Project

General

Profile

Actions
Copy link

Bug #7886

closed
SB SB

firewall: --firewall-rules-exclusive loads generic td rules as well

Bug #7886: firewall: --firewall-rules-exclusive loads generic td rules as well

Added by Shivani Bhardwaj 7 months ago. Updated 4 months ago.

Status:
Rejected
Priority:
Normal
Assignee:
Shivani Bhardwaj
Target version:
9.0.0-beta1
Affected Versions:
8.0.0
Effort:
Difficulty:
Label:
Needs Suricata-Verify test

Description

when it should only load the firewall rules.

Subtasks 1 (0 open — 1 closed)

Bug #7912: firewall: --firewall-rules-exclusive loads generic td rules as well (8.0.x backport)RejectedActions

PA Updated by Philippe Antoine 7 months ago Actions
Copy link
 #1

  • Label Needs Suricata-Verify test added

PA Updated by Philippe Antoine 7 months ago Actions
Copy link
 #2

  • Affected Versions 8.0.0 added

VJ Updated by Victor Julien 7 months ago Actions
Copy link
 #3

  • Target version changed from 8.0.1 to 8.0.2

PA Updated by Philippe Antoine 7 months ago Actions
Copy link
 #4

Is the only problem the fact that we can use -S ?

see

 if (!sig_file_exclusive && de_ctx->firewall_rule_file_exclusive) {

PA Updated by Philippe Antoine 7 months ago Actions
Copy link
 #5

  • Status changed from New to Feedback

VJ Updated by Victor Julien 7 months ago Actions
Copy link
 #6

  • Target version changed from 8.0.2 to 9.0.0-beta1
  • Label Needs backport to 8.0 added

OT Updated by OISF Ticketbot 7 months ago Actions
Copy link
 #7

  • Subtask #7912 added

OT Updated by OISF Ticketbot 7 months ago Actions
Copy link
 #8

  • Label deleted (Needs backport to 8.0)

SB Updated by Shivani Bhardwaj 6 months ago Actions
Copy link
 #9

  • Status changed from Feedback to Assigned
  • Assignee changed from OISF Dev to Shivani Bhardwaj

Think this is simple enough to tackle for the upcoming release. Self assigned

SB Updated by Shivani Bhardwaj 5 months ago Actions
Copy link
 #10

Philippe Antoine wrote in #note-4:

Is the only problem the fact that we can use -S ?

see
[...]

No idea. I spent some time trying to understand what I meant here but either I tested it wrong or it happened in a special combination of config and cmdline options. But, for now, I'm unable to reproduce this and what I've written here seems impossible by looking at the code.
Should have done a better job at ticket description.

SB Updated by Shivani Bhardwaj 4 months ago Actions
Copy link
 #11

  • Status changed from Assigned to Rejected

Bad ticket description. Cannot reproduce.

Actions
Copy link

Also available in: PDF Atom