Actions
Feature #8334
open
VJ
firewall: allow matching on packet layers
Feature #8334:
firewall: allow matching on packet layers
Effort:
Difficulty:
Label:
Description
The firewall mode should be able to distinguish between "Ethernet/IP/TCP" and "Ethernet/VLAN/GRE/Ethernet/IP/TCP". A packet should somehow expose this to the detection engine.
Perhaps a field that holds a list of protocol id's, starting at the datalink:
DLT_EN10MB:IPV4:TCP
Perhaps this would just be string buffer, where we can match using content.
VJ Updated by Victor Julien 15 days ago
- Related to Task #8435: firewall: investigate handling of encapsulation/tunneling like GRE/VXLAN added
Actions