diff --git a/src/detect-parse.c b/src/detect-parse.c index b68b9a92c5..e55e8403de 100644 --- a/src/detect-parse.c +++ b/src/detect-parse.c @@ -1651,6 +1651,10 @@ static int SigParseActionDo(const char *action_in, const int idx, const bool fw_ "rules"); return -1; } + if (idx > 0 && (flags & ACTION_PASS) && !(*action_out & ACTION_ACCEPT)) { + SCLogError("'pass' is only supported as a secondary action for 'accept'"); + return -1; + } } /* parse scope, if any */