diff --git a/.samples/sample_directives_juniper.yaml b/.samples/sample_directives_juniper.yaml new file mode 100644 index 0000000..f4c6a24 --- /dev/null +++ b/.samples/sample_directives_juniper.yaml @@ -0,0 +1,239 @@ +JuniperBGPRouteTable: + name: Traceroute + rules: + # REGRA DENY RFC 6598 + - condition: '100.64.0.0/10' + ge: 10 + le: 32 + action: deny + # REGRA DENY RFC 1918 CLASSE A + - condition: '10.0.0.0/8' + ge: 8 + le: 32 + action: deny + # REGRA DENY RFC 1918 CLASSE B + - condition: '172.16.0.0/12' + ge: 12 + le: 32 + action: deny + # REGRA DENY RFC 1918 CLASSE C + - condition: '192.168.0.0/16' + ge: 16 + le: 32 + action: deny + # REGRA DENY LO + - condition: '127.0.0.0/8' + ge: 8 + le: 32 + action: deny + # REGRA DENY ASN PREFIXO + - condition: 'SEU_PREFIXO_IPv4_AGORA' + ge: 22 + le: 32 + action: deny + # REGRA DENY DEFAULT ROUTE + - condition: '0.0.0.0/8' + ge: 8 + le: 32 + action: deny + - condition: '0.0.0.0/0' + ge: 32 + le: 32 + action: permit + command: 'show route protocol bgp {target} table inet.0' + # REGRA DENY SITE LOCAL DEPRECIADO RFC 3879 + - condition: 'fec0::/10' + ge: 10 + le: 128 + action: deny + # REGRA DENY ULA RFC 4193 + - condition: 'fc00::/7' + ge: 7 + le: 128 + action: deny + # REGRA DENY LINK LOCAL RFC 4291 + - condition: 'fe80::/10' + ge: 10 + le: 128 + action: deny + # REGRA DENY Unspecified RFC 4291 + - condition: '::/128' + ge: 128 + le: 128 + action: deny + # REGRA DENY LO RFC 4291 + - condition: '::1/128' + ge: 128 + le: 128 + action: deny + # REGRA DENY ASN PREFIXO + - condition: 'SEU_PREFIXO_IPv6_AGORA' + ge: 32 + le: 128 + action: deny + - condition: '::/0' + ge: 128 + le: 128 + action: permit + command: 'show route protocol bgp {target} table inet6.0' + field: + description: IP Address, Prefix or Hostname +JuniperTraceroute: + name: Traceroute + rules: + # REGRA DENY RFC 6598 + - condition: '100.64.0.0/10' + ge: 10 + le: 32 + action: deny + # REGRA DENY RFC 1918 CLASSE A + - condition: '10.0.0.0/8' + ge: 8 + le: 32 + action: deny + # REGRA DENY RFC 1918 CLASSE B + - condition: '172.16.0.0/12' + ge: 12 + le: 32 + action: deny + # REGRA DENY RFC 1918 CLASSE C + - condition: '192.168.0.0/16' + ge: 16 + le: 32 + action: deny + # REGRA DENY LO + - condition: '127.0.0.0/8' + ge: 8 + le: 32 + action: deny + # REGRA DENY ASN PREFIXO + - condition: 'SEU_PREFIXO_IPv4_AGORA' + ge: 22 + le: 32 + action: deny + # REGRA DENY DEFAULT ROUTE + - condition: '0.0.0.0/8' + ge: 8 + le: 32 + action: deny + - condition: '0.0.0.0/0' + ge: 32 + le: 32 + action: permit + command: 'traceroute {target} interface lo0 wait 1' + # REGRA DENY SITE LOCAL DEPRECIADO RFC 3879 + - condition: 'fec0::/10' + ge: 10 + le: 128 + action: deny + # REGRA DENY ULA RFC 4193 + - condition: 'fc00::/7' + ge: 7 + le: 128 + action: deny + # REGRA DENY LINK LOCAL RFC 4291 + - condition: 'fe80::/10' + ge: 10 + le: 128 + action: deny + # REGRA DENY Unspecified RFC 4291 + - condition: '::/128' + ge: 128 + le: 128 + action: deny + # REGRA DENY LO RFC 4291 + - condition: '::1/128' + ge: 128 + le: 128 + action: deny + # REGRA DENY ASN PREFIXO + - condition: 'SEU_PREFIXO_IPv6_AGORA' + ge: 32 + le: 128 + action: deny + - condition: '::/0' + ge: 128 + le: 128 + action: permit + command: 'traceroute {target} interface lo0 wait 1' + field: + description: IP Address, or Hostname +JuniperPing: + name: Ping + rules: + # REGRA DENY RFC 6598 + - condition: '100.64.0.0/10' + ge: 10 + le: 32 + action: deny + # REGRA DENY RFC 1918 CLASSE A + - condition: '10.0.0.0/8' + ge: 8 + le: 32 + action: deny + # REGRA DENY RFC 1918 CLASSE B + - condition: '172.16.0.0/12' + ge: 12 + le: 32 + action: deny + # REGRA DENY RFC 1918 CLASSE C + - condition: '192.168.0.0/16' + ge: 16 + le: 32 + action: deny + # REGRA DENY LO + - condition: '127.0.0.0/8' + ge: 8 + le: 32 + action: deny + # REGRA DENY ASN PREFIXO + - condition: 'SEU_PREFIXO_IPv4_AGORA' + ge: 22 + le: 32 + action: deny + # REGRA DENY DEFAULT ROUTE + - condition: '0.0.0.0/8' + ge: 8 + le: 32 + action: deny + - condition: '0.0.0.0/0' + ge: 32 + le: 32 + command: 'ping count 5 rapid {target} interface lo0' + # REGRA DENY SITE LOCAL DEPRECIADO RFC 3879 + - condition: 'fec0::/10' + ge: 10 + le: 128 + action: deny + # REGRA DENY ULA RFC 4193 + - condition: 'fc00::/7' + ge: 7 + le: 128 + action: deny + # REGRA DENY LINK LOCAL RFC 4291 + - condition: 'fe80::/10' + ge: 10 + le: 128 + action: deny + # REGRA DENY Unspecified RFC 4291 + - condition: '::/128' + ge: 128 + le: 128 + action: deny + # REGRA DENY LO RFC 4291 + - condition: '::1/128' + ge: 128 + le: 128 + action: deny + # REGRA DENY ASN PREFIXO + - condition: 'SEU_PREFIXO_IPv6_AGORA' + ge: 32 + le: 128 + action: deny + - condition: '::/0' + ge: 128 + le: 128 + action: permit + command: 'ping count 5 rapid {target} interface lo0' + field: + description: IP Address, or Hostname