1 pass in exp { "ip.src != 1.1.1.0/24; tcp.dport = 80;" } 2 pass in exp { "ip.addr = 1.2.3.4/32,5.6.7.8/32;" } 3 block out exp { "ip.dst = 127.0.0.0/8;" } 4 block in exp { "udp.sport = 53; udp.dport = 53;" } 5 pass out exp { "tcp.sport = 22; tcp.port = 25;" } 6
Indexes created Sun Sep 28 16:09:52 GMT 2025