diff mbox series

[18/20] suricata: Disable decoding for Teredo

Message ID	20190228142825.5153-19-michael.tremer@ipfire.org
State	Accepted
Commit	890f1bf2954328f5e811757754d815dedf6f92c1
Headers	From: Michael Tremer <michael.tremer@ipfire.org> To: development@lists.ipfire.org Subject: [PATCH 18/20] suricata: Disable decoding for Teredo Date: Thu, 28 Feb 2019 14:28:23 +0000 Message-Id: <20190228142825.5153-19-michael.tremer@ipfire.org> In-Reply-To: <20190228142825.5153-1-michael.tremer@ipfire.org> References: <20190228142825.5153-1-michael.tremer@ipfire.org> Cc: Michael Tremer <michael.tremer@ipfire.org> Precedence: list Errors-To: development-bounces@lists.ipfire.org Sender: "Development" <development-bounces@lists.ipfire.org>
Series	Suricata Configuration Updates \| [00/20] Suricata Configuration Updates [01/20] Revert "Suricata: detect DNS events on port 853, too" [02/20] suricata: Set max-pending-packets to 1024 [03/20] suricata: Set default packet size to 1514 [04/20] suricata: Set detection profile to high [05/20] suricata: Drop profiling section from configuration [06/20] suricata: Drop some commented stuff from configuration [07/20] suricata: Drop sections that require Rust [08/20] suricata: Configure HTTP decoder [09/20] suricata: Allow 32MB of RAM for DNS decoding [10/20] suricata: Drop parsers I have never heard of [11/20] suricata: We do not use any IP reputation lists [12/20] suricata: Log to syslog [13/20] suricata: Use the correct path for the magic database [14/20] suricata: Use 64MB of RAM for defragmentation [15/20] suricata: Use up to 256MB of RAM for the flow cache [16/20] suricata: Log to syslog like a normal process [17/20] suricata: Increase memory size for the stream engine [18/20] suricata: Disable decoding for Teredo [19/20] suricata: Start capture first and then load rules [20/20] suricata: Fix syntax error

Commit Message

Michael Tremer March 1, 2019, 1:28 a.m. UTC

  This decoder is not very accurate and Teredo has been
disabled in Windows by default. Nobody will use this.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---
 config/suricata/suricata.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff mbox series

Patch

diff --git a/config/suricata/suricata.yaml b/config/suricata/suricata.yaml
index 40777f3ad..cedf49589 100644
--- a/config/suricata/suricata.yaml
+++ b/config/suricata/suricata.yaml
@@ -575,7 +575,7 @@  decoder:
   # Teredo decoder is known to not be completely accurate
   # it will sometimes detect non-teredo as teredo.
   teredo:
-    enabled: true
+    enabled: false
 
 
 ##