reject: don't respond to tunnel packets

5 years ago · 604aa65c80
parent a6ed9b11d5
commit 604aa65c80
1 changed files with 4 additions and 0 deletions
--- a/src/respond-reject.c
+++ b/src/respond-reject.c
@ -62,6 +62,10 @@ static TmEcode RespondRejectFunc(ThreadVars *tv, Packet *p, void *data)
        return TM_ECODE_OK;
    }

+    if (IS_TUNNEL_PKT(p)) {
+        return TM_ECODE_OK;
+    }
+
    if (PKT_IS_IPV4(p)) {
        if (PKT_IS_TCP(p)) {
            (void)RejectSendIPv4TCP(tv, p, data);