telekom-security/tpotce
1
0
Fork 0
mirror of https://github.com/telekom-security/tpotce.git synced 2025-07-02 01:27:27 -04:00
Code Issues Packages Projects Releases Wiki Activity

tweaking glutton, signals

Browse Source
This commit is contained in:
Marco Ochse
2018-04-17 13:54:57 +00:00
parent d1756fa934
commit 004af6dec7
13 changed files with 29 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
docker/glutton/dist/rules.yaml vendored
View File

@ -1,22 +1,27 @@
# Put passthrough rules on top, drop rules on bottom, rules are applied in order (top down)
rules:
- match: udp dst port 53
type: passthrough
- match: tcp dst port 21
type: conn_handler
target: ftp
- match: tcp dst port 23 or port 2323 or port 23231
type: conn_handler
target: telnet
- match: tcp dst port 25
type: conn_handler
target: smtp
- match: tcp dst port 3389
type: conn_handler
target: rdp
- match: tcp dst port 445
type: conn_handler
target: smb
- match: tcp dst port 21
- match: tcp dst port 3389
type: conn_handler
target: ftp
target: rdp
- match: tcp dst port 5060
type: conn_handler
target: sip
- match: tcp
type: conn_handler
target: default
- match:
type: drop