intrusion detection: behaviour change in suricata 7

marcushoff · Jan 30, 2024 · 89d5c6b · 89d5c6b
1 parent 890ca64
commit 89d5c6b
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/src/opnsense/service/templates/OPNsense/IDS/suricata.yaml b/src/opnsense/service/templates/OPNsense/IDS/suricata.yaml
@@ -1333,6 +1333,7 @@ stream:
   checksum-validation: yes      # reject wrong csums
   inline: {% if OPNsense.IDS.general.ips|default("0") == "1" %}true{% else %}auto{% endif %}
 
+  midstream-policy: ignore
   reassembly:
     memcap: 256mb
     depth: 1mb                  # reassemble 1mb into a stream