home *** CD-ROM | disk | FTP | other *** search
/ sustworks.com / 2014.06.sustworks.com.tar / sustworks.com / IPNetSentryX_1.1.dmg / IPNetSentryX folder / QuickStart.nsy < prev    next >
Extensible Markup Language  |  2003-06-08  |  69KB  |  2,291 lines
  1. <?xml version="1.0" encoding="UTF-8"?>
  2. <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
  3. <plist version="1.0">
  4. <dict>
  5.     <key>SentryDocument_parameter</key>
  6.     <integer>1</integer>
  7.     <key>SentryDocument_triggerExpiration</key>
  8.     <string>3600</string>
  9.     <key>children</key>
  10.     <array>
  11.         <dict>
  12.             <key>children</key>
  13.             <array>
  14.                 <dict>
  15.                     <key>enabled</key>
  16.                     <string>1</string>
  17.                     <key>expandedState</key>
  18.                     <integer>1</integer>
  19.                     <key>filterAction</key>
  20.                     <integer>3</integer>
  21.                     <key>filterActionName</key>
  22.                     <string>Delete</string>
  23.                     <key>nodeCount</key>
  24.                     <string>1</string>
  25.                     <key>nodeName</key>
  26.                     <string>sneak around fragments</string>
  27.                     <key>nodeNumber</key>
  28.                     <string>1.1</string>
  29.                     <key>property</key>
  30.                     <integer>11</integer>
  31.                     <key>propertyName</key>
  32.                     <string>IPFragmentOffset</string>
  33.                     <key>propertyValue</key>
  34.                     <string>1-63</string>
  35.                     <key>relation</key>
  36.                     <integer>0</integer>
  37.                     <key>relationName</key>
  38.                     <string>==</string>
  39.                 </dict>
  40.                 <dict>
  41.                     <key>enabled</key>
  42.                     <string>1</string>
  43.                     <key>expandedState</key>
  44.                     <integer>1</integer>
  45.                     <key>filterAction</key>
  46.                     <integer>2</integer>
  47.                     <key>filterActionName</key>
  48.                     <string>Pass</string>
  49.                     <key>nodeCount</key>
  50.                     <string>1</string>
  51.                     <key>nodeName</key>
  52.                     <string>legitimate fragments</string>
  53.                     <key>nodeNumber</key>
  54.                     <string>1.2</string>
  55.                     <key>property</key>
  56.                     <integer>11</integer>
  57.                     <key>propertyName</key>
  58.                     <string>IPFragmentOffset</string>
  59.                     <key>propertyValue</key>
  60.                     <string>64</string>
  61.                     <key>relation</key>
  62.                     <integer>3</integer>
  63.                     <key>relationName</key>
  64.                     <string>>=</string>
  65.                 </dict>
  66.                 <dict>
  67.                     <key>children</key>
  68.                     <array>
  69.                         <dict>
  70.                             <key>enabled</key>
  71.                             <string>1</string>
  72.                             <key>expandedState</key>
  73.                             <integer>1</integer>
  74.                             <key>filterAction</key>
  75.                             <integer>2</integer>
  76.                             <key>filterActionName</key>
  77.                             <string>Pass</string>
  78.                             <key>nodeCount</key>
  79.                             <string>1</string>
  80.                             <key>nodeName</key>
  81.                             <string>allow legitimate</string>
  82.                             <key>nodeNumber</key>
  83.                             <string>1.3.1</string>
  84.                             <key>property</key>
  85.                             <integer>3</integer>
  86.                             <key>propertyName</key>
  87.                             <string>Interface</string>
  88.                             <key>propertyValue</key>
  89.                             <string>lo0 (Loopback)</string>
  90.                             <key>relation</key>
  91.                             <integer>0</integer>
  92.                             <key>relationName</key>
  93.                             <string>==</string>
  94.                         </dict>
  95.                         <dict>
  96.                             <key>enabled</key>
  97.                             <string>1</string>
  98.                             <key>expandedState</key>
  99.                             <integer>1</integer>
  100.                             <key>filterAction</key>
  101.                             <integer>3</integer>
  102.                             <key>filterActionName</key>
  103.                             <string>Delete</string>
  104.                             <key>nodeCount</key>
  105.                             <string>1</string>
  106.                             <key>nodeName</key>
  107.                             <string>delete spoofs</string>
  108.                             <key>nodeNumber</key>
  109.                             <string>1.3.2</string>
  110.                             <key>property</key>
  111.                             <integer>8</integer>
  112.                             <key>propertyName</key>
  113.                             <string>Source net</string>
  114.                             <key>propertyValue</key>
  115.                             <string>127.0.0.1/28</string>
  116.                             <key>relation</key>
  117.                             <integer>0</integer>
  118.                             <key>relationName</key>
  119.                             <string>==</string>
  120.                         </dict>
  121.                         <dict>
  122.                             <key>enabled</key>
  123.                             <true/>
  124.                             <key>expandedState</key>
  125.                             <integer>1</integer>
  126.                             <key>filterAction</key>
  127.                             <integer>3</integer>
  128.                             <key>filterActionName</key>
  129.                             <string>Delete</string>
  130.                             <key>nodeName</key>
  131.                             <string></string>
  132.                             <key>nodeNumber</key>
  133.                             <string>1.3.3</string>
  134.                             <key>property</key>
  135.                             <integer>9</integer>
  136.                             <key>propertyName</key>
  137.                             <string>Dest net</string>
  138.                             <key>propertyValue</key>
  139.                             <string>127.0.0.1/28</string>
  140.                             <key>relation</key>
  141.                             <integer>0</integer>
  142.                             <key>relationName</key>
  143.                             <string>==</string>
  144.                         </dict>
  145.                     </array>
  146.                     <key>enabled</key>
  147.                     <string>1</string>
  148.                     <key>expandedState</key>
  149.                     <integer>1</integer>
  150.                     <key>filterAction</key>
  151.                     <integer>0</integer>
  152.                     <key>filterActionName</key>
  153.                     <string>-></string>
  154.                     <key>nodeCount</key>
  155.                     <string>3</string>
  156.                     <key>nodeName</key>
  157.                     <string>loopback</string>
  158.                     <key>nodeNumber</key>
  159.                     <string>1.3</string>
  160.                     <key>property</key>
  161.                     <integer>0</integer>
  162.                     <key>propertyName</key>
  163.                     <string>Any</string>
  164.                     <key>propertyValue</key>
  165.                     <string></string>
  166.                     <key>relation</key>
  167.                     <integer>0</integer>
  168.                     <key>relationName</key>
  169.                     <string>==</string>
  170.                 </dict>
  171.                 <dict>
  172.                     <key>enabled</key>
  173.                     <string>1</string>
  174.                     <key>expandedState</key>
  175.                     <integer>1</integer>
  176.                     <key>filterAction</key>
  177.                     <integer>3</integer>
  178.                     <key>filterActionName</key>
  179.                     <string>Delete</string>
  180.                     <key>nodeName</key>
  181.                     <string>source route</string>
  182.                     <key>nodeNumber</key>
  183.                     <string>1.4</string>
  184.                     <key>property</key>
  185.                     <integer>12</integer>
  186.                     <key>propertyName</key>
  187.                     <string>IPOptions</string>
  188.                     <key>propertyValue</key>
  189.                     <string>3,9 (source route)</string>
  190.                     <key>relation</key>
  191.                     <integer>0</integer>
  192.                     <key>relationName</key>
  193.                     <string>==</string>
  194.                 </dict>
  195.             </array>
  196.             <key>enabled</key>
  197.             <string>1</string>
  198.             <key>filterAction</key>
  199.             <integer>0</integer>
  200.             <key>filterActionName</key>
  201.             <string>-></string>
  202.             <key>nodeCount</key>
  203.             <string>6</string>
  204.             <key>nodeName</key>
  205.             <string>default first</string>
  206.             <key>nodeNumber</key>
  207.             <string>1</string>
  208.             <key>property</key>
  209.             <integer>0</integer>
  210.             <key>propertyName</key>
  211.             <string>Any</string>
  212.             <key>propertyValue</key>
  213.             <string></string>
  214.             <key>relation</key>
  215.             <integer>0</integer>
  216.             <key>relationName</key>
  217.             <string>==</string>
  218.         </dict>
  219.         <dict>
  220.             <key>children</key>
  221.             <array>
  222.                 <dict>
  223.                     <key>children</key>
  224.                     <array>
  225.                         <dict>
  226.                             <key>children</key>
  227.                             <array>
  228.                                 <dict>
  229.                                     <key>enabled</key>
  230.                                     <integer>1</integer>
  231.                                     <key>expandedState</key>
  232.                                     <integer>1</integer>
  233.                                     <key>filterAction</key>
  234.                                     <integer>9</integer>
  235.                                     <key>filterActionName</key>
  236.                                     <string>Dont log</string>
  237.                                     <key>nodeNumber</key>
  238.                                     <string>2.1.1.1</string>
  239.                                     <key>property</key>
  240.                                     <integer>0</integer>
  241.                                     <key>propertyName</key>
  242.                                     <string>Any</string>
  243.                                     <key>relation</key>
  244.                                     <integer>0</integer>
  245.                                     <key>relationName</key>
  246.                                     <string>==</string>
  247.                                 </dict>
  248.                             </array>
  249.                             <key>enabled</key>
  250.                             <true/>
  251.                             <key>expandedState</key>
  252.                             <integer>1</integer>
  253.                             <key>filterAction</key>
  254.                             <integer>3</integer>
  255.                             <key>filterActionName</key>
  256.                             <string>Delete</string>
  257.                             <key>nodeCount</key>
  258.                             <integer>1</integer>
  259.                             <key>nodeName</key>
  260.                             <string>triggered address</string>
  261.                             <key>nodeNumber</key>
  262.                             <string>2.1.1</string>
  263.                             <key>property</key>
  264.                             <integer>4</integer>
  265.                             <key>propertyName</key>
  266.                             <string>Include</string>
  267.                             <key>propertyValue</key>
  268.                             <string>triggered</string>
  269.                             <key>relation</key>
  270.                             <integer>0</integer>
  271.                             <key>relationName</key>
  272.                             <string>==</string>
  273.                         </dict>
  274.                         <dict>
  275.                             <key>children</key>
  276.                             <array>
  277.                                 <dict>
  278.                                     <key>enabled</key>
  279.                                     <integer>1</integer>
  280.                                     <key>expandedState</key>
  281.                                     <integer>1</integer>
  282.                                     <key>filterAction</key>
  283.                                     <integer>10</integer>
  284.                                     <key>filterActionName</key>
  285.                                     <string>Alert</string>
  286.                                     <key>nodeName</key>
  287.                                     <string>finger print scan</string>
  288.                                     <key>nodeNumber</key>
  289.                                     <string>2.1.2.1</string>
  290.                                     <key>property</key>
  291.                                     <integer>0</integer>
  292.                                     <key>propertyName</key>
  293.                                     <string>Any</string>
  294.                                     <key>relation</key>
  295.                                     <integer>0</integer>
  296.                                     <key>relationName</key>
  297.                                     <string>==</string>
  298.                                 </dict>
  299.                             </array>
  300.                             <key>enabled</key>
  301.                             <true/>
  302.                             <key>expandedState</key>
  303.                             <integer>1</integer>
  304.                             <key>filterAction</key>
  305.                             <integer>6</integer>
  306.                             <key>filterActionName</key>
  307.                             <string>Trigger</string>
  308.                             <key>nodeCount</key>
  309.                             <integer>1</integer>
  310.                             <key>nodeName</key>
  311.                             <string>finger print</string>
  312.                             <key>nodeNumber</key>
  313.                             <string>2.1.2</string>
  314.                             <key>property</key>
  315.                             <integer>19</integer>
  316.                             <key>propertyName</key>
  317.                             <string>Dest port</string>
  318.                             <key>propertyValue</key>
  319.                             <string>0-5</string>
  320.                             <key>relation</key>
  321.                             <integer>0</integer>
  322.                             <key>relationName</key>
  323.                             <string>==</string>
  324.                         </dict>
  325.                         <dict>
  326.                             <key>children</key>
  327.                             <array>
  328.                                 <dict>
  329.                                     <key>enabled</key>
  330.                                     <integer>1</integer>
  331.                                     <key>expandedState</key>
  332.                                     <integer>1</integer>
  333.                                     <key>filterAction</key>
  334.                                     <integer>10</integer>
  335.                                     <key>filterActionName</key>
  336.                                     <string>Alert</string>
  337.                                     <key>nodeName</key>
  338.                                     <string>111 (RPC) probe</string>
  339.                                     <key>nodeNumber</key>
  340.                                     <string>2.1.3.1</string>
  341.                                     <key>property</key>
  342.                                     <integer>0</integer>
  343.                                     <key>propertyName</key>
  344.                                     <string>Any</string>
  345.                                     <key>relation</key>
  346.                                     <integer>0</integer>
  347.                                     <key>relationName</key>
  348.                                     <string>==</string>
  349.                                 </dict>
  350.                             </array>
  351.                             <key>enabled</key>
  352.                             <string>1</string>
