Project

General

Profile

Actions
Copy link

Feature #8203

closed
OA VJ

firewall: add configuration option for a reject default action.

Feature #8203: firewall: add configuration option for a reject default action.

Added by Olu Adeleke 3 months ago. Updated 3 months ago.

Status:
Rejected
Priority:
Normal
Assignee:
Victor Julien
Target version:
-
Effort:
Difficulty:
Label:
Needs backport to 8.0

Description

Currently the firewall mode supports only the drop default action when a packet doesn’t match a rule. Some users prefer that their firewall sends a reject, while others prefer the current silent default dropping.

Therefore, it will be useful to add a YAML configuration option that can allow customers to choose between drop and reject default actions when none of the firewall mode rule match.

Related issues 1 (1 open — 0 closed)

Is duplicate of Suricata - Feature #7701: firewall: configurable default policiesFeedbackVictor JulienActions

VJ Updated by Victor Julien 3 months ago Actions
Copy link
 #1

  • Subject changed from Firewall mode: add configuration option for a reject default action. to firewall: add configuration option for a reject default action.
  • Status changed from New to Assigned
  • Assignee set to Victor Julien

VJ Updated by Victor Julien 3 months ago Actions
Copy link
 #2

  • Status changed from Assigned to Rejected
  • Target version deleted (TBD)

This appears to be a duplicate of #7701.

VJ Updated by Victor Julien 3 months ago Actions
Copy link
 #3

  • Is duplicate of Feature #7701: firewall: configurable default policies added
Actions
Copy link

Also available in: PDF Atom