mirrors/thatmattlove-hyperglass
1
0
Fork 1
mirror of https://github.com/thatmattlove/hyperglass.git synced 2026-02-07 17:58:24 +00:00
Code Issues Activity

Create sample_directives.yaml

Browse source
This commit is contained in:
Carlos Santos 2025-09-13 00:48:02 -03:00 • committed by GitHub
parent 084cd20a6e
commit e409569016
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 159 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

159
.samples/sample_directives.yaml Normal file
View file

@ -0,0 +1,159 @@
Huawei_Traceroute:
name: Traceroute
rules:
# REGRA DENY RFC 6598
- condition: '100.64.0.0/10'
ge: 10
le: 32
action: deny
# REGRA DENY RFC 1918 CLASSE A
- condition: '10.0.0.0/8'
ge: 8
le: 32
action: deny
# REGRA DENY RFC 1918 CLASSE B
- condition: '172.16.0.0/12'
ge: 12
le: 32
action: deny
# REGRA DENY RFC 1918 CLASSE C
- condition: '192.168.0.0/16'
ge: 16
le: 32
action: deny
# REGRA DENY LO
- condition: '127.0.0.0/8'
ge: 8
le: 32
action: deny
# REGRA DENY ASN PREFIXO
- condition: 'SEU_PREFIXO_IPv4_AGORA'
ge: 22
le: 32
action: deny
# REGRA DENY DEFAULT ROUTE
- condition: '0.0.0.0/8'
ge: 8
le: 32
action: deny
- condition: '0.0.0.0/0'
ge: 32
le: 32
action: permit
command: 'tracert -w 500 -q 1 -f 1 -a {source4} {target}'
# REGRA DENY SITE LOCAL DEPRECIADO RFC 3879
- condition: 'fec0::/10'
ge: 10
le: 128
action: deny
# REGRA DENY ULA RFC 4193
- condition: 'fc00::/7'
ge: 7
le: 128
action: deny
# REGRA DENY LINK LOCAL RFC 4291
- condition: 'fe80::/10'
ge: 10
le: 128
action: deny
# REGRA DENY Unspecified RFC 4291
- condition: '::/128'
ge: 128
le: 128
action: deny
# REGRA DENY LO RFC 4291
- condition: '::1/128'
ge: 128
le: 128
action: deny
# REGRA DENY ASN PREFIXO
- condition: 'SEU_PREFIXO_IPv6_AGORA'
ge: 32
le: 128
action: deny
- condition: '::/0'
ge: 128
le: 128
action: permit
command: 'tracert ipv6 -w 500 -q 1 -f 1 -a {source6} {target}'
field:
description: IP Address, or Hostname
Huawei_Ping:
name: Ping
rules:
# REGRA DENY RFC 6598
- condition: '100.64.0.0/10'
ge: 10
le: 32
action: deny
# REGRA DENY RFC 1918 CLASSE A
- condition: '10.0.0.0/8'
ge: 8
le: 32
action: deny
# REGRA DENY RFC 1918 CLASSE B
- condition: '172.16.0.0/12'
ge: 12
le: 32
action: deny
# REGRA DENY RFC 1918 CLASSE C
- condition: '192.168.0.0/16'
ge: 16
le: 32
action: deny
# REGRA DENY LO
- condition: '127.0.0.0/8'
ge: 8
le: 32
action: deny
# REGRA DENY ASN PREFIXO
- condition: 'SEU_PREFIXO_IPv4_AGORA'
ge: 22
le: 32
action: deny
# REGRA DENY DEFAULT ROUTE
- condition: '0.0.0.0/8'
ge: 8
le: 32
action: deny
- condition: '0.0.0.0/0'
ge: 32
le: 32
command: 'ping -t 500 -c 5 -a {source4} {target}'
# REGRA DENY SITE LOCAL DEPRECIADO RFC 3879
- condition: 'fec0::/10'
ge: 10
le: 128
action: deny
# REGRA DENY ULA RFC 4193
- condition: 'fc00::/7'
ge: 7
le: 128
action: deny
# REGRA DENY LINK LOCAL RFC 4291
- condition: 'fe80::/10'
ge: 10
le: 128
action: deny
# REGRA DENY Unspecified RFC 4291
- condition: '::/128'
ge: 128
le: 128
action: deny
# REGRA DENY LO RFC 4291
- condition: '::1/128'
ge: 128
le: 128
action: deny
# REGRA DENY ASN PREFIXO
- condition: 'SEU_PREFIXO_IPv6_AGORA'
ge: 32
le: 128
action: deny
- condition: '::/0'
ge: 128
le: 128
action: permit
command: 'ping ipv6 -t 500 -c 5 -a {source6} {target}'
field:
description: IP Address, or Hostname