g3proxy: add protocol inspect policy to h2 and smtp (#207)

g3proxy/doc/configuration/auditors/index.rst

@@ -102,6 +102,17 @@ Set http 1.x interception config.
 
 **default**: set with default value
 
+h2_inspect_policy
+-----------------
+
+**optional**, **type**: :ref:`protocol inspect policy <conf_value_dpi_protocol_inspect_policy>`
+
+Set what we should do with HTTP/2.0 traffic.
+
+**default**: intercept
+
+.. versionadded:: 1.9.0
+
 h2_interception
 ---------------
 
@@ -111,6 +122,17 @@ Set http 2.0 interception config.
 
 **default**: set with default value
 
+smtp_inspect_policy
+-------------------
+
+**optional**, **type**: :ref:`protocol inspect policy <conf_value_dpi_protocol_inspect_policy>`
+
+Set what we should do with SMTP traffic.
+
+**default**: intercept
+
+.. versionadded:: 1.9.0
+
 icap_reqmod_service
 -------------------
 

g3proxy/doc/configuration/values/dpi.rst

@@ -63,6 +63,31 @@ The keys ars:
 
   .. deprecated:: 1.9.0 not used anymore, the max SMTP reply line length should be 512
 
+.. _conf_value_dpi_protocol_inspect_policy:
+
+protocol inspect policy
+-----------------------
+
+**type**: string
+
+Set what we should do to a specific application protocol.
+
+The possible value are:
+
+- intercept
+
+  Intercept the traffic. This is the default value.
+
+- bypass
+
+  Bypass the interception. The traffic will be transferred transparently.
+
+- block
+
+  Block the traffic. And we will try to send application level error code to the client.
+
+.. versionadded:: 1.9.0
+
 .. _conf_value_dpi_protocol_inspection:
 
 protocol inspection