mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 14:48:21 +00:00
f1267b0b94
In the process, some of the script documentation of the NetControl framework was also updated.
22 lines
484 B
Text
22 lines
484 B
Text
hook NetControl::rule_policy(r: NetControl::Rule)
|
|
{
|
|
if ( r$ty == NetControl::DROP &&
|
|
r$entity$ty == NetControl::CONNECTION &&
|
|
r$entity$conn$orig_h in 192.168.0.0/16 )
|
|
{
|
|
print "Ignored connection from", r$entity$conn$orig_h;
|
|
break;
|
|
}
|
|
}
|
|
|
|
event NetControl::init()
|
|
{
|
|
local debug_plugin = NetControl::create_debug(T);
|
|
NetControl::activate(debug_plugin, 0);
|
|
}
|
|
|
|
event connection_established(c: connection)
|
|
{
|
|
NetControl::drop_connection(c$id, 20 secs);
|
|
}
|
|
|