IPS, set stream.inline: true to avoid https://redmine.openinfosecfoun…

…dation.org/issues/2811, for #3211
opnsense · Feb 12, 2019 · 8695737 · 8695737
1 parent 1bda0f4
commit 8695737
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/opnsense/service/templates/OPNsense/IDS/suricata.yaml b/src/opnsense/service/templates/OPNsense/IDS/suricata.yaml
@@ -684,7 +684,8 @@ flow-timeouts:
 stream:
   memcap: 32mb
   checksum-validation: yes      # reject wrong csums
-  inline: auto                  # auto will use inline mode in IPS mode, yes or no set it statically
+  inline: {% if OPNsense.IDS.general.ips|default("0") == "1" %}true{% else %}auto{% endif %}
+
   reassembly:
     memcap: 128mb
     depth: 1mb                  # reassemble 1mb into a stream