webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-27 19:23:24 +02:00
Code Issues Packages Projects Releases Wiki Activity

suricata: Change midstream policy to "pass-flow"

Browse Source 
Pass packet isn't allowed here.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
This commit is contained in:
Michael Tremer
2024-04-09 10:51:18 +01:00
parent ee13f80e59
commit 76ba16aef0
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
config/suricata/suricata.yaml
View File

@@ -1118,7 +1118,7 @@ stream:
#memcap-policy: ignore #memcap-policy: ignore
checksum-validation: yes # reject incorrect csums checksum-validation: yes # reject incorrect csums
midstream: true midstream: true
midstream-policy: pass-packet midstream-policy: pass-flow
inline: auto # auto will use inline mode in IPS mode, yes or no set it statically inline: auto # auto will use inline mode in IPS mode, yes or no set it statically
bypass: yes # Bypass packets when stream.reassembly.depth is reached. bypass: yes # Bypass packets when stream.reassembly.depth is reached.
reassembly: reassembly: