home *** CD-ROM | disk | FTP | other *** search
/ Australian Personal Computer 2004 July / APC0407D1.iso / powerkit / firewall / files / OutpostProInstall.exe / PRESETS.INI < prev    next >
Encoding:
INI File  |  2003-11-03  |  10.7 KB  |  357 lines
  1. ;Last modify build:    #260
  2. ;Last modify date:    29.10.2003
  3.  
  4. ;10000xx - reserved by Ads presets
  5. ;10001xx - reserved by Content presets 
  6. ;10002xx - reserved by DNS presets 
  7. ;10003xx - reserved by Attachment presets 
  8. ;10004xx - reserved by Attack Detection
  9. ;10005xx - reserved by Active Content
  10. ;10006xx - reserved by Connection Log
  11.  
  12. [PresetsVer]
  13. IniSectionVer=85, 00000000
  14.  
  15. [Fields]
  16. ;Ads
  17. 100000="%ps_ads_key_count%", VISIBLE|FORMAT_RIGHT, 80, TEXT_INTEGER, 
  18.  
  19. ;content
  20. 100100="%ps_content_key_count%", VISIBLE|FORMAT_RIGHT, 80, TEXT_INTEGER, 
  21. 100101="%ps_content_url_count%", VISIBLE|FORMAT_RIGHT, 80, TEXT_INTEGER, 
  22.  
  23. ;DNS
  24. 100200="%ps_dns_count%", VISIBLE|FORMAT_RIGHT, 80, TEXT_INTEGER, 
  25.  
  26. :Attachment
  27. 100300="%ps_attach_file_count%", VISIBLE|FORMAT_RIGHT, 80, TEXT_INTEGER, 
  28.  
  29. ;Attack
  30.  
  31. ;Active Content
  32. 100500="%ps_act_cont_event_count%", VISIBLE|FORMAT_RIGHT, 80, TEXT_INTEGER,
  33.  
  34.  
  35. [AliaseToIDMapping]
  36.  
  37. ;Ads
  38. ps_ads_key_count=100000
  39.  
  40. ;content
  41. ps_content_key_count=100100
  42. ps_content_url_count=100101
  43.  
  44. ;DNS
  45. ps_dns_count=100200
  46.  
  47. ;Attachment
  48. ps_attach_file_count=100300
  49.  
  50. ;Attack
  51.  
  52. ;Active Content
  53. ps_act_cont_event_count=100500
  54.  
  55. ;////////////////////////////////////////////////////////
  56. ;//
  57. ;//    presets
  58. ;//
  59. ;////////////////////////////////////////////////////////
  60.  
  61.  
  62. ;////////////////////////////////////////////////////////
  63. ;Ads
  64. [ps_ads_block]
  65. _PARENT=Ads
  66. DisplayName=%Last 10 Ads blocked%
  67. Icon=op_log.dll, 16
  68. OpenIcon=op_log.dll, 16
  69. DataTable=SELECT TOP 10 * from ads_log order by fld_20005_11 desc 
  70. DefaultOrder=20005, 20002, 20003, 20004
  71.  
  72. [ps_ads_keywords]
  73. _PARENT=Ads
  74. DisplayName=%Most popular keywords%
  75. Icon=op_log.dll, 16
  76. OpenIcon=op_log.dll, 16
  77. DataTable=SELECT fld_20004_9/*Keyword*/, count(fld_20004_9) as ps_ads_key_count from ads_log group by fld_20004_9 order by 2 desc 
  78. DefaultOrder=20004, 100000
  79.  
  80. ;////////////////////////////////////////////////////////
  81. ;Content
  82. [ps_content_keywords]
  83. _PARENT=Content
  84. DisplayName=%Most often keywords used for blocking%
  85. Icon=op_log.dll, 16
  86. OpenIcon=op_log.dll, 16
  87. DataTable=SELECT fld_21004_9/*Keyword*/, count(fld_21004_9) as ps_content_key_count from cnt_log group by fld_21004_9 order by 2 desc
  88. DefaultOrder=21004, 100100
  89.  
  90. [ps_content_often]
  91. _PARENT=Content
  92. DisplayName=%Most often sites blocked%
  93. Icon=op_log.dll, 16
  94. OpenIcon=op_log.dll, 16
  95. DataTable=SELECT fld_21003_9/*URL*/, count(fld_21003_9) as ps_content_url_count from cnt_log group by fld_21003_9 order by 2 desc
  96. DefaultOrder=21003, 100101
  97.  
