Suricata

Currently the firewall mode supports only the drop default action when a packet doesn’t match a rule. Some users prefer that their firewall sends a reject, while others prefer the current silent default dropping.

Therefore, it will be useful to add a YAML configuration option that can allow customers to choose between drop and reject default actions when none of the firewall mode rule match.