Open Information Security Foundation

Today

VJ 09:35 PM Suricata Feature #8472 (In Review): firewall: Auto-Accept Prior States syntax for firewall mode intent rules

https://github.com/OISF/suricata/pull/15402
Implemented this using stateful rules. It uses @tls:<client_hello_done@ and @http1:<request_headers@ as notation. Victor Julien

VJ 06:17 AM Suricata Bug #8377 (In Review): OPNsense Suricata divert-to mode causes aborted HTTPS response streams (Axios / Node.js) – works with responseType: stream

https://github.com/OISF/suricata/pull/15396
@asfsdfsdf are you able to test this PR? Victor Julien

05/15/2026

VJ 09:16 AM Suricata Feature #7706: firewall: default settings; locked settings

Implied @--init-errors-fatal@ is another so we don't have to worry about partially loaded policies/rulesets. Victor Julien

05/12/2026

VJ 04:28 PM Suricata Feature #8514 (In Progress): firewall: analyzer: complete rule table coverage

Victor Julien

05/07/2026

VJ 07:28 AM Suricata Task #7745: rust: set new minimum Rust version for Suricata 9.0

Jason Ish wrote in #note-12:
> @vjulien Do you recall what we mean by the *Supported* column?
Good question. I think it meant that we tested it somewhere. But I read it now as "do we care about breaking it?". Maybe we just need to re... Victor Julien

05/06/2026

VJ 12:44 PM Suricata Feature #7701 (In Review): firewall: configurable default policies

First draft in https://github.com/OISF/suricata/pull/15320 Victor Julien

05/04/2026

VJ 08:15 PM Suricata Feature #7701: firewall: configurable default policies

Another thing I didn't realize before: when we invoke the default policy we have no signature, so we can't raise an alert either. I was thinking about adding @alert@ the example above: Victor Julien

VJ 08:12 PM Suricata Feature #7701: firewall: configurable default policies

One annoying issue popped up: our yaml parser doesn't like underscores in the keys. So to make it work a snipped would look like this Victor Julien

VJ 05:57 PM Suricata Feature #7701 (In Progress): firewall: configurable default policies

Victor Julien

05/01/2026

VJ 09:41 AM Suricata Bug #8390 (In Review): firewall: reject action to send TCP RST / ICMP unreachable

https://github.com/OISF/suricata/pull/15300 Victor Julien