opensourcemirror
/
ipfire-2.x
mirror of git://git.ipfire.org/ipfire-2.x.git
1
0
Fork 0
Code Issues Releases Wiki Activity

suricata: Change midstream policy to "pass-flow" 

Pass packet isn't allowed here.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
This commit is contained in:
Michael Tremer 2024-04-09 10:51:18 +01:00
parent ee13f80e59
commit 76ba16aef0
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
config/suricata/suricata.yaml
View File

@ -1118,7 +1118,7 @@ stream:
#memcap-policy: ignore
checksum-validation: yes # reject incorrect csums
midstream: true
midstream-policy: pass-packet
midstream-policy: pass-flow
inline: auto # auto will use inline mode in IPS mode, yes or no set it statically
bypass: yes # Bypass packets when stream.reassembly.depth is reached.
reassembly: