From mboxrd@z Thu Jan  1 00:00:00 1970
From: Stefan Schantl <stefan.schantl@ipfire.org>
To: development@lists.ipfire.org
Subject: Re: [PATCH 1/3] Suricata: detect TLS traffic on IMAPS/POP3S/SSMTP
 ports as, well
Date: Thu, 07 Feb 2019 21:33:45 +0100
Message-ID: <f85232e63fc5a47d94df14476f525e1017c38213.camel@ipfire.org>
In-Reply-To: <a90a64f1-cbfe-cd0b-af99-1e4b5989a4e0@ipfire.org>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============1185731463167971239=="
List-Id: <development.lists.ipfire.org>

--===============1185731463167971239==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit

Thanks for the patch - Merged.

Best regards,

-Stefan
> Partially fixes #11808
> 
> Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org>
> Cc: Stefan Schantl <stefan.schantl(a)ipfire.org>
> ---
>  config/suricata/suricata.yaml | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
> 
> diff --git a/config/suricata/suricata.yaml
> b/config/suricata/suricata.yaml
> index 48035a67e..dd7e53584 100644
> --- a/config/suricata/suricata.yaml
> +++ b/config/suricata/suricata.yaml
> @@ -140,7 +140,7 @@ app-layer:
>      tls:
>        enabled: yes
>        detection-ports:
> -        dp: 443
> +        dp: "[443,465,993,995]"
>  
>        # Completely stop processing TLS/SSL session after the
> handshake
>        # completed. If bypass is enabled this will also trigger flow

--===============1185731463167971239==
Content-Type: application/pgp-signature
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="signature.asc"
MIME-Version: 1.0
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--===============1185731463167971239==--