home *** CD-ROM | disk | FTP | other *** search
/ ftp.sustworks.com 2018 / ftp.sustworks.com.zip / ftp.sustworks.com / IPNetSentryX_1.6.5.dmg / IPNetSentryX folder / IPNetSentryX.app / Contents / Resources / DefaultRules.nsy < prev    next >
Extensible Markup Language  |  2008-06-11  |  74KB  |  2,343 lines
  1. <?xml version="1.0" encoding="UTF-8"?>
  2. <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
  3. <plist version="1.0">
  4. <dict>
  5.     <key>SentryDocument_excludeNet</key>
  6.     <string>0.0.0.0/32</string>
  7.     <key>SentryDocument_exposedHostSelection</key>
  8.     <integer>0</integer>
  9.     <key>SentryDocument_filterStyleArray</key>
  10.     <array/>
  11.     <key>SentryDocument_filterTable</key>
  12.     <dict>
  13.         <key>children</key>
  14.         <array>
  15.             <dict>
  16.                 <key>children</key>
  17.                 <array>
  18.                     <dict>
  19.                         <key>enabled</key>
  20.                         <string>1</string>
  21.                         <key>filterAction</key>
  22.                         <integer>5</integer>
  23.                         <key>filterActionName</key>
  24.                         <string>Delete</string>
  25.                         <key>nodeCount</key>
  26.                         <string>1</string>
  27.                         <key>nodeName</key>
  28.                         <string>sneak around fragments</string>
  29.                         <key>nodeNumber</key>
  30.                         <string>1.1</string>
  31.                         <key>property</key>
  32.                         <integer>11</integer>
  33.                         <key>propertyName</key>
  34.                         <string>IPFragmentOffset</string>
  35.                         <key>propertyValue</key>
  36.                         <string>1-63</string>
  37.                         <key>relation</key>
  38.                         <integer>0</integer>
  39.                         <key>relationName</key>
  40.                         <string>==</string>
  41.                     </dict>
  42.                     <dict>
  43.                         <key>enabled</key>
  44.                         <string>1</string>
  45.                         <key>filterAction</key>
  46.                         <integer>4</integer>
  47.                         <key>filterActionName</key>
  48.                         <string>Pass</string>
  49.                         <key>nodeCount</key>
  50.                         <string>1</string>
  51.                         <key>nodeName</key>
  52.                         <string>legitimate fragments</string>
  53.                         <key>nodeNumber</key>
  54.                         <string>1.2</string>
  55.                         <key>property</key>
  56.                         <integer>11</integer>
  57.                         <key>propertyName</key>
  58.                         <string>IPFragmentOffset</string>
  59.                         <key>propertyValue</key>
  60.                         <string>64</string>
  61.                         <key>relation</key>
  62.                         <integer>3</integer>
  63.                         <key>relationName</key>
  64.                         <string>>=</string>
  65.                     </dict>
  66.                     <dict>
  67.                         <key>children</key>
  68.                         <array>
  69.                             <dict>
  70.                                 <key>enabled</key>
  71.                                 <string>1</string>
  72.                                 <key>filterAction</key>
  73.                                 <integer>4</integer>
  74.                                 <key>filterActionName</key>
  75.                                 <string>Pass</string>
  76.                                 <key>nodeCount</key>
  77.                                 <string>1</string>
  78.                                 <key>nodeName</key>
  79.                                 <string>allow legitimate</string>
  80.                                 <key>nodeNumber</key>
  81.                                 <string>1.3.1</string>
  82.                                 <key>property</key>
  83.                                 <integer>3</integer>
  84.                                 <key>propertyName</key>
  85.                                 <string>Interface</string>
  86.                                 <key>propertyValue</key>
  87.                                 <string>Loopback (lo0)</string>
  88.                                 <key>relation</key>
  89.                                 <integer>0</integer>
  90.                                 <key>relationName</key>
  91.                                 <string>==</string>
  92.                             </dict>
  93.                             <dict>
  94.                                 <key>enabled</key>
  95.                                 <string>1</string>
  96.                                 <key>filterAction</key>
  97.                                 <integer>5</integer>
  98.                                 <key>filterActionName</key>
  99.                                 <string>Delete</string>
  100.                                 <key>nodeCount</key>
  101.                                 <string>1</string>
  102.                                 <key>nodeName</key>
  103.                                 <string>delete spoofs</string>
  104.                                 <key>nodeNumber</key>
  105.                                 <string>1.3.2</string>
  106.                                 <key>property</key>
  107.                                 <integer>8</integer>
  108.                                 <key>propertyName</key>
  109.                                 <string>Source net</string>
  110.                                 <key>propertyValue</key>
  111.                                 <string>127.0.0.1/28</string>
  112.                                 <key>relation</key>
  113.                                 <integer>0</integer>
  114.                                 <key>relationName</key>
  115.                                 <string>==</string>
  116.                             </dict>
  117.                             <dict>
  118.                                 <key>enabled</key>
  119.                                 <true/>
  120.                                 <key>filterAction</key>
  121.                                 <integer>5</integer>
  122.                                 <key>filterActionName</key>
  123.                                 <string>Delete</string>
  124.                                 <key>nodeName</key>
  125.                                 <string></string>
  126.                                 <key>nodeNumber</key>
  127.                                 <string>1.3.3</string>
  128.                                 <key>property</key>
  129.                                 <integer>9</integer>
  130.                                 <key>propertyName</key>
  131.                                 <string>Dest net</string>
  132.                                 <key>propertyValue</key>
  133.                                 <string>127.0.0.1/28</string>
  134.                                 <key>relation</key>
  135.                                 <integer>0</integer>
  136.                                 <key>relationName</key>
  137.                                 <string>==</string>
  138.                             </dict>
  139.                         </array>
  140.                         <key>enabled</key>
  141.                         <string>1</string>
  142.                         <key>filterAction</key>
  143.                         <integer>0</integer>
  144.                         <key>filterActionName</key>
  145.                         <string>-></string>
  146.                         <key>nodeCount</key>
  147.                         <string>3</string>
  148.                         <key>nodeName</key>
  149.                         <string>loopback</string>
  150.                         <key>nodeNumber</key>
  151.                         <string>1.3</string>
  152.                         <key>property</key>
  153.                         <integer>0</integer>
  154.                         <key>propertyName</key>
  155.                         <string>Any</string>
  156.                         <key>propertyValue</key>
  157.                         <string></string>
  158.                         <key>relation</key>
  159.                         <integer>0</integer>
  160.                         <key>relationName</key>
  161.                         <string>==</string>
  162.                     </dict>
  163.                     <dict>
  164.                         <key>enabled</key>
  165.                         <string>1</string>
  166.                         <key>filterAction</key>
  167.                         <integer>5</integer>
  168.                         <key>filterActionName</key>
  169.                         <string>Delete</string>
  170.                         <key>nodeName</key>
  171.                         <string>source route</string>
  172.                         <key>nodeNumber</key>
  173.                         <string>1.4</string>
  174.                         <key>property</key>
  175.                         <integer>12</integer>
  176.                         <key>propertyName</key>
  177.                         <string>IPOptions</string>
  178.                         <key>propertyValue</key>
  179.                         <string>3,9 (source route)</string>
  180.                         <key>relation</key>
  181.                         <integer>0</integer>
  182.                         <key>relationName</key>
  183.                         <string>==</string>
  184.                     </dict>
  185.                 </array>
  186.                 <key>enabled</key>
  187.                 <string>1</string>
  188.                 <key>filterAction</key>
  189.                 <integer>0</integer>
  190.                 <key>filterActionName</key>
  191.                 <string>-></string>
  192.                 <key>nodeCount</key>
  193.                 <string>6</string>
  194.                 <key>nodeName</key>
  195.                 <string>default first</string>
  196.                 <key>nodeNumber</key>
  197.                 <string>1</string>
  198.                 <key>parameter</key>
  199.                 <string></string>
  200.                 <key>property</key>
  201.                 <integer>0</integer>
  202.                 <key>propertyName</key>
  203.                 <string>Any</string>
  204.                 <key>propertyValue</key>
  205.                 <string></string>
  206.                 <key>relation</key>
  207.                 <integer>0</integer>
  208.                 <key>relationName</key>
  209.                 <string>==</string>
  210.             </dict>
  211.             <dict>
  212.                 <key>children</key>
  213.                 <array>
  214.                     <dict>
  215.                         <key>children</key>
  216.                         <array>
  217.                             <dict>
  218.                                 <key>children</key>
  219.                                 <array>
  220.                                     <dict>
  221.                                         <key>children</key>
  222.                                         <array>
  223.                                             <dict>
  224.                                                 <key>enabled</key>
  225.                                                 <string>1</string>
  226.                                                 <key>filterAction</key>
  227.                                                 <integer>16</integer>
  228.                                                 <key>filterActionName</key>
  229.                                                 <string>Dont log</string>
  230.                                                 <key>nodeNumber</key>
  231.                                                 <string>2.1.1.1.1</string>
  232.                                                 <key>property</key>
  233.                                                 <integer>0</integer>
  234.                                                 <key>propertyName</key>
  235.                                                 <string>Any</string>
  236.                                                 <key>relation</key>
  237.                                                 <integer>0</integer>
  238.                                                 <key>relationName</key>
  239.                                                 <string>==</string>
  240.                                             </dict>
  241.                                         </array>
  242.                                         <key>enabled</key>
  243.                                         <string>1</string>
  244.                                         <key>filterAction</key>
  245.                                         <integer>5</integer>
  246.                                         <key>filterActionName</key>
  247.                                         <string>Delete</string>
  248.                                         <key>nodeCount</key>
  249.                                         <string>1</string>
  250.                                         <key>nodeName</key>
  251.                                         <string>triggered address</string>
  252.                                         <key>nodeNumber</key>
  253.                                         <string>2.1.1.1</string>
  254.                                         <key>property</key>
  255.                                         <integer>4</integer>
  256.                                         <key>propertyName</key>
  257.                                         <string>Include</string>
  258.                                         <key>propertyValue</key>
  259.                                         <string>triggered</string>
  260.                                         <key>relation</key>
  261.                                         <integer>0</integer>
  262.                                         <key>relationName</key>
  263.                                         <string>==</string>
  264.                                     </dict>
  265.                                     <dict>
  266.                                         <key>children</key>
  267.                                         <array>
  268.                                             <dict>
  269.                                                 <key>enabled</key>
  270.                                                 <string>1</string>
  271.                                                 <key>filterAction</key>
  272.                                                 <integer>17</integer>
  273.                                                 <key>filterActionName</key>
  274.                                                 <string>Alert</string>
  275.                                                 <key>nodeName</key>
  276.                                                 <string>finger print scan</string>
  277.                                                 <key>nodeNumber</key>
  278.                                                 <string>2.1.1.2.1</string>
  279.                                                 <key>property</key>
  280.                                                 <integer>0</integer>
  281.                                                 <key>propertyName</key>
  282.                                                 <string>Any</string>
  283.                                                 <key>relation</key>
  284.                                                 <integer>0</integer>
  285.                                                 <key>relationName</key>
  286.                                                 <string>==</string>
  287.                                             </dict>
  288.                                         </array>
  289.                                         <key>enabled</key>
  290.                                         <string>1</string>
  291.                                         <key>filterAction</key>
  292.                                         <integer>10</integer>
  293.                                         <key>filterActionName</key>
  294.                                         <string>Trigger</string>
  295.                                         <key>nodeCount</key>
  296.                                         <string>1</string>
  297.                                         <key>nodeName</key>
  298.                                         <string>finger print</string>
  299.                                         <key>nodeNumber</key>
  300.                                         <string>2.1.1.2</string>
  301.                                         <key>property</key>
  302.                                         <integer>19</integer>
  303.                                         <key>propertyName</key>
  304.                                         <string>Dest port</string>
  305.                                         <key>propertyValue</key>
  306.                                         <string>0-5</string>
  307.                                         <key>relation</key>
  308.                                         <integer>0</integer>
  309.                                         <key>relationName</key>
  310.                                         <string>==</string>
  311.                                     </dict>
  312.                                     <dict>
  313.                                         <key>children</key>
  314.                                         <array>
  315.                                             <dict>
  316.                                                 <key>enabled</key>
  317.                                                 <string>1</string>
  318.                                                 <key>filterAction</key>
  319.                                                 <integer>17</integer>
  320.                                                 <key>filterActionName</key>
  321.                                                 <string>Alert</string>
  322.                                                 <key>nodeName</key>
  323.                                                 <string>111 (RPC) probe</string>
  324.                                                 <key>nodeNumber</key>
  325.                                                 <string>2.1.1.3.1</string>
  326.                                                 <key>property</key>
  327.                                                 <integer>0</integer>
  328.                                                 <key>propertyName</key>
  329.                                                 <string>Any</string>
  330.                                                 <key>relation</key>
  331.                                                 <integer>0</integer>
  332.                                                 <key>relationName</key>
  333.                                                 <string>==</string>
  334.                                             </dict>
  335.                                         </array>
  336.                                         <key>enabled</key>
  337.                                         <string>1</string>
  338.                                         <key>filterAction</key>
  339.                                         <integer>10</integer>
  340.                                         <key>filterActionName</key>
  341.                                         <string>Trigger</string>
  342.                                         <key>nodeCount</key>
  343.                                         <string>1</string>
  344.                                         <key>nodeName</key>
  345.                                         <string></string>
  346.                                         <key>nodeNumber</key>