  353.                             <key>expandedState</key>
  354.                             <integer>1</integer>
  355.                             <key>filterAction</key>
  356.                             <integer>6</integer>
  357.                             <key>filterActionName</key>
  358.                             <string>Trigger</string>
  359.                             <key>nodeCount</key>
  360.                             <string>1</string>
  361.                             <key>nodeName</key>
  362.                             <string></string>
  363.                             <key>nodeNumber</key>
  364.                             <string>2.1.3</string>
  365.                             <key>property</key>
  366.                             <integer>19</integer>
  367.                             <key>propertyName</key>
  368.                             <string>Dest port</string>
  369.                             <key>propertyValue</key>
  370.                             <string>111 (RPC)</string>
  371.                             <key>relation</key>
  372.                             <integer>0</integer>
  373.                             <key>relationName</key>
  374.                             <string>==</string>
  375.                         </dict>
  376.                         <dict>
  377.                             <key>children</key>
  378.                             <array>
  379.                                 <dict>
  380.                                     <key>enabled</key>
  381.                                     <integer>1</integer>
  382.                                     <key>expandedState</key>
  383.                                     <integer>1</integer>
  384.                                     <key>filterAction</key>
  385.                                     <integer>10</integer>
  386.                                     <key>filterActionName</key>
  387.                                     <string>Alert</string>
  388.                                     <key>nodeName</key>
  389.                                     <string>2049 (NFS) probe</string>
  390.                                     <key>nodeNumber</key>
  391.                                     <string>2.1.4.1</string>
  392.                                     <key>property</key>
  393.                                     <integer>0</integer>
  394.                                     <key>propertyName</key>
  395.                                     <string>Any</string>
  396.                                     <key>relation</key>
  397.                                     <integer>0</integer>
  398.                                     <key>relationName</key>
  399.                                     <string>==</string>
  400.                                 </dict>
  401.                             </array>
  402.                             <key>enabled</key>
  403.                             <true/>
  404.                             <key>expandedState</key>
  405.                             <integer>1</integer>
  406.                             <key>filterAction</key>
  407.                             <integer>6</integer>
  408.                             <key>filterActionName</key>
  409.                             <string>Trigger</string>
  410.                             <key>nodeNumber</key>
  411.                             <string>2.1.4</string>
  412.                             <key>property</key>
  413.                             <integer>19</integer>
  414.                             <key>propertyName</key>
  415.                             <string>Dest port</string>
  416.                             <key>propertyValue</key>
  417.                             <string>2049 (NFS)</string>
  418.                             <key>relation</key>
  419.                             <integer>0</integer>
  420.                             <key>relationName</key>
  421.                             <string>==</string>
  422.                         </dict>
  423.                         <dict>
  424.                             <key>children</key>
  425.                             <array>
  426.                                 <dict>
  427.                                     <key>children</key>
  428.                                     <array>
  429.                                         <dict>
  430.                                             <key>enabled</key>
  431.                                             <integer>1</integer>
  432.                                             <key>expandedState</key>
  433.                                             <integer>1</integer>
  434.                                             <key>filterAction</key>
  435.                                             <integer>10</integer>
  436.                                             <key>filterActionName</key>
  437.                                             <string>Alert</string>
  438.                                             <key>nodeName</key>
  439.                                             <string>23 (Telnet) probe</string>
  440.                                             <key>nodeNumber</key>
  441.                                             <string>2.1.5.1.1</string>
  442.                                             <key>property</key>
  443.                                             <integer>0</integer>
  444.                                             <key>propertyName</key>
  445.                                             <string>Any</string>
  446.                                             <key>relation</key>
  447.                                             <integer>0</integer>
  448.                                             <key>relationName</key>
  449.                                             <string>==</string>
  450.                                         </dict>
  451.                                     </array>
  452.                                     <key>enabled</key>
  453.                                     <string>1</string>
  454.                                     <key>expandedState</key>
  455.                                     <integer>1</integer>
  456.                                     <key>filterAction</key>
  457.                                     <integer>6</integer>
  458.                                     <key>filterActionName</key>
  459.                                     <string>Trigger</string>
  460.                                     <key>nodeCount</key>
  461.                                     <string>1</string>
  462.                                     <key>nodeNumber</key>
  463.                                     <string>2.1.5.1</string>
  464.                                     <key>property</key>
  465.                                     <integer>19</integer>
  466.                                     <key>propertyName</key>
  467.                                     <string>Dest port</string>
  468.                                     <key>propertyValue</key>
  469.                                     <string>23 (Telnet)</string>
  470.                                     <key>relation</key>
  471.                                     <integer>0</integer>
  472.                                     <key>relationName</key>
  473.                                     <string>==</string>
  474.                                 </dict>
  475.                                 <dict>
  476.                                     <key>children</key>
  477.                                     <array>
  478.                                         <dict>
  479.                                             <key>enabled</key>
  480.                                             <integer>1</integer>
  481.                                             <key>expandedState</key>
  482.                                             <integer>1</integer>
  483.                                             <key>filterAction</key>
  484.                                             <integer>10</integer>
  485.                                             <key>filterActionName</key>
  486.                                             <string>Alert</string>
  487.                                             <key>nodeName</key>
  488.                                             <string>25 (SMTP) probe</string>
  489.                                             <key>nodeNumber</key>
  490.                                             <string>2.1.5.2.1</string>
  491.                                             <key>property</key>
  492.                                             <integer>0</integer>
  493.                                             <key>propertyName</key>
  494.                                             <string>Any</string>
  495.                                             <key>relation</key>
  496.                                             <integer>0</integer>
  497.                                             <key>relationName</key>
  498.                                             <string>==</string>
  499.                                         </dict>
  500.                                     </array>
  501.                                     <key>enabled</key>
  502.                                     <string>1</string>
  503.                                     <key>expandedState</key>
  504.                                     <integer>1</integer>
  505.                                     <key>filterAction</key>
  506.                                     <integer>6</integer>
  507.                                     <key>filterActionName</key>
  508.                                     <string>Trigger</string>
  509.                                     <key>nodeCount</key>
  510.                                     <string>1</string>
  511.                                     <key>nodeNumber</key>
  512.                                     <string>2.1.5.2</string>
  513.                                     <key>property</key>
  514.                                     <integer>19</integer>
  515.                                     <key>propertyName</key>
  516.                                     <string>Dest port</string>
  517.                                     <key>propertyValue</key>
  518.                                     <string>25 (SMTP)</string>
  519.                                     <key>relation</key>
  520.                                     <integer>0</integer>
  521.                                     <key>relationName</key>
  522.                                     <string>==</string>
  523.                                 </dict>
  524.                                 <dict>
  525.                                     <key>children</key>
  526.                                     <array>
  527.                                         <dict>
  528.                                             <key>enabled</key>
  529.                                             <integer>1</integer>
  530.                                             <key>expandedState</key>
  531.                                             <integer>1</integer>
  532.                                             <key>filterAction</key>
  533.                                             <integer>10</integer>
  534.                                             <key>filterActionName</key>
  535.                                             <string>Alert</string>
  536.                                             <key>nodeName</key>
  537.                                             <string>79 (Finger) probe</string>
  538.                                             <key>nodeNumber</key>
  539.                                             <string>2.1.5.3.1</string>
  540.                                             <key>property</key>
  541.                                             <integer>0</integer>
  542.                                             <key>propertyName</key>
  543.                                             <string>Any</string>
  544.                                             <key>relation</key>
  545.                                             <integer>0</integer>
  546.                                             <key>relationName</key>
  547.                                             <string>==</string>
  548.                                         </dict>
  549.                                     </array>
  550.                                     <key>enabled</key>
  551.                                     <string>1</string>
  552.                                     <key>expandedState</key>
  553.                                     <integer>1</integer>
  554.                                     <key>filterAction</key>
  555.                                     <integer>6</integer>
  556.                                     <key>filterActionName</key>
  557.                                     <string>Trigger</string>
  558.                                     <key>nodeCount</key>
  559.                                     <string>1</string>
  560.                                     <key>nodeName</key>
  561.                                     <string></string>
  562.                                     <key>nodeNumber</key>
  563.                                     <string>2.1.5.3</string>
  564.                                     <key>property</key>
  565.                                     <integer>19</integer>
  566.                                     <key>propertyName</key>
  567.                                     <string>Dest port</string>
  568.                                     <key>propertyValue</key>
  569.                                     <string>79 (Finger)</string>
  570.                                     <key>relation</key>
  571.                                     <integer>0</integer>
  572.                                     <key>relationName</key>
  573.                                     <string>==</string>
  574.                                 </dict>
  575.                                 <dict>
  576.                                     <key>children</key>
  577.                                     <array>
  578.                                         <dict>
  579.                                             <key>enabled</key>
  580.                                             <integer>1</integer>
  581.                                             <key>expandedState</key>
  582.                                             <integer>1</integer>
  583.                                             <key>filterAction</key>
  584.                                             <integer>10</integer>
  585.                                             <key>filterActionName</key>
  586.                                             <string>Alert</string>
  587.                                             <key>nodeName</key>
  588.                                             <string>110 (pop3) probe</string>
  589.                                             <key>nodeNumber</key>
  590.                                             <string>2.1.5.4.1</string>
  591.                                             <key>property</key>
  592.                                             <integer>0</integer>
  593.                                             <key>propertyName</key>
  594.                                             <string>Any</string>
  595.                                             <key>relation</key>
  596.                                             <integer>0</integer>
  597.                                             <key>relationName</key>
  598.                                             <string>==</string>
  599.                                         </dict>
  600.                                     </array>
  601.                                     <key>enabled</key>
  602.                                     <string>1</string>
  603.                                     <key>expandedState</key>
  604.                                     <integer>1</integer>
  605.                                     <key>filterAction</key>
  606.                                     <integer>6</integer>
  607.                                     <key>filterActionName</key>
  608.                                     <string>Trigger</string>
  609.                                     <key>nodeCount</key>
  610.                                     <string>1</string>
  611.                                     <key>nodeName</key>
  612.                                     <string></string>
  613.                                     <key>nodeNumber</key>
  614.                                     <string>2.1.5.4</string>
  615.                                     <key>property</key>
  616.                                     <integer>19</integer>
  617.                                     <key>propertyName</key>
  618.                                     <string>Dest port</string>
  619.                                     <key>propertyValue</key>
  620.                                     <string>110 (pop3)</string>
  621.                                     <key>relation</key>
  622.                                     <integer>0</integer>
  623.                                     <key>relationName</key>
  624.                                     <string>==</string>
  625.                                 </dict>
  626.                                 <dict>
  627.                                     <key>children</key>
  628.                                     <array>
  629.                                         <dict>
  630.                                             <key>enabled</key>
  631.                                             <integer>1</integer>
  632.                                             <key>expandedState</key>
  633.                                             <integer>1</integer>
  634.                                             <key>filterAction</key>
  635.                                             <integer>10</integer>
  636.                                             <key>filterActionName</key>
  637.                                             <string>Alert</string>
  638.                                             <key>nodeName</key>
  639.                                             <string>113 (AUTH) probe</string>
