Actions
Bug #6109
closed
JF
JF
exception/policy: reject changes flow action in IDS mode
Bug #6109:
exception/policy: reject changes flow action in IDS mode
Description
We currently have the same behavior in case of 'EXCEPTION_POLICY_REJECT' regardless of being in
IDS or IPS mode.
This means that at least the 'flow.action' is changed to drop when we hit an exception policy in IDS mode.
The bug can mean more than that. Investigation is needed.
JF Updated by Juliana Fajardini Reichow almost 3 years ago
- Description updated (diff)
JF Updated by Juliana Fajardini Reichow almost 3 years ago
SV test for it: https://github.com/OISF/suricata-verify/pull/1229
JF Updated by Juliana Fajardini Reichow almost 3 years ago
- Assignee changed from OISF Dev to Juliana Fajardini Reichow
- Label Needs backport to 6.0 added
JF Updated by Juliana Fajardini Reichow almost 3 years ago
PR for consideration: https://github.com/OISF/suricata/pull/8970
JF Updated by Juliana Fajardini Reichow almost 3 years ago
- Status changed from New to Closed
- Target version changed from 8.0.0-beta1 to 7.0.0-rc2
- Affected Versions 7.0.0-rc2 added
- Affected Versions deleted (
7.0.0-rc1, 6.0.12)
Merged PR: https://github.com/OISF/suricata/pull/8970
JF Updated by Juliana Fajardini Reichow almost 3 years ago
- Affected Versions 7.0.0-rc1, 6.0.11, 6.0.12 added
- Affected Versions deleted (
7.0.0-rc2)
JF Updated by Juliana Fajardini Reichow almost 3 years ago
- Status changed from Closed to Resolved
OT Updated by OISF Ticketbot almost 3 years ago
- Subtask #6140 added
OT Updated by OISF Ticketbot almost 3 years ago
- Label deleted (
Needs backport to 6.0)
JF Updated by Juliana Fajardini Reichow almost 3 years ago
- Subtask #6141 added
VJ Updated by Victor Julien almost 3 years ago
- Status changed from Resolved to Closed
Actions