Project

General

Profile

Actions
Copy link

Feature #7481

closed
VJ VJ

rules/actions: explicit action scopes

Feature #7481: rules/actions: explicit action scopes

Added by Victor Julien over 1 year ago. Updated about 1 year ago.

Status:
Closed
Priority:
High
Assignee:
Victor Julien
Target version:
8.0.0-beta1
Effort:
Difficulty:
Label:

Description

Allow setting the scope of the applied action (packet or flow currently) explicitly in the rule.

Suggesting a syntax:

(drop|pass)[:(packet|flow)]

pass:flow tls any any -> any any (tls.sni; content:"suricata.io"; ... )

Related issues 1 (0 open — 1 closed)

Blocks Suricata - Story #7164: usecase: improve firewall usecaseClosedVictor JulienActions

VJ Updated by Victor Julien over 1 year ago Actions
Copy link
 #1

  • Target version changed from TBD to 8.0.0-beta1

VJ Updated by Victor Julien over 1 year ago Actions
Copy link
 #2

  • Blocks Story #7164: usecase: improve firewall usecase added

VJ Updated by Victor Julien over 1 year ago Actions
Copy link
 #3

  • Description updated (diff)

VJ Updated by Victor Julien about 1 year ago Actions
Copy link
 #4

  • Priority changed from Normal to High

VJ Updated by Victor Julien about 1 year ago Actions
Copy link
 #5

  • Status changed from New to In Progress
  • Assignee changed from OISF Dev to Victor Julien

VJ Updated by Victor Julien about 1 year ago Actions
Copy link
 #6

  • Status changed from In Progress to In Review

SB Updated by Shivani Bhardwaj about 1 year ago Actions
Copy link
 #7

  • Status changed from In Review to Closed
Actions
Copy link

Also available in: PDF Atom