Actions
Bug #6109
closedexception/policy: reject changes flow action in IDS mode
Description
We currently have the same behavior in case of 'EXCEPTION_POLICY_REJECT' regardless of being in
IDS or IPS mode.
This means that at least the 'flow.action' is changed to drop when we hit an exception policy in IDS mode.
The bug can mean more than that. Investigation is needed.
Updated by Juliana Fajardini Reichow 11 months ago
SV test for it: https://github.com/OISF/suricata-verify/pull/1229
Updated by Juliana Fajardini Reichow 11 months ago
- Assignee changed from OISF Dev to Juliana Fajardini Reichow
- Label Needs backport to 6.0 added
Updated by Juliana Fajardini Reichow 11 months ago
PR for consideration: https://github.com/OISF/suricata/pull/8970
Updated by Juliana Fajardini Reichow 10 months ago
- Status changed from New to Closed
- Target version changed from 8.0.0-beta1 to 7.0.0-rc2
- Affected Versions 7.0.0-rc2 added
- Affected Versions deleted (
7.0.0-rc1, 6.0.12)
Merged PR: https://github.com/OISF/suricata/pull/8970
Updated by Juliana Fajardini Reichow 10 months ago
- Affected Versions 7.0.0-rc1, 6.0.11, 6.0.12 added
- Affected Versions deleted (
7.0.0-rc2)
Updated by Juliana Fajardini Reichow 10 months ago
- Status changed from Closed to Resolved
Actions