From: Victor Julien Date: Fri, 31 Oct 2025 15:20:17 +0000 (+0100) Subject: doc/userguide: document reject-both expection policy X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=refs%2Fpull%2F14233%2Fhead;p=thirdparty%2Fsuricata.git doc/userguide: document reject-both expection policy Ticket: #5974. --- diff --git a/doc/userguide/configuration/exception-policies.rst b/doc/userguide/configuration/exception-policies.rst index 588323d1cb..f051988f50 100644 --- a/doc/userguide/configuration/exception-policies.rst +++ b/doc/userguide/configuration/exception-policies.rst @@ -118,6 +118,8 @@ are: - ``drop-packet``: drop the packet. - ``reject``: same as ``drop-flow``, but reject the current packet as well (see ``reject`` action in Rule's :ref:`actions`). +- ``reject-both``: same as ``reject``, except that it sends reject packets to both the + source and destination addresses. - ``bypass``: bypass the flow. No further decoding or parsing is done. :ref:`Bypass ` may be offloaded. - ``pass-flow``: disable payload and packet detection; stream reassembly, @@ -153,7 +155,7 @@ midstream pick-ups enabled or not and the various exception policy values: * - Drop-packet - Not valid.* - Not valid.* - * - Reject + * - Reject / Reject-both - Not valid.* - Session not tracked, flow REJECTED. * - Pass-flow @@ -192,7 +194,7 @@ whole flow. * - Drop-packet - Not valid.* - Not valid.* - * - Reject + * - Reject / Reject-both - Not valid.* - Session not tracked, flow DROPPED and REJECTED. * - Pass-flow