Michael Tremer 5d04cfe7d5 suricata: Use highest bit to mark packets ...

We are using the netfilter MARK in IPsec & QoS and this
is causing conflicts.

Therefore, we use the highest bit in the IPS chain now
and clear it afterwards because we do not really care about
this after the packets have been passed through suricata.

Then, no other application has to worry about suricata.

Fixes: #12010
Signed-off-by: Arne Fitzenreiter <arne.fitzenreiter@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>

2019-03-01 17:56:48 +01:00

config

suricata: Use highest bit to mark packets

2019-03-01 17:56:48 +01:00

doc

Update translations

2019-01-06 07:03:08 +00:00

html

ids.cgi: Add language string for ignored hosts section.

2019-02-18 13:29:47 +01:00

langs

ids.cgi: Add language string for ignored hosts section.

2019-02-18 13:29:47 +01:00

lfs

Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next-suricata

2019-02-13 19:46:45 +01:00

src

suricata: Use highest bit to mark packets

2019-03-01 17:56:48 +01:00

tools

docker: Always agree to install all updates

2018-11-30 20:16:08 +00:00

.gitignore

gitignore: add img.xz to ignore list

2018-05-23 19:33:12 +02:00

.mailmap

git: Fix spelling of some contributors with umlauts

2018-11-27 10:23:46 +00:00

make.sh

Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next-suricata

2019-02-13 19:46:45 +01:00

Description

No description provided

101 MiB

Languages

Perl 70.4%

Shell 23%

C 4%

Python 0.6%

Makefile 0.5%

Other 1.4%