From 604aa65c80f0395afb66ffba94de618a87449a49 Mon Sep 17 00:00:00 2001
From: Victor Julien <victor@inliniac.net>
Date: Fri, 12 Jun 2020 15:51:30 +0200
Subject: [PATCH] reject: don't respond to tunnel packets

---
 src/respond-reject.c | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/respond-reject.c b/src/respond-reject.c
index 8212396a9d..6f054fc8ae 100644
--- a/src/respond-reject.c
+++ b/src/respond-reject.c
@@ -62,6 +62,10 @@ static TmEcode RespondRejectFunc(ThreadVars *tv, Packet *p, void *data)
         return TM_ECODE_OK;
     }
 
+    if (IS_TUNNEL_PKT(p)) {
+        return TM_ECODE_OK;
+    }
+
     if (PKT_IS_IPV4(p)) {
         if (PKT_IS_TCP(p)) {
             (void)RejectSendIPv4TCP(tv, p, data);
-- 
2.47.2