Suricata

When enabling firewall mode, a number of settings should have reasonable default and perhaps even be locked to specific settings.

E.g. stream.inline=true should be enabled, and no other setting should be allowed.

stream.inline=true
http-body-inline=true