snort-docker/configs/snort-conf/connectivity.lua
2024-08-22 13:20:45 +03:00

22 lines
616 B
Lua

---------------------------------------------------------------------------
-- reduced security policy that favors connectivity
-- use with -c snort.lua --tweaks connectivity
---------------------------------------------------------------------------
arp_spoof = nil
http_inspect.request_depth = 300
http_inspect.response_depth = 500
http_inspect.unzip = false
http_inspect.utf8 = false
port_scan = nil
stream_ip.min_frag_length = 16
table.insert(
binder, 1, -- add http port binding to appease the perf gods
{ when = { proto = 'tcp', ports = '80', role='server' }, use = { type = 'http_inspect' } })