Project

General

Profile

Actions
Copy link

Task #8397

open
VJ OD

Task #8387: firewall: Validate and opt-in keywords that emit "has not been tested for firewall rules" warning

firewall: enable content inspect keywords for firewall mode

Task #8397: firewall: enable content inspect keywords for firewall mode

Added by Victor Julien about 2 months ago. Updated 8 days ago.

Status:
In Progress
Priority:
Normal
Assignee:
OISF Dev
Target version:
9.0.0-beta1
Effort:
Difficulty:
Label:

Description

Currently a number of the keywords generate the Warning: detect-parse: keyword 'X' has not been tested for firewall rules. These all operate on buffers, so we can mark them as supported.

Will need test coverage for each of them, can be used in existing tests.

Subtasks 1 (1 open — 0 closed)

Task #8437: firewall: enable content inspect keywords for firewall mode (8.0.x backport)ResolvedOISF DevActions

PA Updated by Philippe Antoine about 1 month ago Actions
Copy link
 #1

  • Status changed from New to In Progress

VJ Updated by Victor Julien about 1 month ago Actions
Copy link
 #2

  • Label Needs backport to 8.0 added

OT Updated by OISF Ticketbot about 1 month ago Actions
Copy link
 #3

  • Subtask #8437 added

OT Updated by OISF Ticketbot about 1 month ago Actions
Copy link
 #4

  • Label deleted (Needs backport to 8.0)

VJ Updated by Victor Julien 18 days ago Actions
Copy link
 #5

https://github.com/OISF/suricata-verify/pull/3029 adds SV tests using pcre, content and bsize.

Actions
Copy link

Also available in: PDF Atom