  98. [ps_content_10]
  99. _PARENT=Content
  100. DisplayName=%Last 10 sites blocked%
  101. Icon=op_log.dll, 16
  102. OpenIcon=op_log.dll, 16
  103. DataTable=SELECT TOP 10 * FROM cnt_log order by fld_21005_11/*Date Time*/ desc
  104. DefaultOrder=21005, 21002, 21003, 21004
  105.  
  106. ;////////////////////////////////////////////////////////
  107. ;DNS Cache
  108. [ps_dNS_cache_used]
  109. _PARENT=Dns
  110. DisplayName=%Most used records%
  111. Icon=op_log.dll, 16
  112. OpenIcon=op_log.dll, 16
  113. DataTable=SELECT fld_22004_9/*Host*/, count(fld_22004_9) as ps_dns_count from dns_log WHERE fld_22002_7=2/*Event Type*/ group by fld_22004_9 order by 2 desc
  114. DefaultOrder=22004, 100200
  115.  
  116. [ps_dNS_cache_10_used]
  117. _PARENT=Dns
  118. DisplayName=%Last 10 used records%
  119. Icon=op_log.dll, 16
  120. OpenIcon=op_log.dll, 16
  121. DataTable=SELECT TOP 10 fld_22003_9/*IP*/, fld_22004_9/*Host*/, fld_22005_11/*Date Time*/ FROM dns_log WHERE fld_22002_7=2/*Event Type*/ order by fld_22005_11/*Date Time*/ desc
  122. DefaultOrder=22005, 22004, 22003
  123.  
  124.  
  125. [ps_dNS_cache_10_new]
  126. _PARENT=Dns
  127. DisplayName=%Last 10 new records%
  128. Icon=op_log.dll, 16
  129. OpenIcon=op_log.dll, 16
  130. DataTable=SELECT TOP 10 fld_22003_9/*IP*/, fld_22004_9/*Host*/, fld_22005_11/*Date Time*/ FROM dns_log WHERE fld_22002_7=0/*Event Type*/ order by fld_22005_11/*Date Time*/ desc
  131. DefaultOrder=22005, 22004, 22003
  132.  
  133. ;////////////////////////////////////////////////////////
  134. ;Attachment filter
  135. [ps_attachment_quar]
  136. _PARENT=EmailAttachments
  137. DisplayName=%Most often renamed file types%
  138. Icon=op_log.dll, 16
  139. OpenIcon=op_log.dll, 16
  140. DataTable=SELECT fld_23006_9/*File type*/, count(fld_23006_9) as ps_attach_file_count FROM email_log where fld_23007_2=1 or fld_23007_2=3 group by fld_23006_9 order by 2 desc
  141. DefaultOrder=23006, 100300
  142.  
  143. [ps_attachment_10]
  144. _PARENT=EmailAttachments
  145. DisplayName=%Last 10 e-mails with attachments%
  146. Icon=op_log.dll, 16
  147. OpenIcon=op_log.dll, 16
  148. DataTable=SELECT TOP 10 * FROM email_log order by fld_23002_11/*Date Time*/ desc
  149. DefaultOrder=23002, 23003, 23004, 23005, 23006, 23007
  150.  
  151.  
  152. ;////////////////////////////////////////////////////////
  153. ;Attack Detection
  154. [ps_suspicious_packets]
  155. _PARENT=Protect
  156. DisplayName=%Suspicious packets%
  157. Icon=op_log.dll, 16
  158. OpenIcon=op_log.dll, 16
  159. DataTable=select fld_24007_11/*Date Time*/, fld_24002_8/*IP*/, fld_24006_10/*Scan data*/, fld_24005_7/*Scan count*/, fld_24003_8/*IP1*/ from prot_log where fld_24004_6=3 order by 1 desc
  160. DefaultOrder=24007, 24002, 24006
  161.  
  162. [ps_atack_10]
  163. _PARENT=Protect
  164. DisplayName=%Last 10 Attacks detected%
  165. Icon=op_log.dll, 16
  166. OpenIcon=op_log.dll, 16
  167. DataTable=SELECT TOP 10 * FROM prot_log where fld_24004_6 <> 3 ORDER BY fld_24007_11/*Date Time*/ desc
  168. DefaultOrder=24007, 24004, 24002, 24006
  169.  
  170.  
  171. ;////////////////////////////////////////////////////////
  172. ;Active Content
  173. [ps_active_content_blocked]
  174. _PARENT=Web
  175. DisplayName=%Most often active elements blocked%
  176. Icon=op_log.dll, 16
  177. OpenIcon=op_log.dll, 16
  178. DataTable=SELECT fld_25002_7/*Event Type*/, count(fld_25002_7) as ps_act_cont_event_count from web_log group by fld_25002_7/*Event Type*/ order by 2 desc
  179. DefaultOrder=25002, 100500
  180.  