  640.                                             <key>nodeNumber</key>
  641.                                             <string>2.1.5.5.1</string>
  642.                                             <key>property</key>
  643.                                             <integer>0</integer>
  644.                                             <key>propertyName</key>
  645.                                             <string>Any</string>
  646.                                             <key>relation</key>
  647.                                             <integer>0</integer>
  648.                                             <key>relationName</key>
  649.                                             <string>==</string>
  650.                                         </dict>
  651.                                     </array>
  652.                                     <key>enabled</key>
  653.                                     <string>1</string>
  654.                                     <key>expandedState</key>
  655.                                     <integer>1</integer>
  656.                                     <key>filterAction</key>
  657.                                     <integer>4</integer>
  658.                                     <key>filterActionName</key>
  659.                                     <string>Reject</string>
  660.                                     <key>nodeCount</key>
  661.                                     <string>1</string>
  662.                                     <key>nodeNumber</key>
  663.                                     <string>2.1.5.5</string>
  664.                                     <key>property</key>
  665.                                     <integer>19</integer>
  666.                                     <key>propertyName</key>
  667.                                     <string>Dest port</string>
  668.                                     <key>propertyValue</key>
  669.                                     <string>113 (AUTH)</string>
  670.                                     <key>relation</key>
  671.                                     <integer>0</integer>
  672.                                     <key>relationName</key>
  673.                                     <string>==</string>
  674.                                 </dict>
  675.                             </array>
  676.                             <key>enabled</key>
  677.                             <true/>
  678.                             <key>expandedState</key>
  679.                             <integer>1</integer>
  680.                             <key>filterAction</key>
  681.                             <integer>0</integer>
  682.                             <key>filterActionName</key>
  683.                             <string>-></string>
  684.                             <key>nodeNumber</key>
  685.                             <string>2.1.5</string>
  686.                             <key>property</key>
  687.                             <integer>10</integer>
  688.                             <key>propertyName</key>
  689.                             <string>Protocol</string>
  690.                             <key>propertyValue</key>
  691.                             <string>6 (TCP)</string>
  692.                             <key>relation</key>
  693.                             <integer>0</integer>
  694.                             <key>relationName</key>
  695.                             <string>==</string>
  696.                         </dict>
  697.                         <dict>
  698.                             <key>children</key>
  699.                             <array>
  700.                                 <dict>
  701.                                     <key>children</key>
  702.                                     <array>
  703.                                         <dict>
  704.                                             <key>enabled</key>
  705.                                             <integer>1</integer>
  706.                                             <key>expandedState</key>
  707.                                             <integer>1</integer>
  708.                                             <key>filterAction</key>
  709.                                             <integer>10</integer>
  710.                                             <key>filterActionName</key>
  711.                                             <string>Alert</string>
  712.                                             <key>nodeName</key>
  713.                                             <string>7 (Echo) probe</string>
  714.                                             <key>nodeNumber</key>
  715.                                             <string>2.1.6.1.1</string>
  716.                                             <key>property</key>
  717.                                             <integer>0</integer>
  718.                                             <key>propertyName</key>
  719.                                             <string>Any</string>
  720.                                             <key>relation</key>
  721.                                             <integer>0</integer>
  722.                                             <key>relationName</key>
  723.                                             <string>==</string>
  724.                                         </dict>
  725.                                     </array>
  726.                                     <key>enabled</key>
  727.                                     <string>1</string>
  728.                                     <key>expandedState</key>
  729.                                     <integer>1</integer>
  730.                                     <key>filterAction</key>
  731.                                     <integer>6</integer>
  732.                                     <key>filterActionName</key>
  733.                                     <string>Trigger</string>
  734.                                     <key>nodeNumber</key>
  735.                                     <string>2.1.6.1</string>
  736.                                     <key>property</key>
  737.                                     <integer>19</integer>
  738.                                     <key>propertyName</key>
  739.                                     <string>Dest port</string>
  740.                                     <key>propertyValue</key>
  741.                                     <string>7 (Echo)</string>
  742.                                     <key>relation</key>
  743.                                     <integer>0</integer>
  744.                                     <key>relationName</key>
  745.                                     <string>==</string>
  746.                                 </dict>
  747.                                 <dict>
  748.                                     <key>children</key>
  749.                                     <array>
  750.                                         <dict>
  751.                                             <key>children</key>
  752.                                             <array>
  753.                                                 <dict>
  754.                                                     <key>enabled</key>
  755.                                                     <true/>
  756.                                                     <key>expandedState</key>
  757.                                                     <integer>1</integer>
  758.                                                     <key>filterAction</key>
  759.                                                     <integer>10</integer>
  760.                                                     <key>filterActionName</key>
  761.                                                     <string>Alert</string>
  762.                                                     <key>nodeName</key>
  763.                                                     <string>67 (DHCP Server) probe</string>
  764.                                                     <key>nodeNumber</key>
  765.                                                     <string>2.1.6.2.1.1</string>
  766.                                                     <key>property</key>
  767.                                                     <integer>0</integer>
  768.                                                     <key>propertyName</key>
  769.                                                     <string>Any</string>
  770.                                                     <key>relation</key>
  771.                                                     <integer>0</integer>
  772.                                                     <key>relationName</key>
  773.                                                     <string>==</string>
  774.                                                 </dict>
  775.                                             </array>
  776.                                             <key>enabled</key>
  777.                                             <integer>1</integer>
  778.                                             <key>expandedState</key>
  779.                                             <integer>1</integer>
  780.                                             <key>filterAction</key>
  781.                                             <integer>6</integer>
  782.                                             <key>filterActionName</key>
  783.                                             <string>Trigger</string>
  784.                                             <key>nodeNumber</key>
  785.                                             <string>2.1.6.2.1</string>
  786.                                             <key>property</key>
  787.                                             <integer>9</integer>
  788.                                             <key>propertyName</key>
  789.                                             <string>Dest net</string>
  790.                                             <key>propertyValue</key>
  791.                                             <string>255.255.255.255/32</string>
  792.                                             <key>relation</key>
  793.                                             <integer>1</integer>
  794.                                             <key>relationName</key>
  795.                                             <string>!=</string>
  796.                                         </dict>
  797.                                     </array>
  798.                                     <key>enabled</key>
  799.                                     <string>1</string>
  800.                                     <key>expandedState</key>
  801.                                     <integer>1</integer>
  802.                                     <key>filterAction</key>
  803.                                     <integer>0</integer>
  804.                                     <key>filterActionName</key>
  805.                                     <string>-></string>
  806.                                     <key>nodeCount</key>
  807.                                     <string>1</string>
  808.                                     <key>nodeName</key>
  809.                                     <string></string>
  810.                                     <key>nodeNumber</key>
  811.                                     <string>2.1.6.2</string>
  812.                                     <key>property</key>
  813.                                     <integer>19</integer>
  814.                                     <key>propertyName</key>
  815.                                     <string>Dest port</string>
  816.                                     <key>propertyValue</key>
  817.                                     <string>67 (DHCP Server)</string>
  818.                                     <key>relation</key>
  819.                                     <integer>0</integer>
  820.                                     <key>relationName</key>
  821.                                     <string>==</string>
  822.                                 </dict>
  823.                                 <dict>
  824.                                     <key>children</key>
  825.                                     <array>
  826.                                         <dict>
  827.                                             <key>enabled</key>
  828.                                             <true/>
  829.                                             <key>expandedState</key>
  830.                                             <integer>1</integer>
  831.                                             <key>filterAction</key>
  832.                                             <integer>9</integer>
  833.                                             <key>filterActionName</key>
  834.                                             <string>Dont log</string>
  835.                                             <key>nodeName</key>
  836.                                             <string>ignore silently</string>
  837.                                             <key>nodeNumber</key>
  838.                                             <string>2.1.6.3.1</string>
  839.                                             <key>property</key>
  840.                                             <integer>0</integer>
  841.                                             <key>propertyName</key>
  842.                                             <string>Any</string>
  843.                                             <key>relation</key>
  844.                                             <integer>0</integer>
  845.                                             <key>relationName</key>
  846.                                             <string>==</string>
  847.                                         </dict>
  848.                                     </array>
  849.                                     <key>enabled</key>
  850.                                     <string>1</string>
  851.                                     <key>expandedState</key>
  852.                                     <integer>1</integer>
  853.                                     <key>filterAction</key>
  854.                                     <integer>3</integer>
  855.                                     <key>filterActionName</key>
  856.                                     <string>Delete</string>
  857.                                     <key>nodeCount</key>
  858.                                     <string>1</string>
  859.                                     <key>nodeName</key>
  860.                                     <string>Windows Name Service</string>
  861.                                     <key>nodeNumber</key>
  862.                                     <string>2.1.6.3</string>
  863.                                     <key>property</key>
  864.                                     <integer>19</integer>
  865.                                     <key>propertyName</key>
  866.                                     <string>Dest port</string>
  867.                                     <key>propertyValue</key>
  868.                                     <string>137-139</string>
  869.                                     <key>relation</key>
  870.                                     <integer>0</integer>
  871.                                     <key>relationName</key>
  872.                                     <string>==</string>
  873.                                 </dict>
  874.                             </array>
  875.                             <key>enabled</key>
  876.                             <true/>
  877.                             <key>expandedState</key>
  878.                             <integer>1</integer>
  879.                             <key>filterAction</key>
  880.                             <integer>0</integer>
  881.                             <key>filterActionName</key>
  882.                             <string>-></string>
  883.                             <key>nodeName</key>
  884.                             <string></string>
  885.                             <key>nodeNumber</key>
  886.                             <string>2.1.6</string>
  887.                             <key>property</key>
  888.                             <integer>10</integer>
  889.                             <key>propertyName</key>
  890.                             <string>Protocol</string>
  891.                             <key>propertyValue</key>
  892.                             <string>17 (UDP)</string>
  893.                             <key>relation</key>
  894.                             <integer>0</integer>
  895.                             <key>relationName</key>
  896.                             <string>==</string>
  897.                         </dict>
  898.                     </array>
  899.                     <key>enabled</key>
  900.                     <true/>
  901.                     <key>filterAction</key>
  902.                     <integer>0</integer>
  903.                     <key>filterActionName</key>
  904.                     <string>-></string>
  905.                     <key>nodeCount</key>
  906.                     <integer>12</integer>
  907.                     <key>nodeName</key>
  908.                     <string>suspicious activity</string>
  909.                     <key>nodeNumber</key>
  910.                     <string>2.1</string>
  911.                     <key>property</key>
  912.                     <integer>2</integer>
  913.                     <key>propertyName</key>
  914.                     <string>Direction</string>
  915.                     <key>propertyValue</key>
  916.                     <string>inbound</string>
  917.                     <key>relation</key>
  918.                     <integer>0</integer>
  919.                     <key>relationName</key>
  920.                     <string>==</string>
  921.                 </dict>
  922.                 <dict>
  923.                     <key>children</key>
  924.                     <array>
  925.                         <dict>
  926.                             <key>children</key>
  927.                             <array>
  928.                                 <dict>
  929.                                     <key>children</key>
  930.                                     <array>
  931.                                         <dict>
  932.                                             <key>enabled</key>
