Project

General

Profile

Bug #5532 » floating rules snippet.txt

Anonymous, 11/29/2015 11:02 AM

 
<rule>
<id/>
<tracker>1422128822</tracker>
<type>pass</type>
<interface>opt3,opt4,opt5,opt9,opt10,opt11,opt12,opt13,opt14,opt15,opt16,opt17,opt18</interface>
<ipprotocol>inet46</ipprotocol>
<tag/>
<tagged/>
<direction>any</direction>
<floating>yes</floating>
<max/>
<max-src-nodes/>
<max-src-conn/>
<max-src-states/>
<statetimeout/>
<statetype>keep state</statetype>
<os/>
<protocol>tcp/udp</protocol>
<source>
<any/>
</source>
<destination>
<address>Server_DNS_Resolver</address>
<port>53</port>
</destination>
<descr><![CDATA[Allow all clients access to Internal DNS Resolvers]]></descr>
<vlanprio>0</vlanprio>
<vlanprioset>0</vlanprioset>
<created>
<time>1422128822</time>
<username>admin@192.168.1.10</username>
</created>
<updated>
<time>1448814945</time>
<username>admin@10.1.0.177</username>
</updated>
</rule>
<rule>
<id/>
<tracker>1423429022</tracker>
<type>pass</type>
<interface>Servers,opt4,opt5,opt6,opt7,opt8,opt9,opt10,opt11,opt12,opt13,opt14,opt15,opt16,opt17,opt18</interface>
<ipprotocol>inet46</ipprotocol>
<tag/>
<tagged/>
<direction>any</direction>
<quick>yes</quick>
<floating>yes</floating>
<max/>
<max-src-nodes/>
<max-src-conn/>
<max-src-states/>
<statetimeout/>
<statetype>keep state</statetype>
<os/>
<protocol>tcp/udp</protocol>
<source>
<any/>
</source>
<destination>
<address>Server_Time</address>
<port>123</port>
</destination>
<descr><![CDATA[Allow all clients access to Internal NTP Server]]></descr>
<updated>
<time>1423429022</time>
<username>admin@10.1.0.194</username>
</updated>
<created>
<time>1423429022</time>
<username>admin@10.1.0.194</username>
</created>
</rule>
(5-5/6)