reject: don't respond to tunnel packets

diff --git a/src/respond-reject.c b/src/respond-reject.c
index 8212396a9d1abec5b11a8f00cc77e96a34118755..6f054fc8ae6a3ae8eee46c82e715bd9b7e683a8f 100644 (file)
--- a/src/respond-reject.c
+++ b/src/respond-reject.c
@@ -62,6 +62,10 @@ static TmEcode RespondRejectFunc(ThreadVars *tv, Packet *p, void *data)
         return TM_ECODE_OK;
     }
 
+    if (IS_TUNNEL_PKT(p)) {
+        return TM_ECODE_OK;
+    }
+
     if (PKT_IS_IPV4(p)) {
         if (PKT_IS_TCP(p)) {
             (void)RejectSendIPv4TCP(tv, p, data);