Browse code

secfilter: updated samples [skip ci]

Jose Luis Verdeguer authored on 12/08/2022 12:01:53
Showing 1 changed files
... ...
@@ -814,29 +814,34 @@
814 814
 		...
815 815
 User-agent
816 816
 ==========
817
-[+] Blacklisted
818
-    -----------
819
-    0001 -> friendly-scanner
820
-    0002 -> pplsip
821
-    0003 -> sipcli
822
-    0004 -> sundayddr
823
-    0005 -> iWar
824
-    0006 -> sipsak
825
-    0007 -> VaxSIPUserAgent
826
-    0008 -> SimpleSIP
827
-    0009 -> SIP Call
828
-    0010 -> Ozeki
829
-    0011 -> VoIPSec
830
-    0012 -> SIPScan
831
-    0013 -> Conaito
832
-    0014 -> UsaAirport
833
-    0015 -> PortSIP VoIP SDK
834
-    0016 -> zxcvfdf11
835
-    0017 -> fdgddfg546df4g8d5f
836
-
837
-[+] Whitelisted
838
-    -----------
839
-    0001 -> my custom ua
817
+{
818
+        User-Agent: {
819
+                Blacklisted: {
820
+                        Value: friendly-scanner
821
+                        Value: pplsip
822
+                        Value: sipcli
823
+                        Value: sundayddr
824
+                        Value: iWar
825
+                        Value: sipsak
826
+                        Value: VaxSIPUserAgent
827
+                        Value: SimpleSIP
828
+                        Value: SIP Call
829
+                        Value: Ozeki
830
+                        Value: VoIPSec
831
+                        Value: SIPScan
832
+                        Value: Conaito
833
+                        Value: UsaAirport
834
+                        Value: PortSIP VoIP SDK
835
+                        Value: zxcvfdf11
836
+                        Value: fdgddfg546df4g8d5f
837
+                        Value: siptest
838
+                        Value: Nmap NSE
839
+                }
840
+                Whitelisted: {
841
+                        Value: my custom ua
842
+                }
843
+        }
844
+}
840 845
 		...
841 846
 		</programlisting>
842 847
  </example>
... ...
@@ -850,40 +855,40 @@ User-agent
850 855
  
851 856
          <programlisting format="linespecific">
852 857
 		...
853
-Blocked messages (blacklist)
854
-============================
855
-[+] By user-agent    : 1256
856
-[+] By country       : 45
857
-[+] By from domain   : 0
858
-[+] By to domain     : 0
859
-[+] By contact domain: 1
860
-[+] By IP address    : 2552
861
-[+] By from name     : 0
862
-[+] By to name       : 0
863
-[+] By contact name  : 0
864
-[+] By from user     : 316
865
-[+] By to user       : 134
866
-[+] By contact user  : 0
867
-
868
-Allowed messages (whitelist)
869
-============================
870
-[+] By user-agent    : 0
871
-[+] By country       : 478
872
-[+] By from domain   : 0
873
-[+] By to domain     : 0
874
-[+] By contact domain: 0
875
-[+] By IP address    : 0
876
-[+] By from name     : 0
877
-[+] By to name       : 0
878
-[+] By contact name  : 0
879
-[+] By from user     : 0
880
-[+] By to user       : 0
881
-[+] By contact user  : 0
882
-
883
-Other blocked messages
884
-======================
885
-[+] Destinations   : 0
886
-[+] SQL injection  : 213
858
+{
859
+        Blacklist: {
860
+                User-Agent: 1256
861
+                Country: 45
862
+                From-Domain: 0
863
+                To-Domain: 0
864
+                Contact-Domain: 1
865
+                IP-Address: 2552
866
+                From-Name: 0
867
+                To-Name: 0
868
+                Contact-Name: 0
869
+                From-User: 316
870
+                To-User: 0134
871
+                Contact-User: 0
872
+        }
873
+        Whitelist: {
874
+                User-Agent: 0
875
+                Country: 478
876
+                From-Domain: 0
877
+                To-Domain: 0
878
+                Contact-Domain: 0
879
+                IP-Address: 0
880
+                From-Name: 0
881
+                To-Name: 0
882
+                Contact-Name: 0
883
+                From-User: 0
884
+                To-User: 0
885
+                Contact-User: 0
886
+        }
887
+        Other: {
888
+                Destination: 0
889
+                SQL-Injection: 213
890
+        }
891
+}
887 892
 		...
888 893
 		</programlisting>
889 894
  </example>