-
Notifications
You must be signed in to change notification settings - Fork 0
/
shorewall
6 lines (6 loc) · 2.46 KB
/
shorewall
1
2
3
4
5
6
^\w{3} [ :0-9]{11} [._A-Za-z0-9-]+ kernel: \[[ .0-9]+\] Shorewall:[A-Za-z0-9]+:(DROP):IN=[A-Za-z0-9]+ OUT=[A-Za-z0-9]* MAC=[:a-fA-F0-9]* SRC=[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3} DST=[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3} LEN=[0-9]{1,5} TOS=0x[A-Fa-f0-9]{1,2} PREC=0x[A-Fa-f0-9]{1,2} TTL=[0-9]{1,3} ID=[0-9]{1,5} (DF |)PROTO=(TCP|UDP) SPT=[0-9]{1,5} DPT=[0-9]{1,5}$
^\w{3} [ :0-9]{11} [._A-Za-z0-9-]+ kernel: \[[ .0-9]+\] Shorewall:[A-Za-z0-9]+:(DROP):IN=[A-Za-z0-9]+ OUT=[A-Za-z0-9]* MAC=[:a-fA-F0-9]* SRC=[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3} DST=[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3} LEN=[0-9]{1,5} TOS=0x[A-Fa-f0-9]{1,2} PREC=0x[A-Fa-f0-9]{1,2} TTL=[0-9]{1,3} ID=[0-9]{1,5} (DF |)PROTO=(TCP|UDP) SPT=[0-9]{1,5} DPT=[0-9]{1,5} WINDOW=[0-9]{1,5} RES=0x[A-Fa-f0-9]{1,2} (CWR |)(ECE |)(PSH |)(URG |)(ACK |)(RST |)(SYN |)(FIN |)URGP=[0-9]{1,5}$
^\w{3} [ :0-9]{11} [._A-Za-z0-9-]+ kernel: \[[ .0-9]+\] fw-net (REJECT|DROP) IN=[A-Za-z0-9]* OUT=[A-Za-z0-9]* SRC=[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3} DST=[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3} LEN=[0-9]{1,5} TOS=0x[A-Fa-f0-9]{1,2} PREC=0x[A-Fa-f0-9]{1,2} TTL=[0-9]{1,3} ID=[0-9]{1,5} (DF |)PROTO=(TCP|UDP) SPT=[0-9]{1,5} DPT=[0-9]{1,5} WINDOW=[0-9]{1,5} RES=0x[A-Fa-f0-9]{1,2} (CWR |ECE |PSH |URG |ACK |RST |SYN |FIN |)+URGP=[0-9]{1,5}$
^\w{3} [ :0-9]{11} [._A-Za-z0-9-]+ kernel: \[[ .0-9]+\] fw-net (REJECT|DROP) IN=[A-Za-z0-9]* OUT=[A-Za-z0-9]* SRC=(([0-9A-Fa-f]{1,4}:){7}[0-9A-Fa-f]{1,4}|(\d{1,3}\.){3}\d{1,3}) DST=(([0-9A-Fa-f]{1,4}:){7}[0-9A-Fa-f]{1,4}|(\d{1,3}\.){3}\d{1,3}) LEN=[0-9]{1,5} TC=[0-9]{1,2} HOPLIMIT=[0-9]{1,2} FLOWLBL=[0-9]{1,7} (DF |)PROTO=(TCP|UDP) SPT=[0-9]{1,5} DPT=[0-9]{1,5} WINDOW=[0-9]{1,5} RES=0x[A-Fa-f0-9]{1,2} (CWR |ECE |PSH |URG |ACK |RST |SYN |FIN |)+URGP=[0-9]{1,5}$
^\w{3} [ :0-9]{11} [._A-Za-z0-9-]+ kernel: \[[ .0-9]+\] logflags (REJECT|DROP) IN=[A-Za-z0-9]* OUT=[A-Za-z0-9]* MAC=[a-f0-9:]* SRC=[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3} DST=[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3} LEN=[0-9]{1,5} TOS=0x[A-Fa-f0-9]{1,2} PREC=0x[A-Fa-f0-9]{1,2} TTL=[0-9]{1,3} ID=[0-9]{1,5} (DF |)PROTO=(TCP|UDP) SPT=[0-9]{1,5} DPT=[0-9]{1,5} WINDOW=[0-9]{1,5} RES=0x[A-Fa-f0-9]{1,2} (CWR |ECE |PSH |URG |ACK |RST |SYN |FIN |)+URGP=[0-9]{1,5}$
^\w{3} [ :0-9]{11} [._A-Za-z0-9-]+ kernel: \[[ .0-9]+\] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found\. Use the iptables CT target to attach helpers instead\.