lucaspalomodevelop/opnsense-core
1
0
Fork 0
mirror of https://github.com/lucaspalomodevelop/opnsense-core.git synced 2026-03-13 00:07:27 +00:00
Code Issues Packages Projects Releases Wiki Activity

intrusion detection: behaviour change in suricata 7 [2]

Browse Source
This commit is contained in:
Ad Schellevis 2024-01-30 21:41:27 +01:00
parent f5ae0c8448
commit 0d676c7bf6
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/opnsense/service/templates/OPNsense/IDS/suricata.yaml
View File

@ -1333,8 +1333,8 @@ stream:
checksum-validation: yes # reject wrong csums
inline: {% if OPNsense.IDS.general.ips|default("0") == "1" %}true{% else %}auto{% endif %}
midstream:
midstream-policy: ignore
midstream-policy: ignore
reassembly:
memcap: 256mb
depth: 1mb # reassemble 1mb into a stream