Add protocol definitions needed by ipfw-classifyd. Basically they are copied from the ipfw-classifyd pfPort which inherits them from l7-filter project on sf.net.

1 files changed, 18 insertions, 0 deletions

diff --git a/usr/local/share/protocols/rlogin.pat b/usr/local/share/protocols/rlogin.pat
new file mode 100644
index 0000000..92f3735
--- /dev/null
+++ b/usr/local/share/protocols/rlogin.pat
@@ -0,0 +1,18 @@
+# rlogin - remote login - RFC 1282
+# Pattern attributes: ok veryfast fast
+# Protocol groups: remote_access ietf_rfc_documented
+# Wiki: http://www.protocolinfo.org/wiki/Rlogin
+#
+# usually runs on port 443
+#
+# This pattern is untested.
+
+rlogin
+# At least three characters (user name, user name, terminal type), 
+# the first of which could be the first character of a user name, a
+# slash, then a terminal speed.  (Assumes that usernames and terminal
+# types are alphanumeric only.  I'm sure there are usernames like
+# "straitm-47" out there, but it's not common.) All terminal speeds 
+# I know of end in two zeros and are between 3 and 6 digits long.
+# This pattern is uncomfortably general.
+^[a-z][a-z0-9][a-z0-9]+/[1-9][0-9]?[0-9]?[0-9]?00