  347.                                         <string>2.1.1.3</string>
  348.                                         <key>property</key>
  349.                                         <integer>19</integer>
  350.                                         <key>propertyName</key>
  351.                                         <string>Dest port</string>
  352.                                         <key>propertyValue</key>
  353.                                         <string>111 (RPC)</string>
  354.                                         <key>relation</key>
  355.                                         <integer>0</integer>
  356.                                         <key>relationName</key>
  357.                                         <string>==</string>
  358.                                     </dict>
  359.                                     <dict>
  360.                                         <key>children</key>
  361.                                         <array>
  362.                                             <dict>
  363.                                                 <key>enabled</key>
  364.                                                 <string>1</string>
  365.                                                 <key>filterAction</key>
  366.                                                 <integer>17</integer>
  367.                                                 <key>filterActionName</key>
  368.                                                 <string>Alert</string>
  369.                                                 <key>nodeName</key>
  370.                                                 <string>MySQL probe</string>
  371.                                                 <key>nodeNumber</key>
  372.                                                 <string>2.1.1.4.1</string>
  373.                                                 <key>property</key>
  374.                                                 <integer>0</integer>
  375.                                                 <key>propertyName</key>
  376.                                                 <string>Any</string>
  377.                                                 <key>relation</key>
  378.                                                 <integer>0</integer>
  379.                                                 <key>relationName</key>
  380.                                                 <string>==</string>
  381.                                             </dict>
  382.                                         </array>
  383.                                         <key>enabled</key>
  384.                                         <string>1</string>
  385.                                         <key>filterAction</key>
  386.                                         <integer>10</integer>
  387.                                         <key>filterActionName</key>
  388.                                         <string>Trigger</string>
  389.                                         <key>nodeName</key>
  390.                                         <string></string>
  391.                                         <key>nodeNumber</key>
  392.                                         <string>2.1.1.4</string>
  393.                                         <key>property</key>
  394.                                         <integer>19</integer>
  395.                                         <key>propertyName</key>
  396.                                         <string>Dest port</string>
  397.                                         <key>propertyValue</key>
  398.                                         <string>1433 (MySQL)</string>
  399.                                         <key>relation</key>
  400.                                         <integer>0</integer>
  401.                                         <key>relationName</key>
  402.                                         <string>==</string>
  403.                                     </dict>
  404.                                     <dict>
  405.                                         <key>children</key>
  406.                                         <array>
  407.                                             <dict>
  408.                                                 <key>enabled</key>
  409.                                                 <string>1</string>
  410.                                                 <key>filterAction</key>
  411.                                                 <integer>17</integer>
  412.                                                 <key>filterActionName</key>
  413.                                                 <string>Alert</string>
  414.                                                 <key>nodeName</key>
  415.                                                 <string>2049 (NFS) probe</string>
  416.                                                 <key>nodeNumber</key>
  417.                                                 <string>2.1.1.5.1</string>
  418.                                                 <key>property</key>
  419.                                                 <integer>0</integer>
  420.                                                 <key>propertyName</key>
  421.                                                 <string>Any</string>
  422.                                                 <key>relation</key>
  423.                                                 <integer>0</integer>
  424.                                                 <key>relationName</key>
  425.                                                 <string>==</string>
  426.                                             </dict>
  427.                                         </array>
  428.                                         <key>enabled</key>
  429.                                         <string>1</string>
  430.                                         <key>filterAction</key>
  431.                                         <integer>10</integer>
  432.                                         <key>filterActionName</key>
  433.                                         <string>Trigger</string>
  434.                                         <key>nodeNumber</key>
  435.                                         <string>2.1.1.5</string>
  436.                                         <key>property</key>
  437.                                         <integer>19</integer>
  438.                                         <key>propertyName</key>
  439.                                         <string>Dest port</string>
  440.                                         <key>propertyValue</key>
  441.                                         <string>2049 (NFS)</string>
  442.                                         <key>relation</key>
  443.                                         <integer>0</integer>
  444.                                         <key>relationName</key>
  445.                                         <string>==</string>
  446.                                     </dict>
  447.                                     <dict>
  448.                                         <key>children</key>
  449.                                         <array>
  450.                                             <dict>
  451.                                                 <key>children</key>
  452.                                                 <array>
  453.                                                     <dict>
  454.                                                         <key>enabled</key>
  455.                                                         <string>1</string>
  456.                                                         <key>filterAction</key>
  457.                                                         <integer>17</integer>
  458.                                                         <key>filterActionName</key>
  459.                                                         <string>Alert</string>
  460.                                                         <key>nodeName</key>
  461.                                                         <string>23 (Telnet) probe</string>
  462.                                                         <key>nodeNumber</key>
  463.                                                         <string>2.1.1.6.1.1</string>
  464.                                                         <key>property</key>
  465.                                                         <integer>0</integer>
  466.                                                         <key>propertyName</key>
  467.                                                         <string>Any</string>
  468.                                                         <key>relation</key>
  469.                                                         <integer>0</integer>
  470.                                                         <key>relationName</key>
  471.                                                         <string>==</string>
  472.                                                     </dict>
  473.                                                 </array>
  474.                                                 <key>enabled</key>
  475.                                                 <string>1</string>
  476.                                                 <key>filterAction</key>
  477.                                                 <integer>10</integer>
  478.                                                 <key>filterActionName</key>
  479.                                                 <string>Trigger</string>
  480.                                                 <key>nodeCount</key>
  481.                                                 <string>1</string>
  482.                                                 <key>nodeNumber</key>
  483.                                                 <string>2.1.1.6.1</string>
  484.                                                 <key>property</key>
  485.                                                 <integer>19</integer>
  486.                                                 <key>propertyName</key>
  487.                                                 <string>Dest port</string>
  488.                                                 <key>propertyValue</key>
  489.                                                 <string>23 (Telnet)</string>
  490.                                                 <key>relation</key>
  491.                                                 <integer>0</integer>
  492.                                                 <key>relationName</key>
  493.                                                 <string>==</string>
  494.                                             </dict>
  495.                                             <dict>
  496.                                                 <key>children</key>
  497.                                                 <array>
  498.                                                     <dict>
  499.                                                         <key>enabled</key>
  500.                                                         <string>1</string>
  501.                                                         <key>filterAction</key>
  502.                                                         <integer>17</integer>
  503.                                                         <key>filterActionName</key>
  504.                                                         <string>Alert</string>
  505.                                                         <key>nodeName</key>
  506.                                                         <string>25 (SMTP) probe</string>
  507.                                                         <key>nodeNumber</key>
  508.                                                         <string>2.1.1.6.2.1</string>
  509.                                                         <key>property</key>
  510.                                                         <integer>0</integer>
  511.                                                         <key>propertyName</key>
  512.                                                         <string>Any</string>
  513.                                                         <key>relation</key>
  514.                                                         <integer>0</integer>
  515.                                                         <key>relationName</key>
  516.                                                         <string>==</string>
  517.                                                     </dict>
  518.                                                 </array>
  519.                                                 <key>enabled</key>
  520.                                                 <string>1</string>
  521.                                                 <key>filterAction</key>
  522.                                                 <integer>10</integer>
  523.                                                 <key>filterActionName</key>
  524.                                                 <string>Trigger</string>
  525.                                                 <key>nodeCount</key>
  526.                                                 <string>1</string>
  527.                                                 <key>nodeNumber</key>
  528.                                                 <string>2.1.1.6.2</string>
  529.                                                 <key>property</key>
  530.                                                 <integer>19</integer>
  531.                                                 <key>propertyName</key>
  532.                                                 <string>Dest port</string>
  533.                                                 <key>propertyValue</key>
  534.                                                 <string>25 (SMTP)</string>
  535.                                                 <key>relation</key>
  536.                                                 <integer>0</integer>
  537.                                                 <key>relationName</key>
  538.                                                 <string>==</string>
  539.                                             </dict>
  540.                                             <dict>
  541.                                                 <key>children</key>
  542.                                                 <array>
  543.                                                     <dict>
  544.                                                         <key>enabled</key>
  545.                                                         <string>1</string>
  546.                                                         <key>filterAction</key>
  547.                                                         <integer>17</integer>
  548.                                                         <key>filterActionName</key>
  549.                                                         <string>Alert</string>
  550.                                                         <key>nodeName</key>
  551.                                                         <string>79 (Finger) probe</string>
  552.                                                         <key>nodeNumber</key>
  553.                                                         <string>2.1.1.6.3.1</string>
  554.                                                         <key>property</key>
  555.                                                         <integer>0</integer>
  556.                                                         <key>propertyName</key>
  557.                                                         <string>Any</string>
  558.                                                         <key>relation</key>
  559.                                                         <integer>0</integer>
  560.                                                         <key>relationName</key>
  561.                                                         <string>==</string>
  562.                                                     </dict>
  563.                                                 </array>
  564.                                                 <key>enabled</key>
  565.                                                 <string>1</string>
  566.                                                 <key>filterAction</key>
  567.                                                 <integer>10</integer>
  568.                                                 <key>filterActionName</key>
  569.                                                 <string>Trigger</string>
  570.                                                 <key>nodeCount</key>
  571.                                                 <string>1</string>
  572.                                                 <key>nodeName</key>
  573.                                                 <string></string>
  574.                                                 <key>nodeNumber</key>
  575.                                                 <string>2.1.1.6.3</string>
  576.                                                 <key>property</key>
  577.                                                 <integer>19</integer>
  578.                                                 <key>propertyName</key>
  579.                                                 <string>Dest port</string>
  580.                                                 <key>propertyValue</key>
  581.                                                 <string>79 (Finger)</string>
  582.                                                 <key>relation</key>
  583.                                                 <integer>0</integer>
  584.                                                 <key>relationName</key>
  585.                                                 <string>==</string>
  586.                                             </dict>
  587.                                             <dict>
  588.                                                 <key>children</key>
  589.                                                 <array>
  590.                                                     <dict>
  591.                                                         <key>enabled</key>
  592.                                                         <string>1</string>
  593.                                                         <key>filterAction</key>
  594.                                                         <integer>17</integer>
  595.                                                         <key>filterActionName</key>
  596.                                                         <string>Alert</string>
  597.                                                         <key>nodeName</key>
  598.                                                         <string>110 (pop3) probe</string>
  599.                                                         <key>nodeNumber</key>
  600.                                                         <string>2.1.1.6.4.1</string>
  601.                                                         <key>property</key>
  602.                                                         <integer>0</integer>
  603.                                                         <key>propertyName</key>
  604.                                                         <string>Any</string>
  605.                                                         <key>relation</key>
  606.                                                         <integer>0</integer>
  607.                                                         <key>relationName</key>
  608.                                                         <string>==</string>
  609.                                                     </dict>
  610.                                                 </array>
  611.                                                 <key>enabled</key>
  612.                                                 <string>1</string>
  613.                                                 <key>filterAction</key>
  614.                                                 <integer>10</integer>
  615.                                                 <key>filterActionName</key>
  616.                                                 <string>Trigger</string>
  617.                                                 <key>nodeCount</key>
