Project

General

Profile

Actions
Copy link

Feature #8459

open
VJ JF

firewall: support bypass option with firewall rules

Feature #8459: firewall: support bypass option with firewall rules

Added by Victor Julien 4 months ago. Updated 2 days ago.

Status:
In Progress
Priority:
High
Assignee:
Juliana Fajardini Reichow
Target version:
9.0.0-beta1
Effort:
Difficulty:
Label:

Description

Also test what happens to firewall rules with bypass in a TD rule.

Related issues 1 (0 open — 1 closed)

Related to Suricata - Task #8551: firewall: ban usage of "replace" keywordClosedJuliana Fajardini ReichowActions

JF Updated by Juliana Fajardini Reichow about 2 months ago Actions
Copy link
 #1

  • Status changed from New to Assigned
  • Assignee set to Juliana Fajardini Reichow
  • Target version changed from TBD to 9.0.0-beta1

JF Updated by Juliana Fajardini Reichow about 2 months ago Actions
Copy link
 #2

  • Related to Task #8551: firewall: ban usage of "replace" keyword added

JF Updated by Juliana Fajardini Reichow about 2 months ago Actions
Copy link
 #3

For now, we think it's safer to ban the usage of bypass keyword in firewall mode.

JF Updated by Juliana Fajardini Reichow 9 days ago Actions
Copy link
 #4

Probably something like: accept:flow,bypass, for firewall rules, only.

The ban would still persist for the keyword for threat detection/ ids rules, in firewall mode, though.

JI Updated by Jason Ish 8 days ago Actions
Copy link
 #5

  • Priority changed from Normal to High

JF Updated by Juliana Fajardini Reichow 2 days ago Actions
Copy link
 #6

  • Status changed from Assigned to In Progress
Actions
Copy link

Also available in: PDF Atom