fw: disallow config to be used as a default policy

Ticket: 8955
(cherry picked from commit 17e2e7f892)

src/detect-parse.c

@@ -3954,6 +3954,11 @@ static int DoParsePolicy(const char *policy_name, struct DetectFirewallPolicy *p
             return -1;
         idx++;
     }
+
+    if (action & ACTION_CONFIG) {
+        SCLogError("%s: 'config' is not a valid default policy action", policy_name);
+        return -1;
+    }
     pol->action = action;
     pol->action_scope = action_scope;
     return 1;