Suricata + "kernel: protocol 0800 is buggy, dev xxxx"

[New2This]

I had a raspberry pi 3b+ sitting around here, so I fired it up installing IPfire on it, seems to be working running, now to put it to the test....
Just one question, Im running pppoe here, so do I connect the rpi just after the ISP modem, or behind the switch/router
so would be ISP-> IPfire-> AX88U

Thanks

 

[here1310]

i use diversion with fast-switch (fs).
When I define lan dns filter on costum 1 (diversion ip address) for a device, the dns is blocked by suricata.

Changes in the suricata.yaml:

DNS_SERVERS: "[192.168.4.4]" in

DNS_SERVERS:"$HOME_NET" or
DNS_SERVERS: "[192.168.4.4,192.168.4.15]"

unfortunately do not change anything in behavior.....

I ask for help...