  618.                                                 <string>1</string>
  619.                                                 <key>nodeName</key>
  620.                                                 <string></string>
  621.                                                 <key>nodeNumber</key>
  622.                                                 <string>2.1.1.6.4</string>
  623.                                                 <key>property</key>
  624.                                                 <integer>19</integer>
  625.                                                 <key>propertyName</key>
  626.                                                 <string>Dest port</string>
  627.                                                 <key>propertyValue</key>
  628.                                                 <string>110 (pop3)</string>
  629.                                                 <key>relation</key>
  630.                                                 <integer>0</integer>
  631.                                                 <key>relationName</key>
  632.                                                 <string>==</string>
  633.                                             </dict>
  634.                                             <dict>
  635.                                                 <key>children</key>
  636.                                                 <array>
  637.                                                     <dict>
  638.                                                         <key>enabled</key>
  639.                                                         <string>1</string>
  640.                                                         <key>filterAction</key>
  641.                                                         <integer>17</integer>
  642.                                                         <key>filterActionName</key>
  643.                                                         <string>Alert</string>
  644.                                                         <key>nodeName</key>
  645.                                                         <string>113 (AUTH) probe</string>
  646.                                                         <key>nodeNumber</key>
  647.                                                         <string>2.1.1.6.5.1</string>
  648.                                                         <key>property</key>
  649.                                                         <integer>0</integer>
  650.                                                         <key>propertyName</key>
  651.                                                         <string>Any</string>
  652.                                                         <key>relation</key>
  653.                                                         <integer>0</integer>
  654.                                                         <key>relationName</key>
  655.                                                         <string>==</string>
  656.                                                     </dict>
  657.                                                 </array>
  658.                                                 <key>enabled</key>
  659.                                                 <string>1</string>
  660.                                                 <key>filterAction</key>
  661.                                                 <integer>6</integer>
  662.                                                 <key>filterActionName</key>
  663.                                                 <string>Reject</string>
  664.                                                 <key>nodeCount</key>
  665.                                                 <string>1</string>
  666.                                                 <key>nodeNumber</key>
  667.                                                 <string>2.1.1.6.5</string>
  668.                                                 <key>property</key>
  669.                                                 <integer>19</integer>
  670.                                                 <key>propertyName</key>
  671.                                                 <string>Dest port</string>
  672.                                                 <key>propertyValue</key>
  673.                                                 <string>113 (AUTH)</string>
  674.                                                 <key>relation</key>
  675.                                                 <integer>0</integer>
  676.                                                 <key>relationName</key>
  677.                                                 <string>==</string>
  678.                                             </dict>
  679.                                         </array>
  680.                                         <key>enabled</key>
  681.                                         <string>1</string>
  682.                                         <key>filterAction</key>
  683.                                         <integer>0</integer>
  684.                                         <key>filterActionName</key>
  685.                                         <string>-></string>
  686.                                         <key>nodeNumber</key>
  687.                                         <string>2.1.1.6</string>
  688.                                         <key>property</key>
  689.                                         <integer>10</integer>
  690.                                         <key>propertyName</key>
  691.                                         <string>Protocol</string>
  692.                                         <key>propertyValue</key>
  693.                                         <string>6 (TCP)</string>
  694.                                         <key>relation</key>
  695.                                         <integer>0</integer>
  696.                                         <key>relationName</key>
  697.                                         <string>==</string>
  698.                                     </dict>
  699.                                     <dict>
  700.                                         <key>children</key>
  701.                                         <array>
  702.                                             <dict>
  703.                                                 <key>children</key>
  704.                                                 <array>
  705.                                                     <dict>
  706.                                                         <key>enabled</key>
  707.                                                         <string>1</string>
  708.                                                         <key>filterAction</key>
  709.                                                         <integer>17</integer>
  710.                                                         <key>filterActionName</key>
  711.                                                         <string>Alert</string>
  712.                                                         <key>nodeName</key>
  713.                                                         <string>7 (Echo) probe</string>
  714.                                                         <key>nodeNumber</key>
  715.                                                         <string>2.1.1.7.1.1</string>
  716.                                                         <key>property</key>
  717.                                                         <integer>0</integer>
  718.                                                         <key>propertyName</key>
  719.                                                         <string>Any</string>
  720.                                                         <key>relation</key>
  721.                                                         <integer>0</integer>
  722.                                                         <key>relationName</key>
  723.                                                         <string>==</string>
  724.                                                     </dict>
  725.                                                 </array>
  726.                                                 <key>enabled</key>
  727.                                                 <string>1</string>
  728.                                                 <key>filterAction</key>
  729.                                                 <integer>10</integer>
  730.                                                 <key>filterActionName</key>
  731.                                                 <string>Trigger</string>
  732.                                                 <key>nodeNumber</key>
  733.                                                 <string>2.1.1.7.1</string>
  734.                                                 <key>property</key>
  735.                                                 <integer>19</integer>
  736.                                                 <key>propertyName</key>
  737.                                                 <string>Dest port</string>
  738.                                                 <key>propertyValue</key>
  739.                                                 <string>7 (Echo)</string>
  740.                                                 <key>relation</key>
  741.                                                 <integer>0</integer>
  742.                                                 <key>relationName</key>
  743.                                                 <string>==</string>
  744.                                             </dict>
  745.                                             <dict>
  746.                                                 <key>children</key>
  747.                                                 <array>
  748.                                                     <dict>
  749.                                                         <key>children</key>
  750.                                                         <array>
  751.                                                             <dict>
  752.                                                                 <key>enabled</key>
  753.                                                                 <string>1</string>
  754.                                                                 <key>filterAction</key>
  755.                                                                 <integer>17</integer>
  756.                                                                 <key>filterActionName</key>
  757.                                                                 <string>Alert</string>
  758.                                                                 <key>nodeName</key>
  759.                                                                 <string>67 (DHCP Server) probe</string>
  760.                                                                 <key>nodeNumber</key>
  761.                                                                 <string>2.1.1.7.2.1.1</string>
  762.                                                                 <key>property</key>
  763.                                                                 <integer>0</integer>
  764.                                                                 <key>propertyName</key>
  765.                                                                 <string>Any</string>
  766.                                                                 <key>relation</key>
  767.                                                                 <integer>0</integer>
  768.                                                                 <key>relationName</key>
  769.                                                                 <string>==</string>
  770.                                                             </dict>
  771.                                                         </array>
  772.                                                         <key>enabled</key>
  773.                                                         <string>1</string>
  774.                                                         <key>filterAction</key>
  775.                                                         <integer>10</integer>
  776.                                                         <key>filterActionName</key>
  777.                                                         <string>Trigger</string>
  778.                                                         <key>nodeNumber</key>
  779.                                                         <string>2.1.1.7.2.1</string>
  780.                                                         <key>property</key>
  781.                                                         <integer>9</integer>
  782.                                                         <key>propertyName</key>
  783.                                                         <string>Dest net</string>
  784.                                                         <key>propertyValue</key>
  785.                                                         <string>255.255.255.255/32</string>
  786.                                                         <key>relation</key>
  787.                                                         <integer>1</integer>
  788.                                                         <key>relationName</key>
  789.                                                         <string>!=</string>
  790.                                                     </dict>
  791.                                                 </array>
  792.                                                 <key>enabled</key>
  793.                                                 <string>1</string>
  794.                                                 <key>filterAction</key>
  795.                                                 <integer>0</integer>
  796.                                                 <key>filterActionName</key>
  797.                                                 <string>-></string>
  798.                                                 <key>nodeCount</key>
  799.                                                 <string>1</string>
  800.                                                 <key>nodeName</key>
  801.                                                 <string></string>
  802.                                                 <key>nodeNumber</key>
  803.                                                 <string>2.1.1.7.2</string>
  804.                                                 <key>property</key>
  805.                                                 <integer>19</integer>
  806.                                                 <key>propertyName</key>
  807.                                                 <string>Dest port</string>
  808.                                                 <key>propertyValue</key>
  809.                                                 <string>67 (DHCP Server)</string>
  810.                                                 <key>relation</key>
  811.                                                 <integer>0</integer>
  812.                                                 <key>relationName</key>
  813.                                                 <string>==</string>
  814.                                             </dict>
  815.                                             <dict>
  816.                                                 <key>children</key>
  817.                                                 <array>
  818.                                                     <dict>
  819.                                                         <key>enabled</key>
  820.                                                         <string>1</string>
  821.                                                         <key>filterAction</key>
  822.                                                         <integer>16</integer>
  823.                                                         <key>filterActionName</key>
  824.                                                         <string>Dont log</string>
  825.                                                         <key>nodeName</key>
  826.                                                         <string>ignore silently</string>
  827.                                                         <key>nodeNumber</key>
  828.                                                         <string>2.1.1.7.3.1</string>
  829.                                                         <key>property</key>
  830.                                                         <integer>0</integer>
  831.                                                         <key>propertyName</key>
  832.                                                         <string>Any</string>
  833.                                                         <key>relation</key>
  834.                                                         <integer>0</integer>
  835.                                                         <key>relationName</key>
  836.                                                         <string>==</string>
  837.                                                     </dict>
  838.                                                 </array>
  839.                                                 <key>enabled</key>
  840.                                                 <string>1</string>
  841.                                                 <key>filterAction</key>
  842.                                                 <integer>5</integer>
  843.                                                 <key>filterActionName</key>
  844.                                                 <string>Delete</string>
  845.                                                 <key>nodeCount</key>
  846.                                                 <string>1</string>
  847.                                                 <key>nodeName</key>
  848.                                                 <string>Windows Name Service</string>
  849.                                                 <key>nodeNumber</key>
  850.                                                 <string>2.1.1.7.3</string>
  851.                                                 <key>property</key>
  852.                                                 <integer>19</integer>
  853.                                                 <key>propertyName</key>
  854.                                                 <string>Dest port</string>
  855.                                                 <key>propertyValue</key>
  856.                                                 <string>137-139</string>
  857.                                                 <key>relation</key>
  858.                                                 <integer>0</integer>
  859.                                                 <key>relationName</key>
  860.                                                 <string>==</string>
  861.                                             </dict>
  862.                                         </array>
  863.                                         <key>enabled</key>
  864.                                         <string>1</string>
  865.                                         <key>filterAction</key>
  866.                                         <integer>0</integer>
  867.                                         <key>filterActionName</key>
  868.                                         <string>-></string>
  869.                                         <key>nodeName</key>
  870.                                         <string></string>
  871.                                         <key>nodeNumber</key>
  872.                                         <string>2.1.1.7</string>
  873.                                         <key>property</key>
  874.                                         <integer>10</integer>
  875.                                         <key>propertyName</key>
  876.                                         <string>Protocol</string>
  877.                                         <key>propertyValue</key>
  878.                                         <string>17 (UDP)</string>
  879.                                         <key>relation</key>
  880.                                         <integer>0</integer>
