Commit Graph

5 Commits (f3ec8bce0830fc481b840af1f2e20ef2bb4cedcc)

Author SHA1 Message Date
Lukas Sismis b82b4496af detect/firewall: group policies under packet and app nodes
The policy config was a flat map mixing packet hooks and app-layer
protocols: `packet-filter` next to `dns`. There was no node that meant
"the packet hooks" or "the app-layer hooks", so a setting could not be
scoped to one group.

Move each group under its own node:

    packet-filter     -> packet.filter
    packet-pre-flow   -> packet.pre-flow
    packet-pre-stream -> packet.pre-stream
    <proto>.<hook>    -> app.<proto>.<hook>

Ticket: 8712
2 months ago
Lukas Sismis 04c9fd9e22 detect/firewall: address HTTP/1 policies as http1
AppProtoToString(ALPROTO_HTTP1) returns "http", so an HTTP/1 policy had to
be written as `http:` while its rule hooks were already spelled `http1:`.
Use the same name in both places.

Ticket: 8712
2 months ago
Juliana Fajardini 04cfd33c59 doc/firewall: update hooks & configuration examples 5 months ago
Victor Julien 0a84015214 doc/userguide: add new constructs to firewall examples 5 months ago
Victor Julien 5c7173c6df doc/firewall: start of documentation 2 years ago