Suricata

We must update the midstream portion to clearly state which values are possible and why.
Might need to add some sort of table with possibilities.

It is also a good idea to mention how different policies can have an impact on one another,
leading to unexpected drop cases, for instance.