  881.                                         <key>relationName</key>
  882.                                         <string>==</string>
  883.                                     </dict>
  884.                                 </array>
  885.                                 <key>enabled</key>
  886.                                 <integer>1</integer>
  887.                                 <key>filterAction</key>
  888.                                 <integer>0</integer>
  889.                                 <key>filterActionName</key>
  890.                                 <string>-></string>
  891.                                 <key>nodeName</key>
  892.                                 <string>authorized?</string>
  893.                                 <key>nodeNumber</key>
  894.                                 <string>2.1.1</string>
  895.                                 <key>property</key>
  896.                                 <integer>4</integer>
  897.                                 <key>propertyName</key>
  898.                                 <string>Include</string>
  899.                                 <key>propertyValue</key>
  900.                                 <string>authorize</string>
  901.                                 <key>relation</key>
  902.                                 <integer>1</integer>
  903.                                 <key>relationName</key>
  904.                                 <string>!=</string>
  905.                             </dict>
  906.                         </array>
  907.                         <key>enabled</key>
  908.                         <true/>
  909.                         <key>filterAction</key>
  910.                         <integer>0</integer>
  911.                         <key>filterActionName</key>
  912.                         <string>-></string>
  913.                         <key>nodeCount</key>
  914.                         <integer>12</integer>
  915.                         <key>nodeName</key>
  916.                         <string>suspicious activity</string>
  917.                         <key>nodeNumber</key>
  918.                         <string>2.1</string>
  919.                         <key>property</key>
  920.                         <integer>2</integer>
  921.                         <key>propertyName</key>
  922.                         <string>Direction</string>
  923.                         <key>propertyValue</key>
  924.                         <string>inbound</string>
  925.                         <key>relation</key>
  926.                         <integer>0</integer>
  927.                         <key>relationName</key>
  928.                         <string>==</string>
  929.                     </dict>
  930.                     <dict>
  931.                         <key>children</key>
  932.                         <array>
  933.                             <dict>
  934.                                 <key>children</key>
  935.                                 <array>
  936.                                     <dict>
  937.                                         <key>children</key>
  938.                                         <array>
  939.                                             <dict>
  940.                                                 <key>enabled</key>
  941.                                                 <string>1</string>
  942.                                                 <key>filterAction</key>
  943.                                                 <integer>7</integer>
  944.                                                 <key>filterActionName</key>
  945.                                                 <string>Drop connection</string>
  946.                                                 <key>nodeName</key>
  947.                                                 <string>Worm</string>
  948.                                                 <key>nodeNumber</key>
  949.                                                 <string>2.2.1.1.1</string>
  950.                                                 <key>property</key>
  951.                                                 <integer>20</integer>
  952.                                                 <key>propertyName</key>
  953.                                                 <string>Data content</string>
  954.                                                 <key>propertyValue</key>
  955.                                                 <string>winnt</string>
  956.                                                 <key>relation</key>
  957.                                                 <integer>2</integer>
  958.                                                 <key>relationName</key>
  959.                                                 <string>a=A</string>
  960.                                             </dict>
  961.                                             <dict>
  962.                                                 <key>enabled</key>
  963.                                                 <true/>
  964.                                                 <key>filterAction</key>
  965.                                                 <integer>7</integer>
  966.                                                 <key>filterActionName</key>
  967.                                                 <string>Drop connection</string>
  968.                                                 <key>nodeCount</key>
  969.                                                 <integer>1</integer>
  970.                                                 <key>nodeName</key>
  971.                                                 <string>Code Red Worm</string>
  972.                                                 <key>nodeNumber</key>
  973.                                                 <string>2.2.1.1.2</string>
  974.                                                 <key>property</key>
  975.                                                 <integer>20</integer>
  976.                                                 <key>propertyName</key>
  977.                                                 <string>Data content</string>
  978.                                                 <key>propertyValue</key>
  979.                                                 <string>default.ida</string>
  980.                                                 <key>relation</key>
  981.                                                 <integer>2</integer>
  982.                                                 <key>relationName</key>
  983.                                                 <string>a=A</string>
  984.                                             </dict>
  985.                                             <dict>
  986.                                                 <key>enabled</key>
  987.                                                 <true/>
  988.                                                 <key>filterAction</key>
  989.                                                 <integer>7</integer>
  990.                                                 <key>filterActionName</key>
  991.                                                 <string>Drop connection</string>
  992.                                                 <key>nodeName</key>
  993.                                                 <string>Worm</string>
  994.                                                 <key>nodeNumber</key>
  995.                                                 <string>2.2.1.1.3</string>
  996.                                                 <key>property</key>
  997.                                                 <integer>20</integer>
  998.                                                 <key>propertyName</key>
  999.                                                 <string>Data content</string>
  1000.                                                 <key>propertyValue</key>
  1001.                                                 <string>msadc</string>
  1002.                                                 <key>relation</key>
  1003.                                                 <integer>2</integer>
  1004.                                                 <key>relationName</key>
  1005.                                                 <string>a=A</string>
  1006.                                             </dict>
  1007.                                             <dict>
  1008.                                                 <key>enabled</key>
  1009.                                                 <true/>
  1010.                                                 <key>filterAction</key>
  1011.                                                 <integer>7</integer>
  1012.                                                 <key>filterActionName</key>
  1013.                                                 <string>Drop connection</string>
  1014.                                                 <key>nodeName</key>
  1015.                                                 <string>Worm</string>
  1016.                                                 <key>nodeNumber</key>
  1017.                                                 <string>2.2.1.1.4</string>
  1018.                                                 <key>property</key>
  1019.                                                 <integer>20</integer>
  1020.                                                 <key>propertyName</key>
  1021.                                                 <string>Data content</string>
  1022.                                                 <key>propertyValue</key>
  1023.                                                 <string>_vti_bin</string>
  1024.                                                 <key>relation</key>
  1025.                                                 <integer>2</integer>
  1026.                                                 <key>relationName</key>
  1027.                                                 <string>a=A</string>
  1028.                                             </dict>
  1029.                                             <dict>
  1030.                                                 <key>enabled</key>
  1031.                                                 <true/>
  1032.                                                 <key>filterAction</key>
  1033.                                                 <integer>7</integer>
  1034.                                                 <key>filterActionName</key>
  1035.                                                 <string>Drop connection</string>
  1036.                                                 <key>nodeName</key>
  1037.                                                 <string>Worm</string>
  1038.                                                 <key>nodeNumber</key>
  1039.                                                 <string>2.2.1.1.5</string>
  1040.                                                 <key>property</key>
  1041.                                                 <integer>20</integer>
  1042.                                                 <key>propertyName</key>
  1043.                                                 <string>Data content</string>
  1044.                                                 <key>propertyValue</key>
  1045.                                                 <string>_mem_bin</string>
  1046.                                                 <key>relation</key>
  1047.                                                 <integer>2</integer>
  1048.                                                 <key>relationName</key>
  1049.                                                 <string>a=A</string>
  1050.                                             </dict>
  1051.                                             <dict>
  1052.                                                 <key>enabled</key>
  1053.                                                 <true/>
  1054.                                                 <key>filterAction</key>
  1055.                                                 <integer>7</integer>
  1056.                                                 <key>filterActionName</key>
  1057.                                                 <string>Drop connection</string>
  1058.                                                 <key>nodeCount</key>
  1059.                                                 <integer>1</integer>
  1060.                                                 <key>nodeName</key>
  1061.                                                 <string>Nimda</string>
  1062.                                                 <key>nodeNumber</key>
  1063.                                                 <string>2.2.1.1.6</string>
  1064.                                                 <key>property</key>
  1065.                                                 <integer>20</integer>
  1066.                                                 <key>propertyName</key>
  1067.                                                 <string>Data content</string>
  1068.                                                 <key>propertyValue</key>
  1069.                                                 <string>root.exe</string>
  1070.                                                 <key>relation</key>
  1071.                                                 <integer>2</integer>
  1072.                                                 <key>relationName</key>
  1073.                                                 <string>a=A</string>
  1074.                                             </dict>
  1075.                                             <dict>
  1076.                                                 <key>enabled</key>
  1077.                                                 <true/>
  1078.                                                 <key>filterAction</key>
  1079.                                                 <integer>7</integer>
  1080.                                                 <key>filterActionName</key>
  1081.                                                 <string>Drop connection</string>
  1082.                                                 <key>nodeCount</key>
  1083.                                                 <integer>1</integer>
  1084.                                                 <key>nodeName</key>
  1085.                                                 <string>Nimda</string>
  1086.                                                 <key>nodeNumber</key>
  1087.                                                 <string>2.2.1.1.7</string>
  1088.                                                 <key>property</key>
  1089.                                                 <integer>20</integer>
  1090.                                                 <key>propertyName</key>
  1091.                                                 <string>Data content</string>
  1092.                                                 <key>propertyValue</key>
  1093.                                                 <string>scripts</string>
  1094.                                                 <key>relation</key>
  1095.                                                 <integer>2</integer>
  1096.                                                 <key>relationName</key>
  1097.                                                 <string>a=A</string>
  1098.                                             </dict>
  1099.                                             <dict>
  1100.                                                 <key>enabled</key>
  1101.                                                 <true/>
  1102.                                                 <key>filterAction</key>
  1103.                                                 <integer>7</integer>
  1104.                                                 <key>filterActionName</key>
  1105.                                                 <string>Drop connection</string>
  1106.                                                 <key>nodeCount</key>
  1107.                                                 <integer>1</integer>
  1108.                                                 <key>nodeName</key>
  1109.                                                 <string>FMP_Hack Attempt</string>
  1110.                                                 <key>nodeNumber</key>
  1111.                                                 <string>2.2.1.1.8</string>
  1112.                                                 <key>property</key>
  1113.                                                 <integer>20</integer>
  1114.                                                 <key>propertyName</key>
  1115.                                                 <string>Data content</string>
  1116.                                                 <key>propertyValue</key>
  1117.                                                 <string>[0:64]&-format=-raw&</string>
  1118.                                                 <key>relation</key>
  1119.                                                 <integer>2</integer>
  1120.                                                 <key>relationName</key>
  1121.                                                 <string>a=A</string>
  1122.                                             </dict>
  1123.                                         </array>
  1124.                                         <key>enabled</key>
  1125.                                         <true/>
  1126.                                         <key>filterAction</key>
  1127.                                         <integer>0</integer>
  1128.                                         <key>filterActionName</key>
  1129.                                         <string>-></string>
  1130.                                         <key>nodeCount</key>
  1131.                                         <integer>5</integer>
  1132.                                         <key>nodeNumber</key>
  1133.                                         <string>2.2.1.1</string>
  1134.                                         <key>property</key>
  1135.                                         <integer>19</integer>
  1136.                                         <key>propertyName</key>
  1137.                                         <string>Dest port</string>
  1138.                                         <key>propertyValue</key>
  1139.                                         <string>80 (HTTP)</string>
  1140.                                         <key>relation</key>
  1141.                                         <integer>0</integer>
  1142.                                         <key>relationName</key>
  1143.                                         <string>==</string>
  1144.                                     </dict>
  1145.                                 </array>
  1146.                                 <key>enabled</key>
  1147.                                 <true/>
  1148.                                 <key>filterAction</key>
  1149.                                 <integer>0</integer>
  1150.                                 <key>filterActionName</key>
  1151.                                 <string>-></string>
  1152.                                 <key>nodeCount</key>
  1153.                                 <integer>6</integer>
  1154.                                 <key>nodeNumber</key>
  1155.                                 <string>2.2.1</string>
  1156.                                 <key>property</key>
  1157.                                 <integer>10</integer>
  1158.                                 <key>propertyName</key>
  1159.                                 <string>Protocol</string>
  1160.                                 <key>propertyValue</key>
  1161.                                 <string>6 (TCP)</string>
  1162.                                 <key>relation</key>
  1163.                                 <integer>0</integer>
  1164.                                 <key>relationName</key>
  1165.                                 <string>==</string>
  1166.                             </dict>
  1167.                         </array>
  1168.                         <key>enabled</key>
  1169.                         <true/>
  1170.                         <key>filterAction</key>
  1171.                         <integer>0</integer>
  1172.                         <key>filterActionName</key>
  1173.                         <string>-></string>
