/* save in the flow that we scanned this direction... */
FlowSetIPOnlyFlag(pflow, p->flowflags & FLOW_PKT_TOSERVER ? 1 : 0);
}
- /* If we have a drop from IP only module,
- * we will drop the rest of the flow packets
- * This will apply only to inline/IPS */
- if (pflow->flags & FLOW_ACTION_DROP) {
- PACKET_DROP(p);
- }
} else { /* p->flags & PKT_HAS_FLOW */
/* no flow */
return;
}
+ /* if flow is set to drop, we enforce that here */
+ if (p->flow->flags & FLOW_ACTION_DROP) {
+ PACKET_DROP(p);
+ SCReturn;
+ }
+
/* see if the packet matches one or more of the sigs */
(void)DetectRun(tv, de_ctx, det_ctx, p);
}