[2/3] Suricata: enable full detection for missing protocols

Message ID 859c3571-3175-fc8c-9418-f59cd991385e@ipfire.org
State Accepted
Commit 8723bb91aeff7dbbc173c6f7b8052a76203cb0a5
Headers
Series [1/3] Suricata: detect TLS traffic on IMAPS/POP3S/SSMTP portsas, well |

Commit Message

Peter Müller Feb. 8, 2019, 4:41 a.m. UTC
  These are IMAP and MSN, which can be safely enabled.

Partially fixes #11808

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Cc: Stefan Schantl <stefan.schantl@ipfire.org>
---
 config/suricata/suricata.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)
  

Comments

Stefan Schantl Feb. 8, 2019, 7:34 a.m. UTC | #1
Merged.

Best regards,

-Stefan
> These are IMAP and MSN, which can be safely enabled.
> 
> Partially fixes #11808
> 
> Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
> Cc: Stefan Schantl <stefan.schantl@ipfire.org>
> ---
>  config/suricata/suricata.yaml | 4 ++--
>  1 file changed, 2 insertions(+), 2 deletions(-)
> 
> diff --git a/config/suricata/suricata.yaml
> b/config/suricata/suricata.yaml
> index dd7e53584..d7302788c 100644
> --- a/config/suricata/suricata.yaml
> +++ b/config/suricata/suricata.yaml
> @@ -182,9 +182,9 @@ app-layer:
>          content-inspect-min-size: 32768
>          content-inspect-window: 4096
>      imap:
> -      enabled: detection-only
> +      enabled: yes
>      msn:
> -      enabled: detection-only
> +      enabled: yes
>      smb:
>        enabled: yes
>        detection-ports:
  

Patch

diff --git a/config/suricata/suricata.yaml b/config/suricata/suricata.yaml
index dd7e53584..d7302788c 100644
--- a/config/suricata/suricata.yaml
+++ b/config/suricata/suricata.yaml
@@ -182,9 +182,9 @@  app-layer:
         content-inspect-min-size: 32768
         content-inspect-window: 4096
     imap:
-      enabled: detection-only
+      enabled: yes
     msn:
-      enabled: detection-only
+      enabled: yes
     smb:
       enabled: yes
       detection-ports: