Michael Tremer 5d04cfe7d5 suricata: Use highest bit to mark packets ...

We are using the netfilter MARK in IPsec & QoS and this
is causing conflicts.

Therefore, we use the highest bit in the IPS chain now
and clear it afterwards because we do not really care about
this after the packets have been passed through suricata.

Then, no other application has to worry about suricata.

Fixes: #12010
Signed-off-by: Arne Fitzenreiter <arne.fitzenreiter@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>

2019-03-01 17:56:48 +01:00

..

br2684ctl

br2684ctl...

2007-10-08 18:34:12 +00:00

fake-environ

fake-environ: Fix typos

2017-05-18 11:50:15 +01:00

hwdata

hwdata: update databases

2016-12-22 21:53:39 +01:00

initscripts

suricata: Use highest bit to mark packets

2019-03-01 17:56:48 +01:00

installer

installer: Intialize part_boot_efi_idx

2018-12-11 20:43:24 +00:00

libsmooth

installer: Enable new partitioning code to be run in unattended mode

2014-10-11 18:59:31 +02:00

misc-progs

suricatactrl: Add "cron" command

2018-09-26 13:54:14 +02:00

pakfire

pakfire: Remove any reference to counter.py

2018-08-27 07:29:19 +01:00

paks

haproxy: Create/restore backup when package is installed/uninstalled

2018-12-10 00:36:04 +00:00

patches

Merge remote-tracking branch 'origin/master' into next

2019-01-23 21:19:01 +01:00

ppp

New IP-address of 'ping.ipfire.org'

2016-02-08 01:51:26 +00:00

scripts

update-ids-ruleset: Lock and Unlock the IDS page during runtime

2019-02-07 08:06:49 +01:00

setup

aws: Create "setup" user to run setup

2018-07-10 18:40:06 +01:00

squid-accounting

Update Turkish translation and add translation for WIO and squid accounting

2018-04-17 09:47:48 +01:00

wio

Update Turkish translation and add translation for WIO and squid accounting

2018-04-17 09:47:48 +01:00

stripper

Move toolchain from /tools to /tools_${arch}

2017-11-23 15:57:28 +00:00