  933.                                             <string>1</string>
  934.                                             <key>expandedState</key>
  935.                                             <integer>1</integer>
  936.                                             <key>filterAction</key>
  937.                                             <integer>5</integer>
  938.                                             <key>filterActionName</key>
  939.                                             <string>Drop connection</string>
  940.                                             <key>nodeName</key>
  941.                                             <string>Worm</string>
  942.                                             <key>nodeNumber</key>
  943.                                             <string>2.2.1.1.1</string>
  944.                                             <key>property</key>
  945.                                             <integer>20</integer>
  946.                                             <key>propertyName</key>
  947.                                             <string>Data content</string>
  948.                                             <key>propertyValue</key>
  949.                                             <string>winnt</string>
  950.                                             <key>relation</key>
  951.                                             <integer>2</integer>
  952.                                             <key>relationName</key>
  953.                                             <string>a=A</string>
  954.                                         </dict>
  955.                                         <dict>
  956.                                             <key>enabled</key>
  957.                                             <true/>
  958.                                             <key>expandedState</key>
  959.                                             <integer>1</integer>
  960.                                             <key>filterAction</key>
  961.                                             <integer>5</integer>
  962.                                             <key>filterActionName</key>
  963.                                             <string>Drop connection</string>
  964.                                             <key>nodeCount</key>
  965.                                             <integer>1</integer>
  966.                                             <key>nodeName</key>
  967.                                             <string>Code Red Worm</string>
  968.                                             <key>nodeNumber</key>
  969.                                             <string>2.2.1.1.2</string>
  970.                                             <key>property</key>
  971.                                             <integer>20</integer>
  972.                                             <key>propertyName</key>
  973.                                             <string>Data content</string>
  974.                                             <key>propertyValue</key>
  975.                                             <string>default.ida</string>
  976.                                             <key>relation</key>
  977.                                             <integer>2</integer>
  978.                                             <key>relationName</key>
  979.                                             <string>a=A</string>
  980.                                         </dict>
  981.                                         <dict>
  982.                                             <key>enabled</key>
  983.                                             <true/>
  984.                                             <key>expandedState</key>
  985.                                             <integer>1</integer>
  986.                                             <key>filterAction</key>
  987.                                             <integer>5</integer>
  988.                                             <key>filterActionName</key>
  989.                                             <string>Drop connection</string>
  990.                                             <key>nodeName</key>
  991.                                             <string>Worm</string>
  992.                                             <key>nodeNumber</key>
  993.                                             <string>2.2.1.1.3</string>
  994.                                             <key>property</key>
  995.                                             <integer>20</integer>
  996.                                             <key>propertyName</key>
  997.                                             <string>Data content</string>
  998.                                             <key>propertyValue</key>
  999.                                             <string>msadc</string>
  1000.                                             <key>relation</key>
  1001.                                             <integer>2</integer>
  1002.                                             <key>relationName</key>
  1003.                                             <string>a=A</string>
  1004.                                         </dict>
  1005.                                         <dict>
  1006.                                             <key>enabled</key>
  1007.                                             <true/>
  1008.                                             <key>expandedState</key>
  1009.                                             <integer>1</integer>
  1010.                                             <key>filterAction</key>
  1011.                                             <integer>5</integer>
  1012.                                             <key>filterActionName</key>
  1013.                                             <string>Drop connection</string>
  1014.                                             <key>nodeName</key>
  1015.                                             <string>Worm</string>
  1016.                                             <key>nodeNumber</key>
  1017.                                             <string>2.2.1.1.4</string>
  1018.                                             <key>property</key>
  1019.                                             <integer>20</integer>
  1020.                                             <key>propertyName</key>
  1021.                                             <string>Data content</string>
  1022.                                             <key>propertyValue</key>
  1023.                                             <string>_vti_bin</string>
  1024.                                             <key>relation</key>
  1025.                                             <integer>2</integer>
  1026.                                             <key>relationName</key>
  1027.                                             <string>a=A</string>
  1028.                                         </dict>
  1029.                                         <dict>
  1030.                                             <key>enabled</key>
  1031.                                             <true/>
  1032.                                             <key>expandedState</key>
  1033.                                             <integer>1</integer>
  1034.                                             <key>filterAction</key>
  1035.                                             <integer>5</integer>
  1036.                                             <key>filterActionName</key>
  1037.                                             <string>Drop connection</string>
  1038.                                             <key>nodeName</key>
  1039.                                             <string>Worm</string>
  1040.                                             <key>nodeNumber</key>
  1041.                                             <string>2.2.1.1.5</string>
  1042.                                             <key>property</key>
  1043.                                             <integer>20</integer>
  1044.                                             <key>propertyName</key>
  1045.                                             <string>Data content</string>
  1046.                                             <key>propertyValue</key>
  1047.                                             <string>_mem_bin</string>
  1048.                                             <key>relation</key>
  1049.                                             <integer>2</integer>
  1050.                                             <key>relationName</key>
  1051.                                             <string>a=A</string>
  1052.                                         </dict>
  1053.                                         <dict>
  1054.                                             <key>enabled</key>
  1055.                                             <true/>
  1056.                                             <key>expandedState</key>
  1057.                                             <integer>1</integer>
  1058.                                             <key>filterAction</key>
  1059.                                             <integer>5</integer>
  1060.                                             <key>filterActionName</key>
  1061.                                             <string>Drop connection</string>
  1062.                                             <key>nodeCount</key>
  1063.                                             <integer>1</integer>
  1064.                                             <key>nodeName</key>
  1065.                                             <string>Nimda</string>
  1066.                                             <key>nodeNumber</key>
  1067.                                             <string>2.2.1.1.6</string>
  1068.                                             <key>property</key>
  1069.                                             <integer>20</integer>
  1070.                                             <key>propertyName</key>
  1071.                                             <string>Data content</string>
  1072.                                             <key>propertyValue</key>
  1073.                                             <string>root.exe</string>
  1074.                                             <key>relation</key>
  1075.                                             <integer>2</integer>
  1076.                                             <key>relationName</key>
  1077.                                             <string>a=A</string>
  1078.                                         </dict>
  1079.                                         <dict>
  1080.                                             <key>enabled</key>
  1081.                                             <true/>
  1082.                                             <key>expandedState</key>
  1083.                                             <integer>1</integer>
  1084.                                             <key>filterAction</key>
  1085.                                             <integer>5</integer>
  1086.                                             <key>filterActionName</key>
  1087.                                             <string>Drop connection</string>
  1088.                                             <key>nodeCount</key>
  1089.                                             <integer>1</integer>
  1090.                                             <key>nodeName</key>
  1091.                                             <string>Nimda</string>
  1092.                                             <key>nodeNumber</key>
  1093.                                             <string>2.2.1.1.7</string>
  1094.                                             <key>property</key>
  1095.                                             <integer>20</integer>
  1096.                                             <key>propertyName</key>
  1097.                                             <string>Data content</string>
  1098.                                             <key>propertyValue</key>
  1099.                                             <string>scripts</string>
  1100.                                             <key>relation</key>
  1101.                                             <integer>2</integer>
  1102.                                             <key>relationName</key>
  1103.                                             <string>a=A</string>
  1104.                                         </dict>
  1105.                                         <dict>
  1106.                                             <key>enabled</key>
  1107.                                             <true/>
  1108.                                             <key>expandedState</key>
  1109.                                             <integer>1</integer>
  1110.                                             <key>filterAction</key>
  1111.                                             <integer>5</integer>
  1112.                                             <key>filterActionName</key>
  1113.                                             <string>Drop connection</string>
  1114.                                             <key>nodeCount</key>
  1115.                                             <integer>1</integer>
  1116.                                             <key>nodeName</key>
  1117.                                             <string>FMP_Hack Attempt</string>
  1118.                                             <key>nodeNumber</key>
  1119.                                             <string>2.2.1.1.8</string>
  1120.                                             <key>property</key>
  1121.                                             <integer>20</integer>
  1122.                                             <key>propertyName</key>
  1123.                                             <string>Data content</string>
  1124.                                             <key>propertyValue</key>
  1125.                                             <string>[0:64]&-format=-raw&</string>
  1126.                                             <key>relation</key>
  1127.                                             <integer>2</integer>
  1128.                                             <key>relationName</key>
  1129.                                             <string>a=A</string>
  1130.                                         </dict>
  1131.                                     </array>
  1132.                                     <key>enabled</key>
  1133.                                     <true/>
  1134.                                     <key>expandedState</key>
  1135.                                     <integer>1</integer>
  1136.                                     <key>filterAction</key>
  1137.                                     <integer>0</integer>
  1138.                                     <key>filterActionName</key>
  1139.                                     <string>-></string>
  1140.                                     <key>nodeCount</key>
  1141.                                     <integer>5</integer>
  1142.                                     <key>nodeNumber</key>
  1143.                                     <string>2.2.1.1</string>
  1144.                                     <key>property</key>
  1145.                                     <integer>19</integer>
  1146.                                     <key>propertyName</key>
  1147.                                     <string>Dest port</string>
  1148.                                     <key>propertyValue</key>
  1149.                                     <string>80 (HTTP)</string>
  1150.                                     <key>relation</key>
  1151.                                     <integer>0</integer>
  1152.                                     <key>relationName</key>
  1153.                                     <string>==</string>
  1154.                                 </dict>
  1155.                             </array>
  1156.                             <key>enabled</key>
  1157.                             <true/>
  1158.                             <key>expandedState</key>
  1159.                             <integer>1</integer>
  1160.                             <key>filterAction</key>
  1161.                             <integer>0</integer>
  1162.                             <key>filterActionName</key>
  1163.                             <string>-></string>
  1164.                             <key>nodeCount</key>
  1165.                             <integer>6</integer>
  1166.                             <key>nodeNumber</key>
  1167.                             <string>2.2.1</string>
  1168.                             <key>property</key>
  1169.                             <integer>10</integer>
  1170.                             <key>propertyName</key>
  1171.                             <string>Protocol</string>
  1172.                             <key>propertyValue</key>
  1173.                             <string>6 (TCP)</string>
  1174.                             <key>relation</key>
  1175.                             <integer>0</integer>
  1176.                             <key>relationName</key>
  1177.                             <string>==</string>
  1178.                         </dict>
  1179.                     </array>
  1180.                     <key>enabled</key>
  1181.                     <true/>
  1182.                     <key>filterAction</key>
  1183.                     <integer>0</integer>
  1184.                     <key>filterActionName</key>
  1185.                     <string>-></string>
  1186.                     <key>nodeCount</key>
  1187.                     <integer>7</integer>
  1188.                     <key>nodeName</key>
  1189.                     <string>server attacks</string>
  1190.                     <key>nodeNumber</key>
  1191.                     <string>2.2</string>
  1192.                     <key>property</key>
  1193.                     <integer>2</integer>
  1194.                     <key>propertyName</key>
  1195.                     <string>Direction</string>
  1196.                     <key>propertyValue</key>
  1197.                     <string>inbound</string>
  1198.                     <key>relation</key>
  1199.                     <integer>0</integer>
  1200.                     <key>relationName</key>
  1201.                     <string>==</string>
  1202.                 </dict>
  1203.                 <dict>
  1204.                     <key>children</key>
  1205.                     <array>
  1206.                         <dict>
  1207.                             <key>enabled</key>
  1208.                             <true/>
  1209.                             <key>expandedState</key>
  1210.                             <integer>1</integer>
  1211.                             <key>filterAction</key>
  1212.                             <integer>7</integer>
  1213.                             <key>filterActionName</key>
  1214.                             <string>Delay</string>
  1215.                             <key>nodeNumber</key>
  1216.                             <string>2.3.1</string>
  1217.                             <key>property</key>
  1218.                             <integer>16</integer>
  1219.                             <key>propertyName</key>
  1220.                             <string>TCP header flags</string>
  1221.                             <key>propertyValue</key>
  1222.                             <string>rst</string>
  1223.                             <key>relation</key>
  1224.                             <integer>0</integer>
  1225.                             <key>relationName</key>
  1226.                             <string>==</string>
  1227.                         </dict>
  1228.                     </array>
  1229.                     <key>enabled</key>
  1230.                     <string>1</string>
  1231.                     <key>filterAction</key>
  1232.                     <integer>0</integer>
  1233.                     <key>filterActionName</key>
  1234.                     <string>-></string>
  1235.                     <key>nodeName</key>
  1236.                     <string>promiscuous resets</string>
  1237.                     <key>nodeNumber</key>
  1238.                     <string>2.3</string>
  1239.                     <key>property</key>
  1240.                     <integer>2</integer>
  1241.                     <key>propertyName</key>
  1242.                     <string>Direction</string>
  1243.                     <key>propertyValue</key>
  1244.                     <string>inbound</string>
  1245.                     <key>relation</key>
  1246.                     <integer>0</integer>
  1247.                     <key>relationName</key>
  1248.                     <string>==</string>
  1249.                 </dict>
  1250.                 <dict>
  1251.                     <key>children</key>
  1252.                     <array>
  1253.                         <dict>
  1254.                             <key>children</key>
  1255.                             <array>
  1256.                                 <dict>
  1257.                                     <key>enabled</key>
  1258.                                     <string>1</string>
  1259.                                     <key>expandedState</key>
  1260.                                     <integer>1</integer>
  1261.                                     <key>filterAction</key>
  1262.                                     <integer>8</integer>
  1263.                                     <key>filterActionName</key>
  1264.                                     <string>Log</string>
  1265.                                     <key>nodeNumber</key>
  1266.                                     <string>2.4.1.1</string>
  1267.                                     <key>property</key>
  1268.                                     <integer>13</integer>
  1269.                                     <key>propertyName</key>
  1270.                                     <string>ICMP type</string>
  1271.                                     <key>propertyValue</key>
  1272.                                     <string>4 (source quench)</string>
  1273.                                     <key>relation</key>
  1274.                                     <integer>0</integer>
  1275.                                     <key>relationName</key>
  1276.                                     <string>==</string>
  1277.                                 </dict>
  1278.                                 <dict>
  1279.                                     <key>enabled</key>
  1280.                                     <string>1</string>
  1281.                                     <key>expandedState</key>
  1282.                                     <integer>1</integer>
  1283.                                     <key>filterAction</key>
  1284.                                     <integer>8</integer>
  1285.                                     <key>filterActionName</key>
  1286.                                     <string>Log</string>
  1287.                                     <key>nodeNumber</key>
  1288.                                     <string>2.4.1.2</string>
  1289.                                     <key>property</key>
  1290.                                     <integer>13</integer>
  1291.                                     <key>propertyName</key>
  1292.                                     <string>ICMP type</string>
  1293.                                     <key>propertyValue</key>
  1294.                                     <string>5 (redirect)</string>
  1295.                                     <key>relation</key>
  1296.                                     <integer>0</integer>
  1297.                                     <key>relationName</key>
  1298.                                     <string>==</string>
  1299.                                 </dict>
  1300.                                 <dict>
  1301.                                     <key>children</key>
  1302.                                     <array>
  1303.                                         <dict>
  1304.                                             <key>enabled</key>
  1305.                                             <string>1</string>
  1306.                                             <key>expandedState</key>
  1307.                                             <integer>1</integer>
  1308.                                             <key>filterAction</key>
  1309.                                             <integer>13</integer>
  1310.                                             <key>filterActionName</key>
  1311.                                             <string>Reset parent</string>
  1312.                                             <key>nodeNumber</key>
  1313.                                             <string>2.4.1.3.1</string>
  1314.                                             <key>property</key>
  1315.                                             <integer>27</integer>
  1316.                                             <key>propertyName</key>
  1317.                                             <string>Parent idle seconds</string>
  1318.                                             <key>propertyValue</key>
  1319.                                             <string>30</string>
  1320.                                             <key>relation</key>
  1321.                                             <integer>3</integer>
  1322.                                             <key>relationName</key>
  1323.                                             <string>>=</string>
  1324.                                         </dict>
  1325.                                         <dict>
  1326.                                             <key>enabled</key>
  1327.                                             <string>1</string>
  1328.                                             <key>expandedState</key>
  1329.                                             <integer>1</integer>
  1330.                                             <key>filterActionName</key>
  1331.                                             <string>Delete no log</string>
  1332.                                             <key>nodeName</key>
  1333.                                             <string>ping flood</string>
  1334.                                             <key>nodeNumber</key>
  1335.                                             <string>2.4.1.3.2</string>
  1336.                                             <key>property</key>
  1337.                                             <integer>28</integer>
  1338.                                             <key>propertyName</key>
  1339.                                             <string>Parent match count</string>
  1340.                                             <key>propertyValue</key>
  1341.                                             <string>50</string>
  1342.                                             <key>relation</key>
  1343.                                             <integer>3</integer>
  1344.                                             <key>relationName</key>
  1345.                                             <string>>=</string>
  1346.                                         </dict>
  1347.                                         <dict>
  1348.                                             <key>enabled</key>
  1349.                                             <string>1</string>
  1350.                                             <key>expandedState</key>
  1351.                                             <integer>1</integer>
  1352.                                             <key>filterAction</key>
  1353.                                             <integer>8</integer>
  1354.                                             <key>filterActionName</key>
  1355.                                             <string>Log</string>
  1356.                                             <key>nodeNumber</key>
  1357.                                             <string>2.4.1.3.3</string>
  1358.                                             <key>property</key>
  1359.                                             <integer>0</integer>
  1360.                                             <key>propertyName</key>
  1361.                                             <string>Any</string>
  1362.                                             <key>relation</key>
  1363.                                             <integer>0</integer>
  1364.                                             <key>relationName</key>
  1365.                                             <string>==</string>
  1366.                                         </dict>
  1367.                                     </array>
  1368.                                     <key>enabled</key>
  1369.                                     <string>1</string>
  1370.                                     <key>expandedState</key>
  1371.                                     <integer>1</integer>
  1372.                                     <key>filterAction</key>
  1373.                                     <integer>0</integer>
  1374.                                     <key>filterActionName</key>
  1375.                                     <string>-></string>
  1376.                                     <key>nodeNumber</key>
  1377.                                     <string>2.4.1.3</string>
  1378.                                     <key>property</key>
  1379.                                     <integer>13</integer>
  1380.                                     <key>propertyName</key>
  1381.                                     <string>ICMP type</string>
  1382.                                     <key>propertyValue</key>
  1383.                                     <string>8 (echo request)</string>
  1384.                                     <key>relation</key>
  1385.                                     <integer>0</integer>
  1386.                                     <key>relationName</key>
  1387.                                     <string>==</string>
  1388.                                 </dict>
  1389.                                 <dict>
  1390.                                     <key>enabled</key>
  1391.                                     <string>1</string>
  1392.                                     <key>expandedState</key>
  1393.                                     <integer>1</integer>
  1394.                                     <key>filterAction</key>
  1395.                                     <integer>8</integer>
  1396.                                     <key>filterActionName</key>
  1397.                                     <string>Log</string>
  1398.                                     <key>nodeNumber</key>
  1399.                                     <string>2.4.1.4</string>
  1400.                                     <key>property</key>
  1401.                                     <integer>13</integer>
  1402.                                     <key>propertyName</key>
  1403.                                     <string>ICMP type</string>
  1404.                                     <key>propertyValue</key>
  1405.                                     <string>12 (parameter problem)</string>
  1406.                                     <key>relation</key>
  1407.                                     <integer>0</integer>
  1408.                                     <key>relationName</key>
  1409.                                     <string>==</string>
  1410.                                 </dict>
  1411.                             </array>
  1412.                             <key>enabled</key>
  1413.                             <string>1</string>
  1414.                             <key>expandedState</key>
  1415.                             <integer>1</integer>
  1416.                             <key>filterAction</key>
  1417.                             <integer>0</integer>
  1418.                             <key>filterActionName</key>
  1419.                             <string>-></string>
  1420.                             <key>nodeName</key>
  1421.                             <string></string>
  1422.                             <key>nodeNumber</key>
  1423.                             <string>2.4.1</string>
  1424.                             <key>property</key>
  1425.                             <integer>2</integer>
  1426.                             <key>propertyName</key>
  1427.                             <string>Direction</string>
  1428.                             <key>propertyValue</key>
  1429.                             <string>inbound</string>
  1430.                             <key>relation</key>
  1431.                             <integer>0</integer>
  1432.                             <key>relationName</key>
  1433.                             <string>==</string>
  1434.                         </dict>
  1435.                     </array>
  1436.                     <key>enabled</key>
  1437.                     <string>1</string>
  1438.                     <key>filterAction</key>
  1439.                     <integer>0</integer>
  1440.                     <key>filterActionName</key>
  1441.                     <string>-></string>
  1442.                     <key>nodeName</key>
  1443.                     <string>ICMP Logger</string>
  1444.                     <key>nodeNumber</key>
  1445.                     <string>2.4</string>
  1446.                     <key>property</key>
  1447.                     <integer>10</integer>
  1448.                     <key>propertyName</key>
  1449.                     <string>Protocol</string>
  1450.                     <key>propertyValue</key>
  1451.                     <string>1 (ICMP)</string>
  1452.                     <key>relation</key>
  1453.                     <integer>0</integer>
  1454.                     <key>relationName</key>
  1455.                     <string>==</string>
  1456.                 </dict>
  1457.                 <dict>
  1458.                     <key>children</key>
  1459.                     <array>
  1460.                         <dict>
  1461.                             <key>children</key>
  1462.                             <array/>
  1463.                             <key>enabled</key>
  1464.                             <integer>1</integer>
  1465.                             <key>expandedState</key>
  1466.                             <integer>1</integer>
  1467.                             <key>filterAction</key>
  1468.                             <integer>12</integer>
  1469.                             <key>filterActionName</key>
  1470.                             <string>URL</string>
  1471.                             <key>nodeName</key>
  1472.                             <string>send probe(s)</string>
  1473.                             <key>nodeNumber</key>
  1474.                             <string>2.5.1</string>
  1475.                             <key>parameter</key>
  1476.                             <string>scan://192.168.0.2;limit=1;scanType=lookAround;scanProtocol=ping</string>
  1477.                             <key>property</key>
  1478.                             <integer>26</integer>
  1479.                             <key>propertyName</key>
  1480.                             <string>Idle seconds</string>
  1481.                             <key>propertyValue</key>
  1482.                             <string>60</string>
  1483.                             <key>relation</key>
  1484.                             <integer>3</integer>
  1485.                             <key>relationName</key>
  1486.                             <string>>=</string>
  1487.                         </dict>
  1488.                         <dict>
  1489.                             <key>children</key>
  1490.                             <array>
  1491.                                 <dict>
  1492.                                     <key>children</key>
  1493.                                     <array>
  1494.                                         <dict>
  1495.                                             <key>children</key>
  1496.                                             <array>
  1497.                                                 <dict>
  1498.                                                     <key>enabled</key>
  1499.                                                     <integer>1</integer>
  1500.                                                     <key>expandedState</key>
  1501.                                                     <integer>1</integer>
  1502.                                                     <key>filterAction</key>
  1503.                                                     <integer>11</integer>
  1504.                                                     <key>filterActionName</key>