  181. [ps_active_content_active]
  182. _PARENT=Web
  183. DisplayName=%Sites with a lot of active elements%
  184. Icon=op_log.dll, 16
  185. OpenIcon=op_log.dll, 16
  186. DataTable=SELECT fld_25003_9/*URL*/, count(fld_25003_9) as ps_act_cont_event_count from web_log group by fld_25003_9  order by 2 desc
  187. DefaultOrder=25003, 100500
  188.  
  189. [ps_active_content_10]
  190. _PARENT=Web
  191. DisplayName=%Last 10 active elements blocked%
  192. Icon=op_log.dll, 16
  193. OpenIcon=op_log.dll, 16
  194. DataTable=SELECT TOP 10 fld_25003_9/*URL*/, fld_25002_7/*Elements*/, fld_25005_11/*Date Time*/ FROM web_log order by fld_25005_11/*Date Time*/ desc
  195. DefaultOrder=25005, 25002, 25003
  196.  
  197. ;////////////////////////////////////////////////////////
  198. ;Allowed history
  199. [ps_conn_log_allow_today]
  200. _PARENT=conn_log_allow
  201. DisplayName=%Allowed Today%
  202. IsFilter=true
  203. EnableDBNotify=false
  204. DefaultOrder=30023, 30027, 30038, 30024, 30033, 30031, 30032, 30029, 30030, 30025, 30037, 30028, 30036, 30034, 30035
  205. SortField=fld_30027_11
  206. AscSort=no
  207. [ps_conn_log_allow_today\Filter]
  208. _NoCopyIfExist=true
  209. 30027={Enable:=1}{UseLastTime:=true}{LastTimeType:=5}{LastTimeValue:=1}{FromTime:=2003.2.16.17.39.1}{ToTime:=2003.2.16.17.39.1}
  210.  
  211. [ps_conn_log_allow_10_min]
  212. _PARENT=conn_log_allow
  213. DisplayName=%Allowed during last 10 min%
  214. IsFilter=true
  215. EnableDBNotify=false
  216. DefaultOrder=30023, 30027, 30038, 30024, 30033, 30031, 30032, 30029, 30030, 30025, 30037, 30028, 30036, 30034, 30035
  217. SortField=fld_30027_11
  218. AscSort=no
  219. [ps_conn_log_allow_10_min\Filter]
  220. _NoCopyIfExist=true
  221. 30027={Enable:=1}{UseLastTime:=true}{LastTimeType:=1}{LastTimeValue:=10}{FromTime:=2003.2.16.17.39.1}{ToTime:=2003.2.16.17.39.1}
  222.  
  223.  
  224. ;////////////////////////////////////////////////////////
  225. ;Blocked history
  226. [ps_conn_log_block_today]
  227. _PARENT=conn_log_block
  228. DisplayName=%Blocked Today%
  229. IsFilter=true
  230. EnableDBNotify=false
  231. DefaultOrder=30023, 30027, 30038, 30024, 30033, 30031, 30032, 30029, 30030, 30025, 30037, 30028, 30036, 30034, 30035
  232. SortField=fld_30027_11
  233. AscSort=no
  234. [ps_conn_log_block_today\Filter]
  235. _NoCopyIfExist=true
  236. 30027={Enable:=1}{UseLastTime:=true}{LastTimeType:=5}{LastTimeValue:=1}{FromTime:=2003.2.16.17.39.1}{ToTime:=2003.2.16.17.39.1}
  237.  
  238. [ps_conn_log_block_today_10_min]
  239. _PARENT=conn_log_block
  240. DisplayName=%Blocked during last 10 min%
  241. IsFilter=true
  242. CanAddFilter=0
  243. EnableDBNotify=false
  244. DefaultOrder=30023, 30027, 30038, 30024, 30033, 30031, 30032, 30029, 30030, 30025, 30037, 30028, 30036, 30034, 30035
  245. SortField=fld_30027_11
  246. AscSort=no
  247. [ps_conn_log_block_today_10_min\Filter]
  248. _NoCopyIfExist=true
  249. 30027={Enable:=1}{UseLastTime:=true}{LastTimeType:=1}{LastTimeValue:=10}{FromTime:=2003.2.16.17.39.1}{ToTime:=2003.2.16.17.39.1}
  250.  
