Open Information Security Foundation

07/09/2026

LS 11:33 AM Suricata Feature #8712: firewall: add default app policy options

Not particularly related to this ticket, but I would like to propose the change of the app layer policy from "http" to "http1" to be in line with FW rules. Lukas Sismis

LS 08:40 AM Suricata Feature #8712: firewall: add default app policy options

Would it be ok to redefine the policy section of the configuration file to a format like this?
The current format as is in: https://github.com/OISF/suricata/blob/43bc2db41e4f7356f6cadb3247750d66e27ea8fe/suricata.yaml.in#L2396
Feels amb... Lukas Sismis

07/03/2026

LS 11:19 AM Suricata Feature #7704 (In Review): firewall: allow single packet rule to accept tcp connection

https://github.com/OISF/suricata/pull/15714 Lukas Sismis

LS 11:13 AM Suricata Bug #8699: XDP bypass VLAN byte order

https://github.com/OISF/suricata/pull/15763 Lukas Sismis

LS 10:46 AM Suricata Feature #7705: firewall: allow single rule to accept protocol detection in progress and the final protocol

https://github.com/OISF/suricata/pull/15770 Lukas Sismis

LS 10:45 AM Suricata Bug #8442: capture-bypass: worker timeout of flows causes statistics inconsistencies

https://github.com/OISF/suricata/pull/15773 Lukas Sismis

LS 10:39 AM Suricata Bug #8704 (In Review): af-packet: eBPF map location error never printed

https://github.com/OISF/suricata/pull/15777 Lukas Sismis

LS 10:36 AM Suricata Bug #8719 (In Review): eBPF/XDP load fails on kernel ≥ 5.11 when CAP_SYS_RESOURCE is not available but it should not be necessary

https://github.com/OISF/suricata/pull/15783 Lukas Sismis

LS 10:34 AM Suricata Bug #8710 (In Review): flow-manager: no flow timeout with flow.hash-size < 10

https://github.com/OISF/suricata/pull/15784 Lukas Sismis

LS 10:19 AM Suricata Bug #8713 (Triaged): firewall: multi-state or stateless keywords not supported

Lukas Sismis