  1174.                         <key>nodeCount</key>
  1175.                         <integer>7</integer>
  1176.                         <key>nodeName</key>
  1177.                         <string>server attacks</string>
  1178.                         <key>nodeNumber</key>
  1179.                         <string>2.2</string>
  1180.                         <key>property</key>
  1181.                         <integer>2</integer>
  1182.                         <key>propertyName</key>
  1183.                         <string>Direction</string>
  1184.                         <key>propertyValue</key>
  1185.                         <string>inbound</string>
  1186.                         <key>relation</key>
  1187.                         <integer>0</integer>
  1188.                         <key>relationName</key>
  1189.                         <string>==</string>
  1190.                     </dict>
  1191.                     <dict>
  1192.                         <key>children</key>
  1193.                         <array>
  1194.                             <dict>
  1195.                                 <key>enabled</key>
  1196.                                 <true/>
  1197.                                 <key>filterAction</key>
  1198.                                 <integer>11</integer>
  1199.                                 <key>filterActionName</key>
  1200.                                 <string>Delay</string>
  1201.                                 <key>nodeNumber</key>
  1202.                                 <string>2.3.1</string>
  1203.                                 <key>property</key>
  1204.                                 <integer>16</integer>
  1205.                                 <key>propertyName</key>
  1206.                                 <string>TCP header flags</string>
  1207.                                 <key>propertyValue</key>
  1208.                                 <string>rst</string>
  1209.                                 <key>relation</key>
  1210.                                 <integer>0</integer>
  1211.                                 <key>relationName</key>
  1212.                                 <string>==</string>
  1213.                             </dict>
  1214.                         </array>
  1215.                         <key>enabled</key>
  1216.                         <string>1</string>
  1217.                         <key>filterAction</key>
  1218.                         <integer>0</integer>
  1219.                         <key>filterActionName</key>
  1220.                         <string>-></string>
  1221.                         <key>nodeName</key>
  1222.                         <string>promiscuous resets</string>
  1223.                         <key>nodeNumber</key>
  1224.                         <string>2.3</string>
  1225.                         <key>property</key>
  1226.                         <integer>2</integer>
  1227.                         <key>propertyName</key>
  1228.                         <string>Direction</string>
  1229.                         <key>propertyValue</key>
  1230.                         <string>inbound</string>
  1231.                         <key>relation</key>
  1232.                         <integer>0</integer>
  1233.                         <key>relationName</key>
  1234.                         <string>==</string>
  1235.                     </dict>
  1236.                     <dict>
  1237.                         <key>children</key>
  1238.                         <array>
  1239.                             <dict>
  1240.                                 <key>children</key>
  1241.                                 <array>
  1242.                                     <dict>
  1243.                                         <key>enabled</key>
  1244.                                         <string>1</string>
  1245.                                         <key>filterAction</key>
  1246.                                         <integer>15</integer>
  1247.                                         <key>filterActionName</key>
  1248.                                         <string>Log</string>
  1249.                                         <key>nodeNumber</key>
  1250.                                         <string>2.4.1.1</string>
  1251.                                         <key>property</key>
  1252.                                         <integer>13</integer>
  1253.                                         <key>propertyName</key>
  1254.                                         <string>ICMP type</string>
  1255.                                         <key>propertyValue</key>
  1256.                                         <string>4 (source quench)</string>
  1257.                                         <key>relation</key>
  1258.                                         <integer>0</integer>
  1259.                                         <key>relationName</key>
  1260.                                         <string>==</string>
  1261.                                     </dict>
  1262.                                     <dict>
  1263.                                         <key>enabled</key>
  1264.                                         <string>1</string>
  1265.                                         <key>filterAction</key>
  1266.                                         <integer>15</integer>
  1267.                                         <key>filterActionName</key>
  1268.                                         <string>Log</string>
  1269.                                         <key>nodeNumber</key>
  1270.                                         <string>2.4.1.2</string>
  1271.                                         <key>property</key>
  1272.                                         <integer>13</integer>
  1273.                                         <key>propertyName</key>
  1274.                                         <string>ICMP type</string>
  1275.                                         <key>propertyValue</key>
  1276.                                         <string>5 (redirect)</string>
  1277.                                         <key>relation</key>
  1278.                                         <integer>0</integer>
  1279.                                         <key>relationName</key>
  1280.                                         <string>==</string>
  1281.                                     </dict>
  1282.                                     <dict>
  1283.                                         <key>children</key>
  1284.                                         <array>
  1285.                                             <dict>
  1286.                                                 <key>enabled</key>
  1287.                                                 <string>1</string>
  1288.                                                 <key>filterAction</key>
  1289.                                                 <integer>20</integer>
  1290.                                                 <key>filterActionName</key>
  1291.                                                 <string>Reset parent</string>
  1292.                                                 <key>nodeNumber</key>
  1293.                                                 <string>2.4.1.3.1</string>
  1294.                                                 <key>property</key>
  1295.                                                 <integer>27</integer>
  1296.                                                 <key>propertyName</key>
  1297.                                                 <string>Parent idle seconds</string>
  1298.                                                 <key>propertyValue</key>
  1299.                                                 <string>30</string>
  1300.                                                 <key>relation</key>
  1301.                                                 <integer>3</integer>
  1302.                                                 <key>relationName</key>
  1303.                                                 <string>>=</string>
  1304.                                             </dict>
  1305.                                             <dict>
  1306.                                                 <key>enabled</key>
  1307.                                                 <string>1</string>
  1308.                                                 <key>filterActionName</key>
  1309.                                                 <string>Delete no log</string>
  1310.                                                 <key>nodeName</key>
  1311.                                                 <string>ping flood</string>
  1312.                                                 <key>nodeNumber</key>
  1313.                                                 <string>2.4.1.3.2</string>
  1314.                                                 <key>property</key>
  1315.                                                 <integer>28</integer>
  1316.                                                 <key>propertyName</key>
  1317.                                                 <string>Parent match count</string>
  1318.                                                 <key>propertyValue</key>
  1319.                                                 <string>50</string>
  1320.                                                 <key>relation</key>
  1321.                                                 <integer>3</integer>
  1322.                                                 <key>relationName</key>
  1323.                                                 <string>>=</string>
  1324.                                             </dict>
  1325.                                             <dict>
  1326.                                                 <key>enabled</key>
  1327.                                                 <string>1</string>
  1328.                                                 <key>filterAction</key>
  1329.                                                 <integer>15</integer>
  1330.                                                 <key>filterActionName</key>
  1331.                                                 <string>Log</string>
  1332.                                                 <key>nodeNumber</key>
  1333.                                                 <string>2.4.1.3.3</string>
  1334.                                                 <key>property</key>
  1335.                                                 <integer>0</integer>
  1336.                                                 <key>propertyName</key>
  1337.                                                 <string>Any</string>
  1338.                                                 <key>relation</key>
  1339.                                                 <integer>0</integer>
  1340.                                                 <key>relationName</key>
  1341.                                                 <string>==</string>
  1342.                                             </dict>
  1343.                                         </array>
  1344.                                         <key>enabled</key>
  1345.                                         <string>1</string>
  1346.                                         <key>filterAction</key>
  1347.                                         <integer>0</integer>
  1348.                                         <key>filterActionName</key>
  1349.                                         <string>-></string>
  1350.                                         <key>nodeNumber</key>
  1351.                                         <string>2.4.1.3</string>
  1352.                                         <key>property</key>
  1353.                                         <integer>13</integer>
  1354.                                         <key>propertyName</key>
  1355.                                         <string>ICMP type</string>
  1356.                                         <key>propertyValue</key>
  1357.                                         <string>8 (echo request)</string>
  1358.                                         <key>relation</key>
  1359.                                         <integer>0</integer>
  1360.                                         <key>relationName</key>
  1361.                                         <string>==</string>
  1362.                                     </dict>
  1363.                                     <dict>
  1364.                                         <key>enabled</key>
  1365.                                         <string>1</string>
  1366.                                         <key>filterAction</key>
  1367.                                         <integer>15</integer>
  1368.                                         <key>filterActionName</key>
  1369.                                         <string>Log</string>
  1370.                                         <key>nodeNumber</key>
  1371.                                         <string>2.4.1.4</string>
  1372.                                         <key>property</key>
  1373.                                         <integer>13</integer>
  1374.                                         <key>propertyName</key>
  1375.                                         <string>ICMP type</string>
  1376.                                         <key>propertyValue</key>
  1377.                                         <string>12 (parameter problem)</string>
  1378.                                         <key>relation</key>
  1379.                                         <integer>0</integer>
  1380.                                         <key>relationName</key>
  1381.                                         <string>==</string>
  1382.                                     </dict>
  1383.                                 </array>
  1384.                                 <key>enabled</key>
  1385.                                 <string>1</string>
  1386.                                 <key>filterAction</key>
  1387.                                 <integer>0</integer>
  1388.                                 <key>filterActionName</key>
  1389.                                 <string>-></string>
  1390.                                 <key>nodeName</key>
  1391.                                 <string></string>
  1392.                                 <key>nodeNumber</key>
  1393.                                 <string>2.4.1</string>
  1394.                                 <key>property</key>
  1395.                                 <integer>2</integer>
  1396.                                 <key>propertyName</key>
  1397.                                 <string>Direction</string>
  1398.                                 <key>propertyValue</key>
  1399.                                 <string>inbound</string>
  1400.                                 <key>relation</key>
  1401.                                 <integer>0</integer>
  1402.                                 <key>relationName</key>
  1403.                                 <string>==</string>
  1404.                             </dict>
  1405.                         </array>
  1406.                         <key>enabled</key>
  1407.                         <string>1</string>
  1408.                         <key>filterAction</key>
  1409.                         <integer>0</integer>
  1410.                         <key>filterActionName</key>
  1411.                         <string>-></string>
  1412.                         <key>nodeName</key>
  1413.                         <string>ICMP Logger</string>
  1414.                         <key>nodeNumber</key>
  1415.                         <string>2.4</string>
  1416.                         <key>property</key>
  1417.                         <integer>10</integer>
  1418.                         <key>propertyName</key>
  1419.                         <string>Protocol</string>
  1420.                         <key>propertyValue</key>
  1421.                         <string>1 (ICMP)</string>
  1422.                         <key>relation</key>
  1423.                         <integer>0</integer>
  1424.                         <key>relationName</key>
  1425.                         <string>==</string>
  1426.                     </dict>
  1427.                     <dict>
  1428.                         <key>children</key>
  1429.                         <array>
  1430.                             <dict>
  1431.                                 <key>children</key>
  1432.                                 <array/>
  1433.                                 <key>enabled</key>
  1434.                                 <integer>1</integer>
  1435.                                 <key>filterAction</key>
  1436.                                 <integer>19</integer>
  1437.                                 <key>filterActionName</key>
  1438.                                 <string>URL</string>
  1439.                                 <key>nodeName</key>
  1440.                                 <string>send probe(s)</string>
  1441.                                 <key>nodeNumber</key>
  1442.                                 <string>2.5.1</string>
  1443.                                 <key>parameter</key>
  1444.                                 <string>ping://192.168.0.2</string>
  1445.                                 <key>property</key>
  1446.                                 <integer>26</integer>
  1447.                                 <key>propertyName</key>
  1448.                                 <string>Idle seconds</string>
  1449.                                 <key>propertyValue</key>
  1450.                                 <string>60</string>
  1451.                                 <key>relation</key>
  1452.                                 <integer>3</integer>
  1453.                                 <key>relationName</key>
  1454.                                 <string>>=</string>
  1455.                             </dict>
  1456.                             <dict>
  1457.                                 <key>children</key>
  1458.                                 <array>
  1459.                                     <dict>
  1460.                                         <key>children</key>
  1461.                                         <array>
  1462.                                             <dict>
  1463.                                                 <key>children</key>
  1464.                                                 <array>
  1465.                                                     <dict>
  1466.                                                         <key>enabled</key>
  1467.                                                         <integer>1</integer>
  1468.                                                         <key>filterAction</key>
  1469.                                                         <integer>18</integer>
  1470.                                                         <key>filterActionName</key>
  1471.                                                         <string>Email</string>
  1472.                                                         <key>nodeNumber</key>
  1473.                                                         <string>2.5.2.1.1.1</string>
  1474.                                                         <key>parameter</key>
  1475.                                                         <string>NetTalk server not responding</string>
  1476.                                                         <key>property</key>
  1477.                                                         <integer>28</integer>
  1478.                                                         <key>propertyName</key>
  1479.                                                         <string>Parent match count</string>
  1480.                                                         <key>propertyValue</key>
  1481.                                                         <string>1</string>
  1482.                                                         <key>relation</key>
  1483.                                                         <integer>0</integer>
  1484.                                                         <key>relationName</key>
  1485.                                                         <string>==</string>
  1486.                                                     </dict>
