mirror of https://github.com/OISF/suricata
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
29 lines
802 B
ReStructuredText
29 lines
802 B
ReStructuredText
Firewall Mode Unsupported Keywords
|
|
==================================
|
|
|
|
Certain rule keywords are not supported in firewall mode, either completely or
|
|
based on rulesets.
|
|
|
|
A keyword may be unsupported in firewall rules, in threat detection rules, or in
|
|
firewall mode altogether.
|
|
|
|
This is done when there is a chance that the keyword would lead to the firewall
|
|
verdict being skipped, contradicted, or when there could happen inconsistent
|
|
states from interactions between firewall and threat detection rules matching.
|
|
|
|
.. note:: Future releases may add support for such keywords where it makes sense.
|
|
|
|
Unsupported Keywords
|
|
--------------------
|
|
|
|
Firewall Mode
|
|
~~~~~~~~~~~~~
|
|
|
|
* Bypass
|
|
* Replace
|
|
|
|
Threat Detection Rules
|
|
~~~~~~~~~~~~~~~~~~~~~~
|
|
|
|
* Config (both the ``config`` keyword and the ``config`` action)
|