Skip to content

Commit 3a739b4

Browse files
committed
ftp: skip ts inspection on tc only transactions
In FTP, the first transaction is a banner from the server. Skip TS inspection on this transaction. Allows firewall mode to get past this transaction and onto the next. Ticket: OISF#8662
1 parent 28b10fb commit 3a739b4

1 file changed

Lines changed: 4 additions & 0 deletions

File tree

src/app-layer-ftp.c

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -650,6 +650,10 @@ static AppLayerResult FTPParseResponse(Flow *f, void *ftp_state, AppLayerParserS
650650
FTPTransaction *tx = FTPGetOldestTx(state, lasttx);
651651
if (tx == NULL) {
652652
tx = FTPTransactionCreate(state);
653+
if (tx != NULL) {
654+
/* This is a TC only transaction, skip TS inspection. */
655+
tx->tx_data.flags |= APP_LAYER_TX_SKIP_INSPECT_TS;
656+
}
653657
}
654658
if (unlikely(tx == NULL)) {
655659
SCReturnStruct(APP_LAYER_ERROR);

0 commit comments

Comments
 (0)