Home | History | Annotate | Line # | Download | only in rules
      1  1.1  christos #
      2  1.1  christos #
      3  1.1  christos #
      4  1.1  christos #
      5  1.1  christos match { logtag = 10000; }
      6  1.1  christos do { execute("/usr/bin/mail -s 'logtag 10000' root"); };
      7  1.1  christos #
      8  1.1  christos match { logtag = 2000, every 10 seconds; }
      9  1.1  christos do { execute("echo 'XXXXXXXX tag 2000 packet XXXXXXXX'"); };
     10  1.1  christos #
     11  1.1  christos match { protocol = udp, result = block; }
     12  1.1  christos do { file("file:///var/log/udp-block"); };
     13  1.1  christos #
     14  1.1  christos match { protocol = tcp, result = block, dstport = 25; }
     15  1.1  christos do { syslog("local0.info"), syslog("local1."), syslog(".warn"); };
     16  1.1  christos #
     17  1.1  christos match { srcip = 10.1.0.0/16, dstip = 192.168.1.0/24; }
     18  1.1  christos do { execute("/usr/bin/mail -s 'from 10.1 to 192.168.1' root"); };
     19  1.1  christos 
     20  1.1  christos #
     21  1.1  christos match {
     22  1.1  christos 	rule = 12, logtag = 101, direction = in, result = block,
     23  1.1  christos 	protocol = udp, srcip = 10.1.0.0/16, dstip = 192.168.1.0/24; }
     24  1.1  christos do { nothing; };
     25  1.1  christos #
     26