[git.ipfire.org] IPFire 2.x development tree branch, master, updated. 76ba16aef070d5efd10325b8a34a134ec04dcaf2

[git.ipfire.org] IPFire 2.x development tree branch, master, updated. 76ba16aef070d5efd10325b8a34a134ec04dcaf2

[Michael Tremer]

[-- Attachment #1: Type: text/plain, Size: 1768 bytes --]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "IPFire 2.x development tree".

The branch, master has been updated
       via  76ba16aef070d5efd10325b8a34a134ec04dcaf2 (commit)
      from  ee13f80e5938cc4e16304810a356462647f46c3c (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 76ba16aef070d5efd10325b8a34a134ec04dcaf2
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date:   Tue Apr 9 10:51:18 2024 +0100

    suricata: Change midstream policy to "pass-flow"
    
    Pass packet isn't allowed here.
    
    Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>

-----------------------------------------------------------------------

Summary of changes:
 config/suricata/suricata.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

Difference in files:
diff --git a/config/suricata/suricata.yaml b/config/suricata/suricata.yaml
index dc142d690..041082b04 100644
--- a/config/suricata/suricata.yaml
+++ b/config/suricata/suricata.yaml
@@ -1118,7 +1118,7 @@ stream:
   #memcap-policy: ignore
   checksum-validation: yes      # reject incorrect csums
   midstream: true
-  midstream-policy: pass-packet
+  midstream-policy: pass-flow
   inline: auto                  # auto will use inline mode in IPS mode, yes or no set it statically
   bypass: yes                   # Bypass packets when stream.reassembly.depth is reached.
   reassembly:


hooks/post-receive
--
IPFire 2.x development tree