Prelude + firewall (firestarter): running them in sequence

[ahubu]

Hello people,

I was messing around to set up a Intrusion Detection System. I finally configured Prelude to do the job, using mysql as a backend and piwi as a frontend. Now, it happily monitors all dirty traffic. Great

The problem is that I want to run a firewall (I have firestarter (iptables) running), but I want to let it run before prelude, so prelude will only catch the traffic that has made it through the firewall. It should be possible. Now, when I run firestarter, no more hits are generated: does this mean that Prelude also blocks traffic?

So does anybody know what to do to accomplish that?