suricata
action-globals.h
Go to the documentation of this file.
1/* Copyright (C) 2007-2010 Open Information Security Foundation
2 *
3 * You can copy, redistribute or modify this Program under the terms of
4 * the GNU General Public License version 2 as published by the Free
5 * Software Foundation.
6 *
7 * This program is distributed in the hope that it will be useful,
8 * but WITHOUT ANY WARRANTY; without even the implied warranty of
9 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
10 * GNU General Public License for more details.
11 *
12 * You should have received a copy of the GNU General Public License
13 * version 2 along with this program; if not, write to the Free Software
14 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
15 * 02110-1301, USA.
16 */
17
18/**
19 * \file
20 *
21 * \author Victor Julien <victor@inliniac.net>
22 */
23
24#ifndef SURICATA_ACTION_GLOBALS_H
25#define SURICATA_ACTION_GLOBALS_H
26
27/* Changing them as flags, so later we can have alerts
28 * and drop simultaneously */
29#define ACTION_ALERT 0x01
30#define ACTION_DROP 0x02
31#define ACTION_REJECT 0x04
32#define ACTION_REJECT_DST 0x08
33#define ACTION_REJECT_BOTH 0x10
34#define ACTION_PASS 0x20
35#define ACTION_CONFIG 0x40
36#define ACTION_ACCEPT 0x80 /**< firewall 'accept' rule */
37
38#define ACTION_REJECT_ANY (ACTION_REJECT|ACTION_REJECT_DST|ACTION_REJECT_BOTH)
39
40#define ACTION_DROP_REJECT (ACTION_REJECT_ANY | ACTION_DROP)
41
44 ACTION_SCOPE_PACKET, /**< apply action to packet */
45 ACTION_SCOPE_FLOW, /**< apply drop/pass/accept action to flow */
46 ACTION_SCOPE_HOOK, /**< apply action to current hook */
47 ACTION_SCOPE_TX, /**< apply action to current tx */
48};
49
50#endif /* SURICATA_ACTION_GLOBALS_H */
ActionScope
@ ACTION_SCOPE_HOOK
@ ACTION_SCOPE_PACKET
@ ACTION_SCOPE_TX
@ ACTION_SCOPE_FLOW
@ ACTION_SCOPE_AUTO