From: Stefan Schantl Date: Fri, 5 Apr 2024 19:26:40 +0000 (+0200) Subject: suricata: Set midstream-policy to pass-packet X-Git-Tag: v2.29-core185~5 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=76a451809154ae1aa338e2ec38b820283a68b788;p=ipfire-2.x.git suricata: Set midstream-policy to pass-packet Set this value to the same as the exception-policy to keep in sync and hopefully have the same behaviour. In case this option is not set an ugly message about a not correctly set value will be logged to syslog during startup. Signed-off-by: Stefan Schantl Signed-off-by: Michael Tremer --- diff --git a/config/suricata/suricata.yaml b/config/suricata/suricata.yaml index dd6a42e915..4c948bddd5 100644 --- a/config/suricata/suricata.yaml +++ b/config/suricata/suricata.yaml @@ -1117,7 +1117,7 @@ stream: #memcap-policy: ignore checksum-validation: yes # reject incorrect csums #midstream: false - #midstream-policy: ignore + midstream-policy: pass-packet inline: auto # auto will use inline mode in IPS mode, yes or no set it statically bypass: yes # Bypass packets when stream.reassembly.depth is reached. reassembly: