Project

General

Profile

Actions
Copy link

Task #8397

closed
VJ VJ

Task #8387: firewall: Validate and opt-in keywords that emit "has not been tested for firewall rules" warning

firewall: enable content inspect keywords for firewall mode

Task #8397: firewall: enable content inspect keywords for firewall mode

Added by Victor Julien 2 months ago. Updated 7 days ago.

Status:
Closed
Priority:
Normal
Assignee:
Victor Julien
Target version:
9.0.0-beta1
Effort:
Difficulty:
Label:

Description

Currently a number of the keywords generate the Warning: detect-parse: keyword 'X' has not been tested for firewall rules. These all operate on buffers, so we can mark them as supported.

Will need test coverage for each of them, can be used in existing tests.

Subtasks 1 (0 open — 1 closed)

Task #8437: firewall: enable content inspect keywords for firewall mode (8.0.x backport)ClosedVictor JulienActions

PA Updated by Philippe Antoine about 2 months ago Actions
Copy link
 #1

  • Status changed from New to In Progress

VJ Updated by Victor Julien about 2 months ago Actions
Copy link
 #2

  • Label Needs backport to 8.0 added

OT Updated by OISF Ticketbot about 2 months ago Actions
Copy link
 #3

  • Subtask #8437 added

OT Updated by OISF Ticketbot about 2 months ago Actions
Copy link
 #4

  • Label deleted (Needs backport to 8.0)

VJ Updated by Victor Julien about 1 month ago Actions
Copy link
 #5

https://github.com/OISF/suricata-verify/pull/3029 adds SV tests using pcre, content and bsize.

VJ Updated by Victor Julien 7 days ago Actions
Copy link
 #6

  • Status changed from In Progress to Closed

I believe this is complete.

SB Updated by Shivani Bhardwaj 7 days ago Actions
Copy link
 #7

  • Assignee changed from OISF Dev to Victor Julien
Actions
Copy link

Also available in: PDF Atom