  1505.                                                     <string>Email</string>
  1506.                                                     <key>nodeNumber</key>
  1507.                                                     <string>2.5.2.1.1.1</string>
  1508.                                                     <key>parameter</key>
  1509.                                                     <string>NetTalk server not responding</string>
  1510.                                                     <key>property</key>
  1511.                                                     <integer>28</integer>
  1512.                                                     <key>propertyName</key>
  1513.                                                     <string>Parent match count</string>
  1514.                                                     <key>propertyValue</key>
  1515.                                                     <string>1</string>
  1516.                                                     <key>relation</key>
  1517.                                                     <integer>0</integer>
  1518.                                                     <key>relationName</key>
  1519.                                                     <string>==</string>
  1520.                                                 </dict>
  1521.                                                 <dict>
  1522.                                                     <key>enabled</key>
  1523.                                                     <integer>1</integer>
  1524.                                                     <key>expandedState</key>
  1525.                                                     <integer>1</integer>
  1526.                                                     <key>filterAction</key>
  1527.                                                     <integer>13</integer>
  1528.                                                     <key>filterActionName</key>
  1529.                                                     <string>Reset parent</string>
  1530.                                                     <key>nodeNumber</key>
  1531.                                                     <string>2.5.2.1.1.2</string>
  1532.                                                     <key>parameter</key>
  1533.                                                     <string>restore when it comes back up</string>
  1534.                                                     <key>property</key>
  1535.                                                     <integer>27</integer>
  1536.                                                     <key>propertyName</key>
  1537.                                                     <string>Parent idle seconds</string>
  1538.                                                     <key>propertyValue</key>
  1539.                                                     <string>3600</string>
  1540.                                                     <key>relation</key>
  1541.                                                     <integer>3</integer>
  1542.                                                     <key>relationName</key>
  1543.                                                     <string>>=</string>
  1544.                                                 </dict>
  1545.                                             </array>
  1546.                                             <key>enabled</key>
  1547.                                             <integer>1</integer>
  1548.                                             <key>expandedState</key>
  1549.                                             <integer>1</integer>
  1550.                                             <key>filterAction</key>
  1551.                                             <integer>0</integer>
  1552.                                             <key>filterActionName</key>
  1553.                                             <string>-></string>
  1554.                                             <key>nodeName</key>
  1555.                                             <string>no response?</string>
  1556.                                             <key>nodeNumber</key>
  1557.                                             <string>2.5.2.1.1</string>
  1558.                                             <key>property</key>
  1559.                                             <integer>27</integer>
  1560.                                             <key>propertyName</key>
  1561.                                             <string>Parent idle seconds</string>
  1562.                                             <key>propertyValue</key>
  1563.                                             <string>200</string>
  1564.                                             <key>relation</key>
  1565.                                             <integer>3</integer>
  1566.                                             <key>relationName</key>
  1567.                                             <string>>=</string>
  1568.                                         </dict>
  1569.                                     </array>
  1570.                                     <key>enabled</key>
  1571.                                     <integer>1</integer>
  1572.                                     <key>expandedState</key>
  1573.                                     <integer>1</integer>
  1574.                                     <key>filterAction</key>
  1575.                                     <integer>0</integer>
  1576.                                     <key>filterActionName</key>
  1577.                                     <string>-></string>
  1578.                                     <key>nodeName</key>
  1579.                                     <string>NetTalk list server</string>
  1580.                                     <key>nodeNumber</key>
  1581.                                     <string>2.5.2.1</string>
  1582.                                     <key>property</key>
  1583.                                     <integer>8</integer>
  1584.                                     <key>propertyName</key>
  1585.                                     <string>Source net</string>
  1586.                                     <key>propertyValue</key>
  1587.                                     <string>192.168.0.2/32</string>
  1588.                                     <key>relation</key>
  1589.                                     <integer>0</integer>
  1590.                                     <key>relationName</key>
  1591.                                     <string>==</string>
  1592.                                 </dict>
  1593.                             </array>
  1594.                             <key>enabled</key>
  1595.                             <integer>1</integer>
  1596.                             <key>expandedState</key>
  1597.                             <integer>1</integer>
  1598.                             <key>filterAction</key>
  1599.                             <integer>0</integer>
  1600.                             <key>filterActionName</key>
  1601.                             <string>-></string>
  1602.                             <key>nodeNumber</key>
  1603.                             <string>2.5.2</string>
  1604.                             <key>property</key>
  1605.                             <integer>13</integer>
  1606.                             <key>propertyName</key>
  1607.                             <string>ICMP type</string>
  1608.                             <key>propertyValue</key>
  1609.                             <string>0 (echo reply)</string>
  1610.                             <key>relation</key>
  1611.                             <integer>0</integer>
  1612.                             <key>relationName</key>
  1613.                             <string>==</string>
  1614.                         </dict>
  1615.                     </array>
  1616.                     <key>enabled</key>
  1617.                     <false/>
  1618.                     <key>filterAction</key>
  1619.                     <integer>0</integer>
  1620.                     <key>filterActionName</key>
  1621.                     <string>-></string>
  1622.                     <key>nodeName</key>
  1623.                     <string>Check servers</string>
  1624.                     <key>nodeNumber</key>
  1625.                     <string>2.5</string>
  1626.                     <key>property</key>
  1627.                     <integer>2</integer>
  1628.                     <key>propertyName</key>
  1629.                     <string>Direction</string>
  1630.                     <key>propertyValue</key>
  1631.                     <string>inbound</string>
  1632.                     <key>relation</key>
  1633.                     <integer>0</integer>
  1634.                     <key>relationName</key>
  1635.                     <string>==</string>
  1636.                 </dict>
  1637.                 <dict>
  1638.                     <key>children</key>
  1639.                     <array>
  1640.                         <dict>
  1641.                             <key>children</key>
  1642.                             <array>
  1643.                                 <dict>
  1644.                                     <key>children</key>
  1645.                                     <array>
  1646.                                         <dict>
  1647.                                             <key>children</key>
  1648.                                             <array>
  1649.                                                 <dict>
  1650.                                                     <key>enabled</key>
  1651.                                                     <string>1</string>
  1652.                                                     <key>expandedState</key>
  1653.                                                     <integer>1</integer>
  1654.                                                     <key>filterAction</key>
  1655.                                                     <integer>2</integer>
  1656.                                                     <key>filterActionName</key>
  1657.                                                     <string>Pass</string>
  1658.                                                     <key>nodeNumber</key>
  1659.                                                     <string>2.6.1.1.1.1</string>
  1660.                                                     <key>property</key>
  1661.                                                     <integer>19</integer>
  1662.                                                     <key>propertyName</key>
  1663.                                                     <string>Dest port</string>
  1664.                                                     <key>propertyValue</key>
  1665.                                                     <string>548 (AFP (AppleShare))</string>
  1666.                                                     <key>relation</key>
  1667.                                                     <integer>0</integer>
  1668.                                                     <key>relationName</key>
  1669.                                                     <string>==</string>
  1670.                                                 </dict>
  1671.                                                 <dict>
  1672.                                                     <key>enabled</key>
  1673.                                                     <string>1</string>
  1674.                                                     <key>expandedState</key>
  1675.                                                     <integer>1</integer>
  1676.                                                     <key>filterAction</key>
  1677.                                                     <integer>2</integer>
  1678.                                                     <key>filterActionName</key>
  1679.                                                     <string>Pass</string>
  1680.                                                     <key>nodeNumber</key>
  1681.                                                     <string>2.6.1.1.1.2</string>
  1682.                                                     <key>property</key>
  1683.                                                     <integer>19</integer>
  1684.                                                     <key>propertyName</key>
  1685.                                                     <string>Dest port</string>
  1686.                                                     <key>propertyValue</key>
  1687.                                                     <string>427 (slp)</string>
  1688.                                                     <key>relation</key>
  1689.                                                     <integer>0</integer>
  1690.                                                     <key>relationName</key>
  1691.                                                     <string>==</string>
  1692.                                                 </dict>
  1693.                                             </array>
  1694.                                             <key>enabled</key>
  1695.                                             <string>0</string>
  1696.                                             <key>expandedState</key>
  1697.                                             <integer>1</integer>
  1698.                                             <key>filterAction</key>
  1699.                                             <integer>0</integer>
  1700.                                             <key>filterActionName</key>
  1701.                                             <string>-></string>
  1702.                                             <key>nodeName</key>
  1703.                                             <string>Personal File Sharing (548, 427)</string>
  1704.                                             <key>nodeNumber</key>
  1705.                                             <string>2.6.1.1.1</string>
  1706.                                             <key>property</key>
  1707.                                             <integer>0</integer>
  1708.                                             <key>propertyName</key>
  1709.                                             <string>Any</string>
  1710.                                             <key>propertyValue</key>
  1711.                                             <string></string>
  1712.                                             <key>relation</key>
  1713.                                             <integer>0</integer>
  1714.                                             <key>relationName</key>
  1715.                                             <string>==</string>
  1716.                                         </dict>
  1717.                                         <dict>
  1718.                                             <key>expandedState</key>
  1719.                                             <integer>1</integer>
  1720.                                             <key>filterAction</key>
  1721.                                             <integer>2</integer>
  1722.                                             <key>filterActionName</key>
  1723.                                             <string>Pass</string>
  1724.                                             <key>nodeName</key>
  1725.                                             <string>Windows File Sharing (139)</string>
  1726.                                             <key>nodeNumber</key>
  1727.                                             <string>2.6.1.1.2</string>
  1728.                                             <key>property</key>
  1729.                                             <integer>19</integer>
  1730.                                             <key>propertyName</key>
  1731.                                             <string>Dest port</string>
  1732.                                             <key>propertyValue</key>
  1733.                                             <string>139 (NETBIOS Session)</string>
  1734.                                             <key>relation</key>
  1735.                                             <integer>0</integer>
  1736.                                             <key>relationName</key>
  1737.                                             <string>==</string>
  1738.                                         </dict>
  1739.                                         <dict>
  1740.                                             <key>children</key>
  1741.                                             <array>
  1742.                                                 <dict>
  1743.                                                     <key>enabled</key>
  1744.                                                     <string>1</string>
  1745.                                                     <key>expandedState</key>
  1746.                                                     <integer>1</integer>
  1747.                                                     <key>filterAction</key>
  1748.                                                     <integer>2</integer>
  1749.                                                     <key>filterActionName</key>
  1750.                                                     <string>Pass</string>
  1751.                                                     <key>nodeNumber</key>
  1752.                                                     <string>2.6.1.1.3.1</string>
  1753.                                                     <key>property</key>
  1754.                                                     <integer>19</integer>
  1755.                                                     <key>propertyName</key>
  1756.                                                     <string>Dest port</string>
  1757.                                                     <key>propertyValue</key>
  1758.                                                     <string>80 (HTTP)</string>
  1759.                                                     <key>relation</key>
  1760.                                                     <integer>0</integer>
  1761.                                                     <key>relationName</key>
  1762.                                                     <string>==</string>
  1763.                                                 </dict>