  251. ;////////////////////////////////////////////////////////
  252. ;Netbios history
  253. [conn_log_allow_netbios_filter]
  254. _PARENT=conn_log_allow
  255. DisplayName=%NetBios history Allow%
  256. IsFilter=true
  257. CanAddFilter=0
  258. EnableDBNotify=false
  259. DefaultOrder=30023, 30027, 30038, 30024, 30033, 30031, 30032, 30029, 30030, 30025, 30037, 30028, 30036, 30034, 30035
  260. SortField=fld_30027_11
  261. AscSort=no
  262.  
  263. [conn_log_allow_netbios_filter\Filter]
  264. _NoCopyIfExist=true
  265. 30038={Enable:=1}{Values_0:=NETBIOS}
  266.  
  267. [conn_log_allow_netbios_filter\FieldsState]
  268. _NoCopyIfExist=true
  269. 30027=VISIBLE, 1, 100
  270. 30038=HIDE, 3, 120
  271. 30024=VISIBLE, 3, 80
  272. 30033=HIDE, 4, 100
  273. 30031=VISIBLE, 2, 100
  274. 30032=HIDE, 5, 100
  275. 30029=HIDE, 7, 100
  276. 30030=HIDE, 8, 100
  277. 30025=HIDE, 6, 300
  278. 30037=HIDE, 9, 300
  279. 30028=HIDE, 10, 100
  280. 30036=HIDE, 11, 100
  281. 30034=HIDE, 12, 100
  282. 30035=HIDE, 13, 100
  283.  
  284.  
  285. ;////////////////////////////////////////////////////////
  286. ;Web History
  287. [conn_log_allow_web_filter]
  288. _PARENT=conn_log_allow
  289. DisplayName=%Web history Allow%
  290. IsFilter=true
  291. CanAddFilter=0
  292. EnableDBNotify=false
  293. DefaultOrder=30023, 30027, 30038, 30024, 30033, 30031, 30032, 30029, 30030, 30025, 30037, 30028, 30036, 30034, 30035
  294. SortField=fld_30027_11
  295. AscSort=no
  296.  
  297. [conn_log_allow_web_filter\Filter]
  298. _NoCopyIfExist=true
  299. 30033={Enable:=1}{TCP:=true}
  300. 30032={Enable:=1}{Ports:=80-83, 443, 1080, 3128, 8080, 8088}
  301.  
  302. [conn_log_allow_web_filter\FieldsState]
  303. _NoCopyIfExist=true
  304. 30027=VISIBLE, 1, 100
  305. 30038=HIDE, 4, 120
  306. 30024=HIDE, 6, 80
  307. 30033=HIDE, 5, 100
  308. 30031=VISIBLE, 2, 100
  309. 30032=HIDE, 7, 100
  310. 30029=HIDE, 9, 100
  311. 30030=HIDE, 10, 100
  312. 30025=HIDE, 8, 300
  313. 30037=HIDE, 11, 300
  314. 30028=HIDE, 12, 100
  315. 30036=HIDE, 13, 100
  316. 30034=VISIBLE, 3, 100
  317. 30035=VISIBLE, 4, 100
  318.  
  319.  
  320. ;////////////////////////////////////////////////////////
  321. ;Email history
  322. [conn_log_allow_email_filter]
  323. _PARENT=conn_log_allow
  324. DisplayName=%Email history Allow%
  325. IsFilter=true
  326. CanAddFilter=0
  327. EnableDBNotify=false
  328. DefaultOrder=30023, 30027, 30038, 30024, 30033, 30031, 30032, 30029, 30030, 30025, 30037, 30028, 30036, 30034, 30035
  329. SortField=fld_30027_11
  330. AscSort=no
  331.  
  332. [conn_log_allow_email_filter\Filter]
  333. _NoCopyIfExist=true
  334. 30033={Enable:=1}{TCP:=true}
  335. 30032={Enable:=1}{Ports:=25, 109, 110, 143, 995}
  336.  
  337. [conn_log_allow_email_filter\FieldsState]
  338. _NoCopyIfExist=true
  339. 30027=VISIBLE, 1, 100
  340. 30038=HIDE, 5, 120
  341. 30024=VISIBLE, 3, 80
  342. 30033=HIDE, 6, 100
  343. 30031=VISIBLE, 2, 100
  344. 30032=HIDE, 7, 100
  345. 30029=HIDE, 9, 100
  346. 30030=HIDE, 10, 100
  347. 30025=HIDE, 8, 300
  348. 30037=HIDE, 11, 300
  349. 30028=HIDE, 12, 100
  350. 30036=HIDE, 13, 100
  351. 30034=VISIBLE, 4, 100
  352. 30035=VISIBLE, 5, 100
  353.  
  354. ;////////////////////////////////////////////////////////
  355. ;eof presets
  356. ////////////////////////////////////////////////////////
  357.