Skip to content

tests: allow bypass keyword for firewall rules - v6 - #3299

Closed
jufajardini wants to merge 5 commits into
OISF:masterfrom
jufajardini:sv-8459-tests/v6
Closed

tests: allow bypass keyword for firewall rules - v6#3299
jufajardini wants to merge 5 commits into
OISF:masterfrom
jufajardini:sv-8459-tests/v6

Conversation

@jufajardini

Copy link
Copy Markdown
Contributor

Previous PR: #3295

Changes:

  • rebased
  • added tests checking for suppressed alerts stats counter

Ticket

https://redmine.openinfosecfoundation.org/issues/8459

Bypass keyword should work in firewall mode, with firewall rules.

Related to
Ticket #8459
Tests in directories:
- ruletype-firewall-90-ban-replace-keyword
- ruletype-firewall-92-ban-bypass-keyword

Had duplicated numbers, re-number them.
With the patch for #8459, a firewall rule should accept the bypass
keyword.

Related to
Ticket: #8459
Using threshold and firewall rules, check that the engine accounts for
suppressed alerts.
@jufajardini

Copy link
Copy Markdown
Contributor Author

replaced by #3321

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

requires suricata pr Depends on a PR in Suricata

Development

Successfully merging this pull request may close these issues.

2 participants