From 76a451809154ae1aa338e2ec38b820283a68b788 Mon Sep 17 00:00:00 2001 From: Stefan Schantl Date: Fri, 5 Apr 2024 21:26:40 +0200 Subject: [PATCH] suricata: Set midstream-policy to pass-packet Set this value to the same as the exception-policy to keep in sync and hopefully have the same behaviour. In case this option is not set an ugly message about a not correctly set value will be logged to syslog during startup. Signed-off-by: Stefan Schantl Signed-off-by: Michael Tremer --- config/suricata/suricata.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/suricata/suricata.yaml b/config/suricata/suricata.yaml index dd6a42e91..4c948bddd 100644 --- a/config/suricata/suricata.yaml +++ b/config/suricata/suricata.yaml @@ -1117,7 +1117,7 @@ stream: #memcap-policy: ignore checksum-validation: yes # reject incorrect csums #midstream: false - #midstream-policy: ignore + midstream-policy: pass-packet inline: auto # auto will use inline mode in IPS mode, yes or no set it statically bypass: yes # Bypass packets when stream.reassembly.depth is reached. reassembly: -- 2.39.2