suricata: Change midstream policy to "pass-flow"

Pass packet isn't allowed here.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

diff --git a/config/suricata/suricata.yaml b/config/suricata/suricata.yaml
index dc142d6906d80495b157a4d8aefa17c5027d1768..041082b040001f8dae4b17c38e517e7056d78682 100644 (file)
--- a/config/suricata/suricata.yaml
+++ b/config/suricata/suricata.yaml
@@ -1118,7 +1118,7 @@ stream:
   #memcap-policy: ignore
   checksum-validation: yes      # reject incorrect csums
   midstream: true
-  midstream-policy: pass-packet
+  midstream-policy: pass-flow
   inline: auto                  # auto will use inline mode in IPS mode, yes or no set it statically
   bypass: yes                   # Bypass packets when stream.reassembly.depth is reached.
   reassembly: