diff options
author | Renato Botelho <garga@FreeBSD.org> | 2014-12-18 10:34:23 -0200 |
---|---|---|
committer | Renato Botelho <garga@FreeBSD.org> | 2014-12-18 10:34:23 -0200 |
commit | 0ee05d2c4c649b542090c1bf7c5a19a489c87727 (patch) | |
tree | 66907c1f34c47f8fc0b9e2d5cf196ede8cc01255 /config/suricata/suricata_yaml_template.inc | |
parent | 890801af42cff66dbac8706f621256b8d454a234 (diff) | |
parent | a2f13165124c996db817e75f9edc3087e756b840 (diff) | |
download | pfsense-packages-0ee05d2c4c649b542090c1bf7c5a19a489c87727.tar.gz pfsense-packages-0ee05d2c4c649b542090c1bf7c5a19a489c87727.tar.bz2 pfsense-packages-0ee05d2c4c649b542090c1bf7c5a19a489c87727.zip |
Merge pull request #752 from bmeeks8/suricata-2.0.4-v2.1
Diffstat (limited to 'config/suricata/suricata_yaml_template.inc')
-rw-r--r-- | config/suricata/suricata_yaml_template.inc | 14 |
1 files changed, 5 insertions, 9 deletions
diff --git a/config/suricata/suricata_yaml_template.inc b/config/suricata/suricata_yaml_template.inc index 82c449d3..a8b06ebe 100644 --- a/config/suricata/suricata_yaml_template.inc +++ b/config/suricata/suricata_yaml_template.inc @@ -225,9 +225,9 @@ reassembly: # Host table is used by tagging and per host thresholding subsystems. host: - hash-size: 4096 - prealloc: 1000 - memcap: 16777216 + hash-size: {$host_hash_size} + prealloc: {$host_prealloc} + memcap: {$host_memcap} # Host specific policies for defragmentation and TCP stream reassembly. host-os-policy: @@ -286,18 +286,14 @@ vars: port-groups: {$port_vars} -# Set the order of alerts bassed on actions +# Set the order of alerts based on actions action-order: - pass - drop - reject - alert -# IP Reputation -#reputation-categories-file: {$iprep_path}/categories.txt -#default-reputation-path: {$iprep_path} -#reputation-files: -# - reputation.list +{$iprep_config} # Limit for the maximum number of asn1 frames to decode (default 256) asn1-max-frames: {$asn1_max_frames} |