Project

General

Profile

Actions
Copy link

Bug #7284

open
VJ VJ

rules: pass/drop <app proto> rules actions no longer apply to flow

Bug #7284: rules: pass/drop <app proto> rules actions no longer apply to flow

Added by Victor Julien over 1 year ago. Updated 6 months ago.

Status:
Assigned
Priority:
Normal
Assignee:
Victor Julien
Target version:
TBD
Affected Versions:
Effort:
Difficulty:
Label:

Description

A rule like pass tls any any -> any any no longer applies the pass to the flow in Suricata 7 and up. While the new behavior seems more correct, this is not documented.

VJ Updated by Victor Julien over 1 year ago Actions
Copy link
 #1

  • Description updated (diff)
  • Assignee changed from OISF Dev to Victor Julien

JF Updated by Juliana Fajardini Reichow over 1 year ago Actions
Copy link
 #2

flow:established is important to replicate this behavior.

VJ Updated by Victor Julien 6 months ago Actions
Copy link
 #4

  • Status changed from New to Assigned
Actions
Copy link

Also available in: PDF Atom