  1487.                                                     <dict>
  1488.                                                         <key>enabled</key>
  1489.                                                         <integer>1</integer>
  1490.                                                         <key>filterAction</key>
  1491.                                                         <integer>20</integer>
  1492.                                                         <key>filterActionName</key>
  1493.                                                         <string>Reset parent</string>
  1494.                                                         <key>nodeNumber</key>
  1495.                                                         <string>2.5.2.1.1.2</string>
  1496.                                                         <key>parameter</key>
  1497.                                                         <string>restore when it comes back up</string>
  1498.                                                         <key>property</key>
  1499.                                                         <integer>27</integer>
  1500.                                                         <key>propertyName</key>
  1501.                                                         <string>Parent idle seconds</string>
  1502.                                                         <key>propertyValue</key>
  1503.                                                         <string>3600</string>
  1504.                                                         <key>relation</key>
  1505.                                                         <integer>3</integer>
  1506.                                                         <key>relationName</key>
  1507.                                                         <string>>=</string>
  1508.                                                     </dict>
  1509.                                                 </array>
  1510.                                                 <key>enabled</key>
  1511.                                                 <integer>1</integer>
  1512.                                                 <key>filterAction</key>
  1513.                                                 <integer>0</integer>
  1514.                                                 <key>filterActionName</key>
  1515.                                                 <string>-></string>
  1516.                                                 <key>nodeName</key>
  1517.                                                 <string>no response?</string>
  1518.                                                 <key>nodeNumber</key>
  1519.                                                 <string>2.5.2.1.1</string>
  1520.                                                 <key>property</key>
  1521.                                                 <integer>27</integer>
  1522.                                                 <key>propertyName</key>
  1523.                                                 <string>Parent idle seconds</string>
  1524.                                                 <key>propertyValue</key>
  1525.                                                 <string>200</string>
  1526.                                                 <key>relation</key>
  1527.                                                 <integer>3</integer>
  1528.                                                 <key>relationName</key>
  1529.                                                 <string>>=</string>
  1530.                                             </dict>
  1531.                                         </array>
  1532.                                         <key>enabled</key>
  1533.                                         <integer>1</integer>
  1534.                                         <key>filterAction</key>
  1535.                                         <integer>0</integer>
  1536.                                         <key>filterActionName</key>
  1537.                                         <string>-></string>
  1538.                                         <key>nodeName</key>
  1539.                                         <string>NetTalk list server</string>
  1540.                                         <key>nodeNumber</key>
  1541.                                         <string>2.5.2.1</string>
  1542.                                         <key>property</key>
  1543.                                         <integer>8</integer>
  1544.                                         <key>propertyName</key>
  1545.                                         <string>Source net</string>
  1546.                                         <key>propertyValue</key>
  1547.                                         <string>192.168.0.2/32</string>
  1548.                                         <key>relation</key>
  1549.                                         <integer>0</integer>
  1550.                                         <key>relationName</key>
  1551.                                         <string>==</string>
  1552.                                     </dict>
  1553.                                 </array>
  1554.                                 <key>enabled</key>
  1555.                                 <integer>1</integer>
  1556.                                 <key>filterAction</key>
  1557.                                 <integer>0</integer>
  1558.                                 <key>filterActionName</key>
  1559.                                 <string>-></string>
  1560.                                 <key>nodeNumber</key>
  1561.                                 <string>2.5.2</string>
  1562.                                 <key>property</key>
  1563.                                 <integer>13</integer>
  1564.                                 <key>propertyName</key>
  1565.                                 <string>ICMP type</string>
  1566.                                 <key>propertyValue</key>
  1567.                                 <string>0 (echo reply)</string>
  1568.                                 <key>relation</key>
  1569.                                 <integer>0</integer>
  1570.                                 <key>relationName</key>
  1571.                                 <string>==</string>
  1572.                             </dict>
  1573.                         </array>
  1574.                         <key>enabled</key>
  1575.                         <false/>
  1576.                         <key>filterAction</key>
  1577.                         <integer>0</integer>
  1578.                         <key>filterActionName</key>
  1579.                         <string>-></string>
  1580.                         <key>nodeName</key>
  1581.                         <string>Check servers</string>
  1582.                         <key>nodeNumber</key>
  1583.                         <string>2.5</string>
  1584.                         <key>property</key>
  1585.                         <integer>2</integer>
  1586.                         <key>propertyName</key>
  1587.                         <string>Direction</string>
  1588.                         <key>propertyValue</key>
  1589.                         <string>inbound</string>
  1590.                         <key>relation</key>
  1591.                         <integer>0</integer>
  1592.                         <key>relationName</key>
  1593.                         <string>==</string>
  1594.                     </dict>
  1595.                     <dict>
  1596.                         <key>children</key>
  1597.                         <array>
  1598.                             <dict>
  1599.                                 <key>children</key>
  1600.                                 <array>
  1601.                                     <dict>
  1602.                                         <key>children</key>
  1603.                                         <array>
  1604.                                             <dict>
  1605.                                                 <key>children</key>
  1606.                                                 <array>
  1607.                                                     <dict>
  1608.                                                         <key>enabled</key>
  1609.                                                         <string>1</string>
  1610.                                                         <key>filterAction</key>
  1611.                                                         <integer>3</integer>
  1612.                                                         <key>filterActionName</key>
  1613.                                                         <string>Break</string>
  1614.                                                         <key>nodeNumber</key>
  1615.                                                         <string>2.6.1.1.1.1</string>
  1616.                                                         <key>property</key>
  1617.                                                         <integer>19</integer>
  1618.                                                         <key>propertyName</key>
  1619.                                                         <string>Dest port</string>
  1620.                                                         <key>propertyValue</key>
  1621.                                                         <string>548 (AFP (AppleShare))</string>
  1622.                                                         <key>relation</key>
  1623.                                                         <integer>0</integer>
  1624.                                                         <key>relationName</key>
  1625.                                                         <string>==</string>
  1626.                                                     </dict>
  1627.                                                     <dict>
  1628.                                                         <key>enabled</key>
  1629.                                                         <string>1</string>
  1630.                                                         <key>filterAction</key>
  1631.                                                         <integer>3</integer>
  1632.                                                         <key>filterActionName</key>
  1633.                                                         <string>Break</string>
  1634.                                                         <key>nodeNumber</key>
  1635.                                                         <string>2.6.1.1.1.2</string>
  1636.                                                         <key>property</key>
  1637.                                                         <integer>19</integer>
  1638.                                                         <key>propertyName</key>
  1639.                                                         <string>Dest port</string>
  1640.                                                         <key>propertyValue</key>
  1641.                                                         <string>427 (slp)</string>
  1642.                                                         <key>relation</key>
  1643.                                                         <integer>0</integer>
  1644.                                                         <key>relationName</key>
  1645.                                                         <string>==</string>
  1646.                                                     </dict>
  1647.                                                 </array>
  1648.                                                 <key>enabled</key>
  1649.                                                 <string>0</string>
  1650.                                                 <key>filterAction</key>
  1651.                                                 <integer>0</integer>
  1652.                                                 <key>filterActionName</key>
  1653.                                                 <string>-></string>
  1654.                                                 <key>nodeName</key>
  1655.                                                 <string>Personal File Sharing (548, 427)</string>
  1656.                                                 <key>nodeNumber</key>
  1657.                                                 <string>2.6.1.1.1</string>
  1658.                                                 <key>property</key>
  1659.                                                 <integer>0</integer>
  1660.                                                 <key>propertyName</key>
  1661.                                                 <string>Any</string>
  1662.                                                 <key>propertyValue</key>
  1663.                                                 <string></string>
  1664.                                                 <key>relation</key>
  1665.                                                 <integer>0</integer>
  1666.                                                 <key>relationName</key>
  1667.                                                 <string>==</string>
  1668.                                             </dict>
  1669.                                             <dict>
  1670.                                                 <key>filterAction</key>
  1671.                                                 <integer>3</integer>
  1672.                                                 <key>filterActionName</key>
  1673.                                                 <string>Break</string>
  1674.                                                 <key>nodeName</key>
  1675.                                                 <string>Windows File Sharing (139)</string>
  1676.                                                 <key>nodeNumber</key>
  1677.                                                 <string>2.6.1.1.2</string>
  1678.                                                 <key>property</key>
  1679.                                                 <integer>19</integer>
  1680.                                                 <key>propertyName</key>
  1681.                                                 <string>Dest port</string>
  1682.                                                 <key>propertyValue</key>
  1683.                                                 <string>139 (NETBIOS Session)</string>
  1684.                                                 <key>relation</key>
  1685.                                                 <integer>0</integer>
  1686.                                                 <key>relationName</key>
  1687.                                                 <string>==</string>
  1688.                                             </dict>
  1689.                                             <dict>
  1690.                                                 <key>children</key>
  1691.                                                 <array>
  1692.                                                     <dict>
  1693.                                                         <key>enabled</key>
  1694.                                                         <string>1</string>
  1695.                                                         <key>filterAction</key>
  1696.                                                         <integer>3</integer>
  1697.                                                         <key>filterActionName</key>
  1698.                                                         <string>Break</string>
  1699.                                                         <key>nodeNumber</key>
  1700.                                                         <string>2.6.1.1.3.1</string>
  1701.                                                         <key>property</key>
  1702.                                                         <integer>19</integer>
  1703.                                                         <key>propertyName</key>
  1704.                                                         <string>Dest port</string>
  1705.                                                         <key>propertyValue</key>
  1706.                                                         <string>80 (HTTP)</string>
  1707.                                                         <key>relation</key>
  1708.                                                         <integer>0</integer>
  1709.                                                         <key>relationName</key>
  1710.                                                         <string>==</string>
  1711.                                                     </dict>
  1712.                                                     <dict>
  1713.                                                         <key>enabled</key>
  1714.                                                         <string>1</string>
  1715.                                                         <key>filterAction</key>
  1716.                                                         <integer>3</integer>
  1717.                                                         <key>filterActionName</key>
  1718.                                                         <string>Break</string>
  1719.                                                         <key>nodeNumber</key>
  1720.                                                         <string>2.6.1.1.3.2</string>
  1721.                                                         <key>property</key>
  1722.                                                         <integer>19</integer>
  1723.                                                         <key>propertyName</key>
  1724.                                                         <string>Dest port</string>
  1725.                                                         <key>propertyValue</key>
  1726.                                                         <string>427 (slp)</string>
  1727.                                                         <key>relation</key>
  1728.                                                         <integer>0</integer>
  1729.                                                         <key>relationName</key>
  1730.                                                         <string>==</string>
  1731.                                                     </dict>
  1732.                                                 </array>
  1733.                                                 <key>enabled</key>
  1734.                                                 <string>0</string>
  1735.                                                 <key>filterAction</key>
  1736.                                                 <integer>0</integer>
  1737.                                                 <key>filterActionName</key>
  1738.                                                 <string>-></string>
  1739.                                                 <key>nodeName</key>
  1740.                                                 <string>Personal Web Sharing</string>
  1741.                                                 <key>nodeNumber</key>
  1742.                                                 <string>2.6.1.1.3</string>
  1743.                                                 <key>property</key>
  1744.                                                 <integer>0</integer>
  1745.                                                 <key>propertyName</key>
  1746.                                                 <string>Any</string>
  1747.                                                 <key>relation</key>
  1748.                                                 <integer>0</integer>
  1749.                                                 <key>relationName</key>
  1750.                                                 <string>==</string>
  1751.                                             </dict>
  1752.                                             <dict>
  1753.                                                 <key>filterAction</key>
  1754.                                                 <integer>3</integer>
  1755.                                                 <key>filterActionName</key>
  1756.                                                 <string>Break</string>
  1757.                                                 <key>nodeName</key>
