
%YAML 1.1

---
vars:
  address-groups:
    HOME_NET: "[10.0.0.0/8, !10.180.20.36, 192.168.0.0/16, !192.168.0.1, 172.16.0.0/12]"
    EXTERNAL_NET: "!$HOME_NET"
    HTTP_SERVERS: any
    SMTP_SERVERS: "$HOME_NET"
    SQL_SERVERS: "$HOME_NET"
    DNS_SERVERS: "$HOME_NET"
    TELNET_SERVERS: "$HOME_NET"
    AIM_SERVERS: "$EXTERNAL_NET"
    DC_SERVERS: "$HOME_NET"
    DNP3_SERVER: "$HOME_NET"
    DNP3_CLIENT: "$HOME_NET"
    MODBUS_CLIENT: "$HOME_NET"
    MODBUS_SERVER: "$HOME_NET"
    ENIP_CLIENT: "$HOME_NET"
    ENIP_SERVER: "$HOME_NET"
  port-groups:
    HTTP_PORTS: "80"
    SHELLCODE_PORTS: "!80"
    ORACLE_PORTS: 1521
    SSH_PORTS: 22
    DNP3_PORTS: 20000
    MODBUS_PORTS: 502
    FILE_DATA_PORTS: "[$HTTP_PORTS,110,143]"
    FTP_PORTS: 21
    GENEVE_PORTS: 6081
    VXLAN_PORTS: 4789
    TEREDO_PORTS: 3544
default-rule-path: /run/ideco-suricata-profiles-syncer-backend/profiles/profile_01K1ATJ4AZHXBZMT7P47A7ZHJZ/rules
rule-files:

    - "01K1ATJ4AZHXBZMT7P47A7ZHJZ.rules"

classification-file: /var/cache/ideco/suricata-backend/rules/classification.config
reference-config-file: /var/cache/ideco/suricata-backend/rules/reference.config
    