yaig Commit Details

Date:

2016-04-14 21:40:44 (8 years 8 months ago)

Author:

Natalie Adams

Branch:

master

Commit:

95defa8cfdc42888f8946f1e45f5c61ddf7c54b5

Parents:

120a432263155e31854301e7de9b3e752cb70610

Message:

updating sample and engine

Changes:

File differences

-11
12 12
13 13
14 
14
15 15
16 
16
17
18
+␉object shodan-io2␊
␉object shodan-io3␊
␉␊
␉␊
␊
server group shodan drop␊
server object local accept
server object local accept␊
server proto 25 drop␊
server proto 842 drop
 ␉object shodan-io2␊
 ␉object shodan-io3␊
 ␉␊
-␉␊
+␊
 server group shodan drop␊
-server object local accept
+server object local accept␊
+server proto 25 drop␊
+server proto 842 drop

-173
174 174
175 175
176 
176
177 177
178 178
179 179
... ...
193 193
194 194
195 195
196 
196
197 197
198 198
199 199
+                    for ip in getIPsInGroup(rule.source.value):␊
                        generated_ruleset.append(ruletpl % (iface, ip, action, rule))␊
                elif rule.source.object_type == TYPES.PROTO:␊
                    generated_ruleset.append("-A INPUT -i %s -p %s -j %s -m comment --comment \"%s\"" % (iface, rule.source.value, action, rule))␊
                    generated_ruleset.append("-A INPUT -i %s -p tcp --destination-port %s -j %s -m comment --comment \"%s\"" % (iface, rule.source.value, action, rule))␊
␊
    for rule in global_defs:␊
        if rule.direction == NET_DIRECTION.SERVER:␊

                for ip in getIPsInGroup(rule.source.value):␊
                    generated_ruleset.append(ruletpl % (ip, action, rule))␊
            elif rule.source.object_type == TYPES.PROTO:␊
                generated_ruleset.append("-A INPUT -i %s -p %s -j %s -m comment --comment \"%s\"" % (rule.source.value, action, rule))␊
                generated_ruleset.append("-A INPUT -p tcp --destination-port %s -j %s -m comment --comment \"%s\"" % (rule.source.value, action, rule))␊
␊
    for rule in generated_ruleset:␊
        print rule␊
 ...
                     for ip in getIPsInGroup(rule.source.value):␊
                         generated_ruleset.append(ruletpl % (iface, ip, action, rule))␊
                 elif rule.source.object_type == TYPES.PROTO:␊
-                    generated_ruleset.append("-A INPUT -i %s -p %s -j %s -m comment --comment \"%s\"" % (iface, rule.source.value, action, rule))␊
+                    generated_ruleset.append("-A INPUT -i %s -p tcp --destination-port %s -j %s -m comment --comment \"%s\"" % (iface, rule.source.value, action, rule))␊
 ␊
     for rule in global_defs:␊
         if rule.direction == NET_DIRECTION.SERVER:␊
                 for ip in getIPsInGroup(rule.source.value):␊
                     generated_ruleset.append(ruletpl % (ip, action, rule))␊
             elif rule.source.object_type == TYPES.PROTO:␊
-                generated_ruleset.append("-A INPUT -i %s -p %s -j %s -m comment --comment \"%s\"" % (rule.source.value, action, rule))␊
+                generated_ruleset.append("-A INPUT -p tcp --destination-port %s -j %s -m comment --comment \"%s\"" % (rule.source.value, action, rule))␊
 ␊
     for rule in generated_ruleset:␊
         print rule␊

Download the corresponding diff file

yaig

File differences

Branches