1 1.1 christos # 2 1.1 christos # 3 1.1 christos # 4 1.1 christos # 5 1.1 christos match { logtag = 10000; } 6 1.1 christos do { execute("/usr/bin/mail -s 'logtag 10000' root"); }; 7 1.1 christos # 8 1.1 christos match { logtag = 2000, every 10 seconds; } 9 1.1 christos do { execute("echo 'XXXXXXXX tag 2000 packet XXXXXXXX'"); }; 10 1.1 christos # 11 1.1 christos match { protocol = udp, result = block; } 12 1.1 christos do { file("file:///var/log/udp-block"); }; 13 1.1 christos # 14 1.1 christos match { protocol = tcp, result = block, dstport = 25; } 15 1.1 christos do { syslog("local0.info"), syslog("local1."), syslog(".warn"); }; 16 1.1 christos # 17 1.1 christos match { srcip = 10.1.0.0/16, dstip = 192.168.1.0/24; } 18 1.1 christos do { execute("/usr/bin/mail -s 'from 10.1 to 192.168.1' root"); }; 19 1.1 christos 20 1.1 christos # 21 1.1 christos match { 22 1.1 christos rule = 12, logtag = 101, direction = in, result = block, 23 1.1 christos protocol = udp, srcip = 10.1.0.0/16, dstip = 192.168.1.0/24; } 24 1.1 christos do { nothing; }; 25 1.1 christos # 26