From 76ba16aef070d5efd10325b8a34a134ec04dcaf2 Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Tue, 9 Apr 2024 10:51:18 +0100 Subject: [PATCH] suricata: Change midstream policy to "pass-flow" Pass packet isn't allowed here. Signed-off-by: Michael Tremer --- config/suricata/suricata.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/suricata/suricata.yaml b/config/suricata/suricata.yaml index dc142d690..041082b04 100644 --- a/config/suricata/suricata.yaml +++ b/config/suricata/suricata.yaml @@ -1118,7 +1118,7 @@ stream: #memcap-policy: ignore checksum-validation: yes # reject incorrect csums midstream: true - midstream-policy: pass-packet + midstream-policy: pass-flow inline: auto # auto will use inline mode in IPS mode, yes or no set it statically bypass: yes # Bypass packets when stream.reassembly.depth is reached. reassembly: -- 2.39.2