You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Lukas Sismis a329e0a3b9 firewall: reject flow scope for the pre-flow hook ... Action scopes for packet hook default policies were validated per hook class, so `flow` was accepted for every packet hook. The pre_flow hook is a special case as it is evaluated before Suricata obtains a flow record. Firewall rules on the pre_flow hook were not validated at all, so `flow` and `tx` scopes were accepted there as well. This commit adds extra validation to scope parsing for the pre_flow hook default policy and validates pre_flow firewall rules against the same scopes. Ticket: 8967		3 weeks ago
..
firewall-design.rst	firewall: reject flow scope for the pre-flow hook	3 weeks ago
firewall-example.rst	detect: reject the '<' hook form for non-firewall rules	3 weeks ago
firewall-stats.rst	detect/firewall: update discarded logic	5 months ago
fw-pipeline.png	…
index.rst	doc: update the SSH docs for the reworked state machine	3 weeks ago
ssh-state-migration.rst	doc: update the SSH docs for the reworked state machine	3 weeks ago
tls-state-migration.rst	doc/userguide: TLS firewall state phase rename	3 weeks ago