  1758.                                                 <string>Remote Login - SSH (22)</string>
  1759.                                                 <key>nodeNumber</key>
  1760.                                                 <string>2.6.1.1.4</string>
  1761.                                                 <key>property</key>
  1762.                                                 <integer>19</integer>
  1763.                                                 <key>propertyName</key>
  1764.                                                 <string>Dest port</string>
  1765.                                                 <key>propertyValue</key>
  1766.                                                 <string>22 (ssh)</string>
  1767.                                                 <key>relation</key>
  1768.                                                 <integer>0</integer>
  1769.                                                 <key>relationName</key>
  1770.                                                 <string>==</string>
  1771.                                             </dict>
  1772.                                             <dict>
  1773.                                                 <key>children</key>
  1774.                                                 <array>
  1775.                                                     <dict>
  1776.                                                         <key>enabled</key>
  1777.                                                         <string>1</string>
  1778.                                                         <key>filterAction</key>
  1779.                                                         <integer>0</integer>
  1780.                                                         <key>filterActionName</key>
  1781.                                                         <string>-></string>
  1782.                                                         <key>nodeName</key>
  1783.                                                         <string>From Client (Active or Passive)</string>
  1784.                                                         <key>nodeNumber</key>
  1785.                                                         <string>2.6.1.1.5.1</string>
  1786.                                                         <key>property</key>
  1787.                                                         <integer>18</integer>
  1788.                                                         <key>propertyName</key>
  1789.                                                         <string>Source port</string>
  1790.                                                         <key>propertyValue</key>
  1791.                                                         <string>1024-65535</string>
  1792.                                                         <key>relation</key>
  1793.                                                         <integer>0</integer>
  1794.                                                         <key>relationName</key>
  1795.                                                         <string>==</string>
  1796.                                                     </dict>
  1797.                                                     <dict>
  1798.                                                         <key>enabled</key>
  1799.                                                         <string>1</string>
  1800.                                                         <key>filterAction</key>
  1801.                                                         <integer>3</integer>
  1802.                                                         <key>filterActionName</key>
  1803.                                                         <string>Break</string>
  1804.                                                         <key>nodeName</key>
  1805.                                                         <string>To Command Port (Active or Passive)</string>
  1806.                                                         <key>nodeNumber</key>
  1807.                                                         <string>2.6.1.1.5.2</string>
  1808.                                                         <key>property</key>
  1809.                                                         <integer>19</integer>
  1810.                                                         <key>propertyName</key>
  1811.                                                         <string>Dest port</string>
  1812.                                                         <key>propertyValue</key>
  1813.                                                         <string>21 (FTP)</string>
  1814.                                                         <key>relation</key>
  1815.                                                         <integer>0</integer>
  1816.                                                         <key>relationName</key>
  1817.                                                         <string>==</string>
  1818.                                                     </dict>
  1819.                                                     <dict>
  1820.                                                         <key>enabled</key>
  1821.                                                         <string>1</string>
  1822.                                                         <key>filterAction</key>
  1823.                                                         <integer>3</integer>
  1824.                                                         <key>filterActionName</key>
  1825.                                                         <string>Break</string>
  1826.                                                         <key>nodeName</key>
  1827.                                                         <string>From Data Port (Active)</string>
  1828.                                                         <key>nodeNumber</key>
  1829.                                                         <string>2.6.1.1.5.3</string>
  1830.                                                         <key>property</key>
  1831.                                                         <integer>19</integer>
  1832.                                                         <key>propertyName</key>
  1833.                                                         <string>Dest port</string>
  1834.                                                         <key>propertyValue</key>
  1835.                                                         <string>20 (FTP-data)</string>
  1836.                                                         <key>relation</key>
  1837.                                                         <integer>0</integer>
  1838.                                                         <key>relationName</key>
  1839.                                                         <string>==</string>
  1840.                                                     </dict>
  1841.                                                     <dict>
  1842.                                                         <key>enabled</key>
  1843.                                                         <string>1</string>
  1844.                                                         <key>filterAction</key>
  1845.                                                         <integer>3</integer>
  1846.                                                         <key>filterActionName</key>
  1847.                                                         <string>Break</string>
  1848.                                                         <key>nodeName</key>
  1849.                                                         <string>To Data Port (Passive)</string>
  1850.                                                         <key>nodeNumber</key>
  1851.                                                         <string>2.6.1.1.5.4</string>
  1852.                                                         <key>property</key>
  1853.                                                         <integer>19</integer>
  1854.                                                         <key>propertyName</key>
  1855.                                                         <string>Dest port</string>
  1856.                                                         <key>propertyValue</key>
  1857.                                                         <string>2000-2010</string>
  1858.                                                         <key>relation</key>
  1859.                                                         <integer>0</integer>
  1860.                                                         <key>relationName</key>
  1861.                                                         <string>==</string>
  1862.                                                     </dict>
  1863.                                                 </array>
  1864.                                                 <key>filterAction</key>
  1865.                                                 <integer>0</integer>
  1866.                                                 <key>filterActionName</key>
  1867.                                                 <string>-></string>
  1868.                                                 <key>nodeName</key>
  1869.                                                 <string>FTP Access (20-21, 2000-2010)</string>
  1870.                                                 <key>nodeNumber</key>
  1871.                                                 <string>2.6.1.1.5</string>
  1872.                                                 <key>property</key>
  1873.                                                 <integer>0</integer>
  1874.                                                 <key>propertyName</key>
  1875.                                                 <string>Any</string>
  1876.                                                 <key>relation</key>
  1877.                                                 <integer>0</integer>
  1878.                                                 <key>relationName</key>
  1879.                                                 <string>==</string>
  1880.                                             </dict>
  1881.                                             <dict>
  1882.                                                 <key>filterAction</key>
  1883.                                                 <integer>3</integer>
  1884.                                                 <key>filterActionName</key>
  1885.                                                 <string>Break</string>
  1886.                                                 <key>nodeName</key>
  1887.                                                 <string>Remote Apple Events (3031)</string>
  1888.                                                 <key>nodeNumber</key>
  1889.                                                 <string>2.6.1.1.6</string>
  1890.                                                 <key>property</key>
  1891.                                                 <integer>19</integer>
  1892.                                                 <key>propertyName</key>
  1893.                                                 <string>Dest port</string>
  1894.                                                 <key>propertyValue</key>
  1895.                                                 <string>3031 (Program Linking)</string>
  1896.                                                 <key>relation</key>
  1897.                                                 <integer>0</integer>
  1898.                                                 <key>relationName</key>
  1899.                                                 <string>==</string>
  1900.                                             </dict>
  1901.                                             <dict>
  1902.                                                 <key>filterAction</key>
  1903.                                                 <integer>3</integer>
  1904.                                                 <key>filterActionName</key>
  1905.                                                 <string>Break</string>
  1906.                                                 <key>nodeName</key>
  1907.                                                 <string>Printer Sharing (631)</string>
  1908.                                                 <key>nodeNumber</key>
  1909.                                                 <string>2.6.1.1.7</string>
  1910.                                                 <key>property</key>
  1911.                                                 <integer>19</integer>
  1912.                                                 <key>propertyName</key>
  1913.                                                 <string>Dest port</string>
  1914.                                                 <key>propertyValue</key>
  1915.                                                 <string>631</string>
  1916.                                                 <key>relation</key>
  1917.                                                 <integer>0</integer>
  1918.                                                 <key>relationName</key>
  1919.                                                 <string>==</string>
  1920.                                             </dict>
  1921.                                             <dict>
  1922.                                                 <key>filterAction</key>
  1923.                                                 <integer>3</integer>
  1924.                                                 <key>filterActionName</key>
  1925.                                                 <string>Break</string>
  1926.                                                 <key>nodeName</key>
  1927.                                                 <string>AOL IM (5190)</string>
  1928.                                                 <key>nodeNumber</key>
  1929.                                                 <string>2.6.1.1.8</string>
  1930.                                                 <key>property</key>
  1931.                                                 <integer>19</integer>
  1932.                                                 <key>propertyName</key>
  1933.                                                 <string>Dest port</string>
  1934.                                                 <key>propertyValue</key>
  1935.                                                 <string>5190</string>
  1936.                                                 <key>relation</key>
  1937.                                                 <integer>0</integer>
  1938.                                                 <key>relationName</key>
  1939.                                                 <string>==</string>
  1940.                                             </dict>
  1941.                                             <dict>
  1942.                                                 <key>filterAction</key>
  1943.                                                 <integer>3</integer>
  1944.                                                 <key>filterActionName</key>
  1945.                                                 <string>Break</string>
  1946.                                                 <key>nodeName</key>
  1947.                                                 <string>Apple Remote Desktop (3283)</string>
  1948.                                                 <key>nodeNumber</key>
  1949.                                                 <string>2.6.1.1.9</string>
  1950.                                                 <key>property</key>
  1951.                                                 <integer>19</integer>
  1952.                                                 <key>propertyName</key>
  1953.                                                 <string>Dest port</string>
  1954.                                                 <key>propertyValue</key>
  1955.                                                 <string>3283 (ANAT)</string>
  1956.                                                 <key>relation</key>
  1957.                                                 <integer>0</integer>
  1958.                                                 <key>relationName</key>
  1959.                                                 <string>==</string>
  1960.                                             </dict>
  1961.                                             <dict>
  1962.                                                 <key>filterAction</key>
  1963.                                                 <integer>3</integer>
  1964.                                                 <key>filterActionName</key>
  1965.                                                 <string>Break</string>
  1966.                                                 <key>nodeName</key>
  1967.                                                 <string>Gnutella/Limewire (6346)</string>
  1968.                                                 <key>nodeNumber</key>
  1969.                                                 <string>2.6.1.1.10</string>
  1970.                                                 <key>property</key>
  1971.                                                 <integer>19</integer>
  1972.                                                 <key>propertyName</key>
  1973.                                                 <string>Dest port</string>
  1974.                                                 <key>propertyValue</key>
  1975.                                                 <string>6346</string>
  1976.                                                 <key>relation</key>
  1977.                                                 <integer>0</integer>
  1978.                                                 <key>relationName</key>
  1979.                                                 <string>==</string>
  1980.                                             </dict>
  1981.                                             <dict>
  1982.                                                 <key>filterAction</key>
  1983.                                                 <integer>3</integer>
  1984.                                                 <key>filterActionName</key>
  1985.                                                 <string>Break</string>
  1986.                                                 <key>nodeName</key>
  1987.                                                 <string>ICQ (4000)</string>
  1988.                                                 <key>nodeNumber</key>
  1989.                                                 <string>2.6.1.1.11</string>
  1990.                                                 <key>property</key>
  1991.                                                 <integer>19</integer>
  1992.                                                 <key>propertyName</key>
  1993.                                                 <string>Dest port</string>
  1994.                                                 <key>propertyValue</key>
  1995.                                                 <string>4000</string>
  1996.                                                 <key>relation</key>
  1997.                                                 <integer>0</integer>
  1998.                                                 <key>relationName</key>
  1999.                                                 <string>==</string>
  2000.                                             </dict>
  2001.                                             <dict>
  2002.                                                 <key>filterAction</key>
  2003.                                                 <integer>3</integer>
  2004.                                                 <key>filterActionName</key>
  2005.                                                 <string>Break</string>
  2006.                                                 <key>nodeName</key>
  2007.                                                 <string>IRC (104)</string>
  2008.                                                 <key>nodeNumber</key>
  2009.                                                 <string>2.6.1.1.12</string>
  2010.                                                 <key>property</key>
  2011.                                                 <integer>19</integer>
  2012.                                                 <key>propertyName</key>