  1764.                                                 <dict>
  1765.                                                     <key>enabled</key>
  1766.                                                     <string>1</string>
  1767.                                                     <key>expandedState</key>
  1768.                                                     <integer>1</integer>
  1769.                                                     <key>filterAction</key>
  1770.                                                     <integer>2</integer>
  1771.                                                     <key>filterActionName</key>
  1772.                                                     <string>Pass</string>
  1773.                                                     <key>nodeNumber</key>
  1774.                                                     <string>2.6.1.1.3.2</string>
  1775.                                                     <key>property</key>
  1776.                                                     <integer>19</integer>
  1777.                                                     <key>propertyName</key>
  1778.                                                     <string>Dest port</string>
  1779.                                                     <key>propertyValue</key>
  1780.                                                     <string>427 (slp)</string>
  1781.                                                     <key>relation</key>
  1782.                                                     <integer>0</integer>
  1783.                                                     <key>relationName</key>
  1784.                                                     <string>==</string>
  1785.                                                 </dict>
  1786.                                             </array>
  1787.                                             <key>enabled</key>
  1788.                                             <string>0</string>
  1789.                                             <key>expandedState</key>
  1790.                                             <integer>1</integer>
  1791.                                             <key>filterAction</key>
  1792.                                             <integer>0</integer>
  1793.                                             <key>filterActionName</key>
  1794.                                             <string>-></string>
  1795.                                             <key>nodeName</key>
  1796.                                             <string>Personal Web Sharing</string>
  1797.                                             <key>nodeNumber</key>
  1798.                                             <string>2.6.1.1.3</string>
  1799.                                             <key>property</key>
  1800.                                             <integer>0</integer>
  1801.                                             <key>propertyName</key>
  1802.                                             <string>Any</string>
  1803.                                             <key>relation</key>
  1804.                                             <integer>0</integer>
  1805.                                             <key>relationName</key>
  1806.                                             <string>==</string>
  1807.                                         </dict>
  1808.                                         <dict>
  1809.                                             <key>expandedState</key>
  1810.                                             <integer>1</integer>
  1811.                                             <key>filterAction</key>
  1812.                                             <integer>2</integer>
  1813.                                             <key>filterActionName</key>
  1814.                                             <string>Pass</string>
  1815.                                             <key>nodeName</key>
  1816.                                             <string>Remote Login - SSH (22)</string>
  1817.                                             <key>nodeNumber</key>
  1818.                                             <string>2.6.1.1.4</string>
  1819.                                             <key>property</key>
  1820.                                             <integer>19</integer>
  1821.                                             <key>propertyName</key>
  1822.                                             <string>Dest port</string>
  1823.                                             <key>propertyValue</key>
  1824.                                             <string>22 (ssh)</string>
  1825.                                             <key>relation</key>
  1826.                                             <integer>0</integer>
  1827.                                             <key>relationName</key>
  1828.                                             <string>==</string>
  1829.                                         </dict>
  1830.                                         <dict>
  1831.                                             <key>children</key>
  1832.                                             <array>
  1833.                                                 <dict>
  1834.                                                     <key>enabled</key>
  1835.                                                     <string>1</string>
  1836.                                                     <key>expandedState</key>
  1837.                                                     <integer>1</integer>
  1838.                                                     <key>filterAction</key>
  1839.                                                     <integer>2</integer>
  1840.                                                     <key>filterActionName</key>
  1841.                                                     <string>Pass</string>
  1842.                                                     <key>nodeNumber</key>
  1843.                                                     <string>2.6.1.1.5.1</string>
  1844.                                                     <key>property</key>
  1845.                                                     <integer>19</integer>
  1846.                                                     <key>propertyName</key>
  1847.                                                     <string>Dest port</string>
  1848.                                                     <key>propertyValue</key>
  1849.                                                     <string>20-21</string>
  1850.                                                     <key>relation</key>
  1851.                                                     <integer>0</integer>
  1852.                                                     <key>relationName</key>
  1853.                                                     <string>==</string>
  1854.                                                 </dict>
  1855.                                                 <dict>
  1856.                                                     <key>children</key>
  1857.                                                     <array>
  1858.                                                         <dict>
  1859.                                                             <key>enabled</key>
  1860.                                                             <string>1</string>
  1861.                                                             <key>expandedState</key>
  1862.                                                             <integer>1</integer>
  1863.                                                             <key>filterAction</key>
  1864.                                                             <integer>2</integer>
  1865.                                                             <key>filterActionName</key>
  1866.                                                             <string>Pass</string>
  1867.                                                             <key>nodeNumber</key>
  1868.                                                             <string>2.6.1.1.5.2.1</string>
  1869.                                                             <key>property</key>
  1870.                                                             <integer>19</integer>
  1871.                                                             <key>propertyName</key>
  1872.                                                             <string>Dest port</string>
  1873.                                                             <key>propertyValue</key>
  1874.                                                             <string>1024-65535</string>
  1875.                                                             <key>relation</key>
  1876.                                                             <integer>0</integer>
  1877.                                                             <key>relationName</key>
  1878.                                                             <string>==</string>
  1879.                                                         </dict>
  1880.                                                     </array>
  1881.                                                     <key>enabled</key>
  1882.                                                     <string>1</string>
  1883.                                                     <key>expandedState</key>
  1884.                                                     <integer>1</integer>
  1885.                                                     <key>filterAction</key>
  1886.                                                     <integer>0</integer>
  1887.                                                     <key>filterActionName</key>
  1888.                                                     <string>-></string>
  1889.                                                     <key>nodeNumber</key>
  1890.                                                     <string>2.6.1.1.5.2</string>
  1891.                                                     <key>property</key>
  1892.                                                     <integer>18</integer>
  1893.                                                     <key>propertyName</key>
  1894.                                                     <string>Source port</string>
  1895.                                                     <key>propertyValue</key>
  1896.                                                     <string>20-21</string>
  1897.                                                     <key>relation</key>
  1898.                                                     <integer>0</integer>
  1899.                                                     <key>relationName</key>
  1900.                                                     <string>==</string>
  1901.                                                 </dict>
  1902.                                             </array>
  1903.                                             <key>expandedState</key>
  1904.                                             <integer>1</integer>
  1905.                                             <key>filterAction</key>
  1906.                                             <integer>0</integer>
  1907.                                             <key>filterActionName</key>
  1908.                                             <string>-></string>
  1909.                                             <key>nodeName</key>
  1910.                                             <string>FTP Access (20-21) or 1024-65535 from 20-21)</string>
  1911.                                             <key>nodeNumber</key>
  1912.                                             <string>2.6.1.1.5</string>
  1913.                                             <key>property</key>
  1914.                                             <integer>0</integer>
  1915.                                             <key>propertyName</key>
  1916.                                             <string>Any</string>
  1917.                                             <key>relation</key>
  1918.                                             <integer>0</integer>
  1919.                                             <key>relationName</key>
  1920.                                             <string>==</string>
  1921.                                         </dict>
  1922.                                         <dict>
  1923.                                             <key>expandedState</key>
  1924.                                             <integer>1</integer>
  1925.                                             <key>filterAction</key>
  1926.                                             <integer>2</integer>
  1927.                                             <key>filterActionName</key>
  1928.                                             <string>Pass</string>
  1929.                                             <key>nodeName</key>
  1930.                                             <string>Remote Apple Events (3031)</string>
  1931.                                             <key>nodeNumber</key>
  1932.                                             <string>2.6.1.1.6</string>
  1933.                                             <key>property</key>
  1934.                                             <integer>19</integer>
  1935.                                             <key>propertyName</key>
  1936.                                             <string>Dest port</string>
  1937.                                             <key>propertyValue</key>
  1938.                                             <string>3031 (Program Linking)</string>
  1939.                                             <key>relation</key>
  1940.                                             <integer>0</integer>
  1941.                                             <key>relationName</key>
  1942.                                             <string>==</string>
  1943.                                         </dict>
  1944.                                         <dict>
  1945.                                             <key>expandedState</key>
  1946.                                             <integer>1</integer>
  1947.                                             <key>filterAction</key>
  1948.                                             <integer>2</integer>
  1949.                                             <key>filterActionName</key>
  1950.                                             <string>Pass</string>
  1951.                                             <key>nodeName</key>
  1952.                                             <string>Printer Sharing (631)</string>
  1953.                                             <key>nodeNumber</key>
  1954.                                             <string>2.6.1.1.7</string>
  1955.                                             <key>property</key>
  1956.                                             <integer>19</integer>
  1957.                                             <key>propertyName</key>
  1958.                                             <string>Dest port</string>
  1959.                                             <key>propertyValue</key>
  1960.                                             <string>631</string>
  1961.                                             <key>relation</key>
  1962.                                             <integer>0</integer>
  1963.                                             <key>relationName</key>
  1964.                                             <string>==</string>
  1965.                                         </dict>
  1966.                                         <dict>
  1967.                                             <key>expandedState</key>
  1968.                                             <integer>1</integer>
  1969.                                             <key>filterAction</key>
  1970.                                             <integer>2</integer>
  1971.                                             <key>filterActionName</key>
  1972.                                             <string>Pass</string>
  1973.                                             <key>nodeName</key>
  1974.                                             <string>AOL IM (5190)</string>
  1975.                                             <key>nodeNumber</key>
  1976.                                             <string>2.6.1.1.8</string>
  1977.                                             <key>property</key>
  1978.                                             <integer>19</integer>
  1979.                                             <key>propertyName</key>
  1980.                                             <string>Dest port</string>
  1981.                                             <key>propertyValue</key>
  1982.                                             <string>5190</string>
  1983.                                             <key>relation</key>
  1984.                                             <integer>0</integer>
  1985.                                             <key>relationName</key>
  1986.                                             <string>==</string>
  1987.                                         </dict>
  1988.                                         <dict>
  1989.                                             <key>expandedState</key>
  1990.                                             <integer>1</integer>
  1991.                                             <key>filterAction</key>
  1992.                                             <integer>2</integer>
  1993.                                             <key>filterActionName</key>
  1994.                                             <string>Pass</string>
  1995.                                             <key>nodeName</key>
  1996.                                             <string>Apple Remote Desktop (3283)</string>
  1997.                                             <key>nodeNumber</key>
  1998.                                             <string>2.6.1.1.9</string>
  1999.                                             <key>property</key>
  2000.                                             <integer>19</integer>
  2001.                                             <key>propertyName</key>
  2002.                                             <string>Dest port</string>
  2003.                                             <key>propertyValue</key>
  2004.                                             <string>3283 (ANAT)</string>
