mirror of
https://github.com/vincentmli/bpfire.git
synced 2026-04-14 21:12:59 +02:00
suricata: Set midstream-policy to pass-packet
Set this value to the same as the exception-policy to keep in sync and hopefully have the same behaviour. In case this option is not set an ugly message about a not correctly set value will be logged to syslog during startup. Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org> Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
This commit is contained in:
committed by
Michael Tremer
parent
64e057aaa5
commit
76a4518091
@@ -1117,7 +1117,7 @@ stream:
|
||||
#memcap-policy: ignore
|
||||
checksum-validation: yes # reject incorrect csums
|
||||
#midstream: false
|
||||
#midstream-policy: ignore
|
||||
midstream-policy: pass-packet
|
||||
inline: auto # auto will use inline mode in IPS mode, yes or no set it statically
|
||||
bypass: yes # Bypass packets when stream.reassembly.depth is reached.
|
||||
reassembly:
|
||||
|
||||
Reference in New Issue
Block a user