (for ARM).
4. Enable Privileged Mode.
5. Clear all port entries.
6. Set the Entrypoint Override to /usr/local/bin/snort, -c, /usr/local/etc/snort/snort.lua, -Q, -i, eth1 (for interface eth1 WAN).
7. The container will run Snort3 in IPS mode, actively analyzing packets and dropping known threats based on default Snort3 rules.