  2013.                                                 <string>Dest port</string>
  2014.                                                 <key>propertyValue</key>
  2015.                                                 <string>194 (IRC)</string>
  2016.                                                 <key>relation</key>
  2017.                                                 <integer>0</integer>
  2018.                                                 <key>relationName</key>
  2019.                                                 <string>==</string>
  2020.                                             </dict>
  2021.                                             <dict>
  2022.                                                 <key>filterAction</key>
  2023.                                                 <integer>3</integer>
  2024.                                                 <key>filterActionName</key>
  2025.                                                 <string>Break</string>
  2026.                                                 <key>nodeName</key>
  2027.                                                 <string>MSN Messenger (6891-6900)</string>
  2028.                                                 <key>nodeNumber</key>
  2029.                                                 <string>2.6.1.1.13</string>
  2030.                                                 <key>property</key>
  2031.                                                 <integer>19</integer>
  2032.                                                 <key>propertyName</key>
  2033.                                                 <string>Dest port</string>
  2034.                                                 <key>propertyValue</key>
  2035.                                                 <string>6891-6900</string>
  2036.                                                 <key>relation</key>
  2037.                                                 <integer>0</integer>
  2038.                                                 <key>relationName</key>
  2039.                                                 <string>==</string>
  2040.                                             </dict>
  2041.                                             <dict>
  2042.                                                 <key>filterAction</key>
  2043.                                                 <integer>3</integer>
  2044.                                                 <key>filterActionName</key>
  2045.                                                 <string>Break</string>
  2046.                                                 <key>nodeName</key>
  2047.                                                 <string>Retrospect (497)</string>
  2048.                                                 <key>nodeNumber</key>
  2049.                                                 <string>2.6.1.1.14</string>
  2050.                                                 <key>property</key>
  2051.                                                 <integer>19</integer>
  2052.                                                 <key>propertyName</key>
  2053.                                                 <string>Dest port</string>
  2054.                                                 <key>propertyValue</key>
  2055.                                                 <string>497 (Retrospect)</string>
  2056.                                                 <key>relation</key>
  2057.                                                 <integer>0</integer>
  2058.                                                 <key>relationName</key>
  2059.                                                 <string>==</string>
  2060.                                             </dict>
  2061.                                             <dict>
  2062.                                                 <key>filterAction</key>
  2063.                                                 <integer>3</integer>
  2064.                                                 <key>filterActionName</key>
  2065.                                                 <string>Break</string>
  2066.                                                 <key>nodeName</key>
  2067.                                                 <string>SMB (without netbios) 445</string>
  2068.                                                 <key>nodeNumber</key>
  2069.                                                 <string>2.6.1.1.15</string>
  2070.                                                 <key>property</key>
  2071.                                                 <integer>19</integer>
  2072.                                                 <key>propertyName</key>
  2073.                                                 <string>Dest port</string>
  2074.                                                 <key>propertyValue</key>
  2075.                                                 <string>445</string>
  2076.                                                 <key>relation</key>
  2077.                                                 <integer>0</integer>
  2078.                                                 <key>relationName</key>
  2079.                                                 <string>==</string>
  2080.                                             </dict>
  2081.                                             <dict>
  2082.                                                 <key>filterAction</key>
  2083.                                                 <integer>3</integer>
  2084.                                                 <key>filterActionName</key>
  2085.                                                 <string>Break</string>
  2086.                                                 <key>nodeName</key>
  2087.                                                 <string>Timbuktu (407)</string>
  2088.                                                 <key>nodeNumber</key>
  2089.                                                 <string>2.6.1.1.16</string>
  2090.                                                 <key>property</key>
  2091.                                                 <integer>19</integer>
  2092.                                                 <key>propertyName</key>
  2093.                                                 <string>Dest port</string>
  2094.                                                 <key>propertyValue</key>
  2095.                                                 <string>407 (Timbuktu)</string>
  2096.                                                 <key>relation</key>
  2097.                                                 <integer>0</integer>
  2098.                                                 <key>relationName</key>
  2099.                                                 <string>==</string>
  2100.                                             </dict>
  2101.                                             <dict>
  2102.                                                 <key>enabled</key>
  2103.                                                 <string>1</string>
  2104.                                                 <key>filterAction</key>
  2105.                                                 <integer>5</integer>
  2106.                                                 <key>filterActionName</key>
  2107.                                                 <string>Delete</string>
  2108.                                                 <key>nodeName</key>
  2109.                                                 <string>Disable all other inbound connections</string>
  2110.                                                 <key>nodeNumber</key>
  2111.                                                 <string>2.6.1.1.17</string>
  2112.                                                 <key>property</key>
  2113.                                                 <integer>0</integer>
  2114.                                                 <key>propertyName</key>
  2115.                                                 <string>Any</string>
  2116.                                                 <key>relation</key>
  2117.                                                 <integer>0</integer>
  2118.                                                 <key>relationName</key>
  2119.                                                 <string>==</string>
  2120.                                             </dict>
  2121.                                         </array>
  2122.                                         <key>enabled</key>
  2123.                                         <string>1</string>
  2124.                                         <key>filterAction</key>
  2125.                                         <integer>0</integer>
  2126.                                         <key>filterActionName</key>
  2127.                                         <string>-></string>
  2128.                                         <key>nodeNumber</key>
  2129.                                         <string>2.6.1.1</string>
  2130.                                         <key>property</key>
  2131.                                         <integer>16</integer>
  2132.                                         <key>propertyName</key>
  2133.                                         <string>TCP header flags</string>
  2134.                                         <key>propertyValue</key>
  2135.                                         <string>syn,-ack</string>
  2136.                                         <key>relation</key>
  2137.                                         <integer>0</integer>
  2138.                                         <key>relationName</key>
  2139.                                         <string>==</string>
  2140.                                     </dict>
  2141.                                 </array>
  2142.                                 <key>enabled</key>
  2143.                                 <string>1</string>
  2144.                                 <key>filterAction</key>
  2145.                                 <integer>0</integer>
  2146.                                 <key>filterActionName</key>
  2147.                                 <string>-></string>
  2148.                                 <key>nodeNumber</key>
  2149.                                 <string>2.6.1</string>
  2150.                                 <key>property</key>
  2151.                                 <integer>3</integer>
  2152.                                 <key>propertyName</key>
  2153.                                 <string>Interface</string>
  2154.                                 <key>propertyValue</key>
  2155.                                 <string>external</string>
  2156.                                 <key>relation</key>
  2157.                                 <integer>0</integer>
  2158.                                 <key>relationName</key>
  2159.                                 <string>==</string>
  2160.                             </dict>
  2161.                         </array>
  2162.                         <key>filterAction</key>
  2163.                         <integer>2</integer>
  2164.                         <key>filterActionName</key>
  2165.                         <string>Group</string>
  2166.                         <key>nodeName</key>
  2167.                         <string>Protect servers</string>
  2168.                         <key>nodeNumber</key>
  2169.                         <string>2.6</string>
  2170.                         <key>property</key>
  2171.                         <integer>2</integer>
  2172.                         <key>propertyName</key>
  2173.                         <string>Direction</string>
  2174.                         <key>propertyValue</key>
  2175.                         <string>inbound</string>
  2176.                         <key>relation</key>
  2177.                         <integer>0</integer>
  2178.                         <key>relationName</key>
  2179.                         <string>==</string>
  2180.                     </dict>
  2181.                     <dict>
  2182.                         <key>children</key>
  2183.                         <array>
  2184.                             <dict>
  2185.                                 <key>children</key>
  2186.                                 <array>
  2187.                                     <dict>
  2188.                                         <key>enabled</key>
  2189.                                         <string>1</string>
  2190.                                         <key>filterAction</key>
  2191.                                         <integer>12</integer>
  2192.                                         <key>filterActionName</key>
  2193.                                         <string>Rate limit in</string>
  2194.                                         <key>nodeNumber</key>
  2195.                                         <string>2.7.1.1</string>
  2196.                                         <key>parameter</key>
  2197.                                         <string>100K</string>
  2198.                                         <key>property</key>
  2199.                                         <integer>0</integer>
  2200.                                         <key>propertyName</key>
  2201.                                         <string>Any</string>
  2202.                                         <key>relation</key>
  2203.                                         <integer>0</integer>
  2204.                                         <key>relationName</key>
  2205.                                         <string>==</string>
  2206.                                     </dict>
  2207.                                     <dict>
  2208.                                         <key>enabled</key>
  2209.                                         <string>1</string>
  2210.                                         <key>filterAction</key>
  2211.                                         <integer>13</integer>
  2212.                                         <key>filterActionName</key>
  2213.                                         <string>Rate limit out</string>
  2214.                                         <key>nodeNumber</key>
  2215.                                         <string>2.7.1.2</string>
  2216.                                         <key>parameter</key>
  2217.                                         <string>50K</string>
  2218.                                         <key>property</key>
  2219.                                         <integer>0</integer>
  2220.                                         <key>propertyName</key>
  2221.                                         <string>Any</string>
  2222.                                         <key>relation</key>
  2223.                                         <integer>0</integer>
  2224.                                         <key>relationName</key>
  2225.                                         <string>==</string>
  2226.                                     </dict>
  2227.                                 </array>
  2228.                                 <key>enabled</key>
  2229.                                 <string>0</string>
  2230.                                 <key>filterAction</key>
  2231.                                 <integer>0</integer>
  2232.                                 <key>filterActionName</key>
  2233.                                 <string>-></string>
  2234.                                 <key>nodeNumber</key>
  2235.                                 <string>2.7.1</string>
  2236.                                 <key>parameter</key>
  2237.                                 <string></string>
  2238.                                 <key>property</key>
  2239.                                 <integer>3</integer>
  2240.                                 <key>propertyName</key>
  2241.                                 <string>Interface</string>
  2242.                                 <key>propertyValue</key>
  2243.                                 <string>Modem or PPPoE (ppp0)</string>
  2244.                                 <key>relation</key>
  2245.                                 <integer>0</integer>
  2246.                                 <key>relationName</key>
  2247.                                 <string>==</string>
  2248.                             </dict>
  2249.                         </array>
  2250.                         <key>enabled</key>
  2251.                         <string>0</string>
  2252.                         <key>filterAction</key>
  2253.                         <integer>0</integer>
  2254.                         <key>filterActionName</key>
  2255.                         <string>-></string>
  2256.                         <key>nodeName</key>
  2257.                         <string>Rate Limiting</string>
  2258.                         <key>nodeNumber</key>
  2259.                         <string>2.7</string>
  2260.                         <key>property</key>
  2261.                         <integer>0</integer>
  2262.                         <key>propertyName</key>
  2263.                         <string>Any</string>
  2264.                         <key>relation</key>
  2265.                         <integer>0</integer>
  2266.                         <key>relationName</key>
  2267.                         <string>==</string>
  2268.                     </dict>
  2269.                 </array>
  2270.                 <key>enabled</key>
  2271.                 <true/>
  2272.                 <key>expandedState</key>
  2273.                 <integer>1</integer>
  2274.                 <key>filterAction</key>
  2275.                 <integer>0</integer>
  2276.                 <key>filterActionName</key>
  2277.                 <string>-></string>
  2278.                 <key>nodeCount</key>
  2279.                 <integer>20</integer>
  2280.                 <key>nodeName</key>
  2281.                 <string>default last</string>
  2282.                 <key>nodeNumber</key>
  2283.                 <string>2</string>
  2284.                 <key>property</key>
  2285.                 <integer>0</integer>
  2286.                 <key>propertyName</key>
  2287.                 <string>Any</string>
  2288.                 <key>propertyValue</key>
  2289.                 <string></string>
  2290.                 <key>relation</key>
  2291.                 <integer>0</integer>
  2292.                 <key>relationName</key>
  2293.                 <string>==</string>
  2294.             </dict>
  2295.             <dict>
  2296.                 <key>enabled</key>
  2297.                 <integer>1</integer>
  2298.                 <key>filterAction</key>
  2299.                 <integer>0</integer>
  2300.                 <key>filterActionName</key>
  2301.                 <string>-></string>
  2302.                 <key>nodeName</key>
  2303.                 <string>exit count</string>
  2304.                 <key>nodeNumber</key>
  2305.                 <string>3</string>
  2306.                 <key>property</key>
  2307.                 <integer>0</integer>
  2308.                 <key>propertyName</key>
  2309.                 <string>Any</string>
  2310.                 <key>relation</key>
  2311.                 <integer>0</integer>
  2312.                 <key>relationName</key>
  2313.                 <string>==</string>
  2314.             </dict>
  2315.         </array>
  2316.         <key>filterAction</key>
  2317.         <integer>0</integer>
  2318.         <key>filterActionName</key>
  2319.         <string>-></string>
  2320.         <key>property</key>
  2321.         <integer>0</integer>
  2322.         <key>propertyName</key>
  2323.         <string>Any</string>
  2324.         <key>relation</key>
  2325.         <integer>0</integer>
  2326.         <key>relationName</key>
  2327.         <string>==</string>
  2328.     </dict>
  2329.     <key>SentryDocument_parameter</key>
  2330.     <integer>0</integer>
  2331.     <key>expandedState</key>
  2332.     <integer>1</integer>
  2333.     <key>filterActionName</key>
  2334.     <integer>0</integer>
  2335.     <key>nodeCount</key>
  2336.     <integer>28</integer>
  2337.     <key>propertyName</key>
  2338.     <integer>0</integer>
  2339.     <key>relationName</key>
  2340.     <integer>0</integer>
  2341. </dict>
  2342. </plist>
  2343.