Project

General

Profile

Actions
Copy link

Bug #7886

closed
SB SB

firewall: --firewall-rules-exclusive loads generic td rules as well

Bug #7886: firewall: --firewall-rules-exclusive loads generic td rules as well

Added by Shivani Bhardwaj 12 months ago. Updated 9 months ago.

Status:
Rejected
Priority:
Normal
Assignee:
Shivani Bhardwaj
Target version:
9.0.0-beta1
Affected Versions:
8.0.0
Effort:
Difficulty:
Label:
Needs Suricata-Verify test

Description

when it should only load the firewall rules.

Subtasks 1 (0 open — 1 closed)

Bug #7912: firewall: --firewall-rules-exclusive loads generic td rules as well (8.0.x backport)RejectedActions

PA Updated by Philippe Antoine 12 months ago Actions
Copy link
 #1

  • Label Needs Suricata-Verify test added

PA Updated by Philippe Antoine 12 months ago Actions
Copy link
 #2

  • Affected Versions 8.0.0 added

VJ Updated by Victor Julien 12 months ago Actions
Copy link
 #3

  • Target version changed from 8.0.1 to 8.0.2

PA Updated by Philippe Antoine 11 months ago Actions
Copy link
 #4

Is the only problem the fact that we can use -S ?

see

 if (!sig_file_exclusive && de_ctx->firewall_rule_file_exclusive) {

PA Updated by Philippe Antoine 11 months ago Actions
Copy link
 #5

  • Status changed from New to Feedback

VJ Updated by Victor Julien 11 months ago Actions
Copy link
 #6

  • Target version changed from 8.0.2 to 9.0.0-beta1
  • Label Needs backport to 8.0 added

OT Updated by OISF Ticketbot 11 months ago Actions
Copy link
 #7

  • Subtask #7912 added

OT Updated by OISF Ticketbot 11 months ago Actions
Copy link
 #8

  • Label deleted (Needs backport to 8.0)

SB Updated by Shivani Bhardwaj 10 months ago Actions
Copy link
 #9

  • Status changed from Feedback to Assigned
  • Assignee changed from OISF Dev to Shivani Bhardwaj

Think this is simple enough to tackle for the upcoming release. Self assigned

SB Updated by Shivani Bhardwaj 10 months ago Actions
Copy link
 #10

Philippe Antoine wrote in #note-4:

Is the only problem the fact that we can use -S ?

see
[...]

No idea. I spent some time trying to understand what I meant here but either I tested it wrong or it happened in a special combination of config and cmdline options. But, for now, I'm unable to reproduce this and what I've written here seems impossible by looking at the code.
Should have done a better job at ticket description.

SB Updated by Shivani Bhardwaj 9 months ago Actions
Copy link
 #11

  • Status changed from Assigned to Rejected

Bad ticket description. Cannot reproduce.

Actions
Copy link

Also available in: PDF Atom