suricata: Disable decoding for Teredo
authorMichael Tremer <michael.tremer@ipfire.org>
Thu, 28 Feb 2019 14:28:23 +0000 (14:28 +0000)
committerStefan Schantl <stefan.schantl@ipfire.org>
Fri, 1 Mar 2019 16:56:47 +0000 (17:56 +0100)
This decoder is not very accurate and Teredo has been
disabled in Windows by default. Nobody will use this.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
config/suricata/suricata.yaml

index 0131059..369ed2a 100644 (file)
@@ -665,7 +665,7 @@ decoder:
   # Teredo decoder is known to not be completely accurate
   # it will sometimes detect non-teredo as teredo.
   teredo:
-    enabled: true
+    enabled: false
 
 
 ##