From: Michael Tremer <michael.tremer@ipfire.org>
Date: Tue, 9 Apr 2024 09:51:18 +0000 (+0100)
Subject: suricata: Change midstream policy to "pass-flow"
X-Git-Url: http://git.ipfire.org/?p=people%2Fpmueller%2Fipfire-2.x.git;a=commitdiff_plain;h=HEAD

suricata: Change midstream policy to "pass-flow"

Pass packet isn't allowed here.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---

diff --git a/config/suricata/suricata.yaml b/config/suricata/suricata.yaml
index dc142d690..041082b04 100644
--- a/config/suricata/suricata.yaml
+++ b/config/suricata/suricata.yaml
@@ -1118,7 +1118,7 @@ stream:
   #memcap-policy: ignore
   checksum-validation: yes      # reject incorrect csums
   midstream: true
-  midstream-policy: pass-packet
+  midstream-policy: pass-flow
   inline: auto                  # auto will use inline mode in IPS mode, yes or no set it statically
   bypass: yes                   # Bypass packets when stream.reassembly.depth is reached.
   reassembly: