detect: allow bypass keyword for fw rules in firewall mode (only) - v5 - #16077

Closed

jufajardini wants to merge 15 commits into

jufajardini:fw-8459-allow-bypass/v5

Commits on Aug 21, 2026

scripts: check-doc-rules tries local bin first
jufajardini
committed
393bee2
scripts: check doc rules as TD and FW rules
jufajardini
committed
2370357
detect: allow banning kw from td in firewall mode
jufajardini
committed
d5969af
detect: ban bypass keyword from td w/ firewall mode
jufajardini
committed
7aeb89b
detect/parse: extract fn to validate fw rules opts
jufajardini
committed
690a96d
detect: add action/scope ban mechanism for fw/rules
jufajardini
committed
a5a0f09
detect/bypass: apply action & scope bans to bypass
jufajardini
committed
94fadab
detect/parse: document certain functions
jufajardini
committed
ad91f99
detect/alert: firewall bypass is immediate
jufajardini
committed
71206a4
decode: firewall bypass won't increment ips stats
jufajardini
committed
cdab188
docs: clarify bypass keyword usage w firewall mode
jufajardini
committed
6630463
userguide: clarify bypass stats with firewall mode
jufajardini
committed
701b334
doc: note on bypass and pre_flow hook interactions
jufajardini
committed
5acfa0e
detect/alert: incr alert.suppressed w/ fw threshold
jufajardini
committed
8d836f2
detect/alert: don't queue fw alert if thresholded
jufajardini
committed
6b649c5