  2005.                                             <key>relation</key>
  2006.                                             <integer>0</integer>
  2007.                                             <key>relationName</key>
  2008.                                             <string>==</string>
  2009.                                         </dict>
  2010.                                         <dict>
  2011.                                             <key>expandedState</key>
  2012.                                             <integer>1</integer>
  2013.                                             <key>filterAction</key>
  2014.                                             <integer>2</integer>
  2015.                                             <key>filterActionName</key>
  2016.                                             <string>Pass</string>
  2017.                                             <key>nodeName</key>
  2018.                                             <string>Gnutella/Limewire (6346)</string>
  2019.                                             <key>nodeNumber</key>
  2020.                                             <string>2.6.1.1.10</string>
  2021.                                             <key>property</key>
  2022.                                             <integer>19</integer>
  2023.                                             <key>propertyName</key>
  2024.                                             <string>Dest port</string>
  2025.                                             <key>propertyValue</key>
  2026.                                             <string>6346</string>
  2027.                                             <key>relation</key>
  2028.                                             <integer>0</integer>
  2029.                                             <key>relationName</key>
  2030.                                             <string>==</string>
  2031.                                         </dict>
  2032.                                         <dict>
  2033.                                             <key>expandedState</key>
  2034.                                             <integer>1</integer>
  2035.                                             <key>filterAction</key>
  2036.                                             <integer>2</integer>
  2037.                                             <key>filterActionName</key>
  2038.                                             <string>Pass</string>
  2039.                                             <key>nodeName</key>
  2040.                                             <string>ICQ (4000)</string>
  2041.                                             <key>nodeNumber</key>
  2042.                                             <string>2.6.1.1.11</string>
  2043.                                             <key>property</key>
  2044.                                             <integer>19</integer>
  2045.                                             <key>propertyName</key>
  2046.                                             <string>Dest port</string>
  2047.                                             <key>propertyValue</key>
  2048.                                             <string>4000</string>
  2049.                                             <key>relation</key>
  2050.                                             <integer>0</integer>
  2051.                                             <key>relationName</key>
  2052.                                             <string>==</string>
  2053.                                         </dict>
  2054.                                         <dict>
  2055.                                             <key>expandedState</key>
  2056.                                             <integer>1</integer>
  2057.                                             <key>filterAction</key>
  2058.                                             <integer>2</integer>
  2059.                                             <key>filterActionName</key>
  2060.                                             <string>Pass</string>
  2061.                                             <key>nodeName</key>
  2062.                                             <string>IRC (104)</string>
  2063.                                             <key>nodeNumber</key>
  2064.                                             <string>2.6.1.1.12</string>
  2065.                                             <key>property</key>
  2066.                                             <integer>19</integer>
  2067.                                             <key>propertyName</key>
  2068.                                             <string>Dest port</string>
  2069.                                             <key>propertyValue</key>
  2070.                                             <string>194 (IRC)</string>
  2071.                                             <key>relation</key>
  2072.                                             <integer>0</integer>
  2073.                                             <key>relationName</key>
  2074.                                             <string>==</string>
  2075.                                         </dict>
  2076.                                         <dict>
  2077.                                             <key>expandedState</key>
  2078.                                             <integer>1</integer>
  2079.                                             <key>filterAction</key>
  2080.                                             <integer>2</integer>
  2081.                                             <key>filterActionName</key>
  2082.                                             <string>Pass</string>
  2083.                                             <key>nodeName</key>
  2084.                                             <string>MSN Messenger (6891-6900)</string>
  2085.                                             <key>nodeNumber</key>
  2086.                                             <string>2.6.1.1.13</string>
  2087.                                             <key>property</key>
  2088.                                             <integer>19</integer>
  2089.                                             <key>propertyName</key>
  2090.                                             <string>Dest port</string>
  2091.                                             <key>propertyValue</key>
  2092.                                             <string>6891-6900</string>
  2093.                                             <key>relation</key>
  2094.                                             <integer>0</integer>
  2095.                                             <key>relationName</key>
  2096.                                             <string>==</string>
  2097.                                         </dict>
  2098.                                         <dict>
  2099.                                             <key>expandedState</key>
  2100.                                             <integer>1</integer>
  2101.                                             <key>filterAction</key>
  2102.                                             <integer>2</integer>
  2103.                                             <key>filterActionName</key>
  2104.                                             <string>Pass</string>
  2105.                                             <key>nodeName</key>
  2106.                                             <string>Retrospect (497)</string>
  2107.                                             <key>nodeNumber</key>
  2108.                                             <string>2.6.1.1.14</string>
  2109.                                             <key>property</key>
  2110.                                             <integer>19</integer>
  2111.                                             <key>propertyName</key>
  2112.                                             <string>Dest port</string>
  2113.                                             <key>propertyValue</key>
  2114.                                             <string>497 (Retrospect)</string>
  2115.                                             <key>relation</key>
  2116.                                             <integer>0</integer>
  2117.                                             <key>relationName</key>
  2118.                                             <string>==</string>
  2119.                                         </dict>
  2120.                                         <dict>
  2121.                                             <key>expandedState</key>
  2122.                                             <integer>1</integer>
  2123.                                             <key>filterAction</key>
  2124.                                             <integer>2</integer>
  2125.                                             <key>filterActionName</key>
  2126.                                             <string>Pass</string>
  2127.                                             <key>nodeName</key>
  2128.                                             <string>SMB (without netbios) 445</string>
  2129.                                             <key>nodeNumber</key>
  2130.                                             <string>2.6.1.1.15</string>
  2131.                                             <key>property</key>
  2132.                                             <integer>19</integer>
  2133.                                             <key>propertyName</key>
  2134.                                             <string>Dest port</string>
  2135.                                             <key>propertyValue</key>
  2136.                                             <string>445</string>
  2137.                                             <key>relation</key>
  2138.                                             <integer>0</integer>
  2139.                                             <key>relationName</key>
  2140.                                             <string>==</string>
  2141.                                         </dict>
  2142.                                         <dict>
  2143.                                             <key>expandedState</key>
  2144.                                             <integer>1</integer>
  2145.                                             <key>filterAction</key>
  2146.                                             <integer>2</integer>
  2147.                                             <key>filterActionName</key>
  2148.                                             <string>Pass</string>
  2149.                                             <key>nodeName</key>
  2150.                                             <string>Timbuktu (407)</string>
  2151.                                             <key>nodeNumber</key>
  2152.                                             <string>2.6.1.1.16</string>
  2153.                                             <key>property</key>
  2154.                                             <integer>19</integer>
  2155.                                             <key>propertyName</key>
  2156.                                             <string>Dest port</string>
  2157.                                             <key>propertyValue</key>
  2158.                                             <string>407 (Timbuktu)</string>
  2159.                                             <key>relation</key>
  2160.                                             <integer>0</integer>
  2161.                                             <key>relationName</key>
  2162.                                             <string>==</string>
  2163.                                         </dict>
  2164.                                         <dict>
  2165.                                             <key>enabled</key>
  2166.                                             <string>1</string>
  2167.                                             <key>expandedState</key>
  2168.                                             <integer>1</integer>
  2169.                                             <key>filterAction</key>
  2170.                                             <integer>3</integer>
  2171.                                             <key>filterActionName</key>
  2172.                                             <string>Delete</string>
  2173.                                             <key>nodeName</key>
  2174.                                             <string>Disable all other inbound connections</string>
  2175.                                             <key>nodeNumber</key>
  2176.                                             <string>2.6.1.1.17</string>
  2177.                                             <key>property</key>
  2178.                                             <integer>0</integer>
  2179.                                             <key>propertyName</key>
  2180.                                             <string>Any</string>
  2181.                                             <key>relation</key>
  2182.                                             <integer>0</integer>
  2183.                                             <key>relationName</key>
  2184.                                             <string>==</string>
  2185.                                         </dict>
  2186.                                     </array>
  2187.                                     <key>enabled</key>
  2188.                                     <string>1</string>
  2189.                                     <key>expandedState</key>
  2190.                                     <integer>1</integer>
  2191.                                     <key>filterAction</key>
  2192.                                     <integer>0</integer>
  2193.                                     <key>filterActionName</key>
  2194.                                     <string>-></string>
  2195.                                     <key>nodeNumber</key>
  2196.                                     <string>2.6.1.1</string>
  2197.                                     <key>property</key>
  2198.                                     <integer>16</integer>
  2199.                                     <key>propertyName</key>
  2200.                                     <string>TCP header flags</string>
  2201.                                     <key>propertyValue</key>
  2202.                                     <string>syn,-ack</string>
  2203.                                     <key>relation</key>
  2204.                                     <integer>0</integer>
  2205.                                     <key>relationName</key>
  2206.                                     <string>==</string>
  2207.                                 </dict>
  2208.                             </array>
  2209.                             <key>enabled</key>
  2210.                             <string>1</string>
  2211.                             <key>expandedState</key>
  2212.                             <integer>1</integer>
  2213.                             <key>filterAction</key>
  2214.                             <integer>0</integer>
  2215.                             <key>filterActionName</key>
  2216.                             <string>-></string>
  2217.                             <key>nodeNumber</key>
  2218.                             <string>2.6.1</string>
  2219.                             <key>property</key>
  2220.                             <integer>3</integer>
  2221.                             <key>propertyName</key>
  2222.                             <string>Interface</string>
  2223.                             <key>propertyValue</key>
  2224.                             <string>en0 (Built-in Ethernet)</string>
  2225.                             <key>relation</key>
  2226.                             <integer>0</integer>
  2227.                             <key>relationName</key>
  2228.                             <string>==</string>
  2229.                         </dict>
  2230.                     </array>
  2231.                     <key>filterAction</key>
  2232.                     <integer>0</integer>
  2233.                     <key>filterActionName</key>
  2234.                     <string>-></string>
  2235.                     <key>nodeName</key>
  2236.                     <string>Protect servers</string>
  2237.                     <key>nodeNumber</key>
  2238.                     <string>2.6</string>
  2239.                     <key>property</key>
  2240.                     <integer>2</integer>
  2241.                     <key>propertyName</key>
  2242.                     <string>Direction</string>
  2243.                     <key>propertyValue</key>
  2244.                     <string>inbound</string>
  2245.                     <key>relation</key>
  2246.                     <integer>0</integer>
  2247.                     <key>relationName</key>
  2248.                     <string>==</string>
  2249.                 </dict>
  2250.             </array>
  2251.             <key>enabled</key>
  2252.             <true/>
  2253.             <key>expandedState</key>
  2254.             <integer>1</integer>
  2255.             <key>filterAction</key>
  2256.             <integer>0</integer>
  2257.             <key>filterActionName</key>
  2258.             <string>-></string>
  2259.             <key>nodeCount</key>
  2260.             <integer>20</integer>
  2261.             <key>nodeName</key>
  2262.             <string>default last</string>
  2263.             <key>nodeNumber</key>
  2264.             <string>2</string>
  2265.             <key>property</key>
  2266.             <integer>0</integer>
  2267.             <key>propertyName</key>
  2268.             <string>Any</string>
  2269.             <key>propertyValue</key>
  2270.             <string>en0 (Built-in Ethernet)</string>
  2271.             <key>relation</key>
  2272.             <integer>0</integer>
  2273.             <key>relationName</key>
  2274.             <string>==</string>
  2275.         </dict>
  2276.     </array>
  2277.     <key>enabled</key>
  2278.     <integer>1</integer>
  2279.     <key>expandedState</key>
  2280.     <integer>1</integer>
  2281.     <key>filterActionName</key>
  2282.     <integer>0</integer>
  2283.     <key>nodeCount</key>
  2284.     <integer>28</integer>
  2285.     <key>propertyName</key>
  2286.     <integer>0</integer>
  2287.     <key>relationName</key>
  2288.     <integer>0</integer>
  2289. </dict>
  2290. </plist>
  2291.