finalize rules for stable (opnsense#9)

opnsense4 · Jun 27, 2018 · e3a5228 · e3a5228
1 parent 1eb5942
commit e3a5228
Show file tree

Hide file tree

Showing 7 changed files with 303 additions and 297 deletions.
diff --git a/README.md b/README.md
@@ -4,7 +4,7 @@
 
 If you are searching for an easy way to block specific applications like Youtube or Netflix this is the right resource for you.
 
-We have categorized the rules in seven categories:
+We have categorized the rules in six categories:
 
 ```
 file-transfer (file sharing in general)

diff --git a/src/opnsense.file_transfer.rules b/src/opnsense.file_transfer.rules
diff --git a/src/opnsense.media_streaming.rules b/src/opnsense.media_streaming.rules
diff --git a/src/opnsense.messaging.rules b/src/opnsense.messaging.rules
diff --git a/src/opnsense.social_media.rules b/src/opnsense.social_media.rules
diff --git a/src/opnsense.uncategorized.rules b/src/opnsense.uncategorized.rules
@@ -1 +1,6 @@
-
+#alert dns any any -> any 53 (msg:"OPN_Uncategorized - Youporn - DNS request for youporn.com"; dns_query; content:"youporn.com"; nocase; classtype:uncategorized; sid:56000000;)
+#alert http any any -> any $HTTP_PORTS (msg:"OPN_Uncategorized - Youporn - Related URL (youporn.com)"; content:"youporn.com"; http_uri; flow:to_server,established; classtype:uncategorized; sid:56000001; rev:1;)
+#alert tls any any -> any any (msg:"OPN_Uncategorized - Youporn - Related TLS SNI (youporn.com)"; tls_sni; content:"youporn.com";flow:to_server,established; classtype:uncategorized; sid:56000002; rev:1;)
+#alert dns any any -> any 53 (msg:"OPN_Uncategorized - PornHub - DNS request for pornhub.com"; dns_query; content:"pornhub.com"; nocase; classtype:uncategorized; sid:56000003;)
+#alert http any any -> any $HTTP_PORTS (msg:"OPN_Uncategorized - PornHub - Related URL (pornhub.com)"; content:"pornhub.com"; http_uri; flow:to_server,established; classtype:uncategorized; sid:56000004; rev:1;)
+#alert tls any any -> any any (msg:"OPN_Uncategorized - PornHub - Related TLS SNI (pornhub.com)"; tls_sni; content:"pornhub.com";flow:to_server,established; classtype:uncategorized; sid:56000005; rev:1;)
diff --git a/src/uncategorized.lst b/src/uncategorized.lst
@@ -1 +1,2 @@
-
+Youporn uncategorized youporn.com
+PornHub uncategorized pornhub.com
Original file line number	Diff line number	Diff line change
		@@ -1 +1,2 @@

		Youporn uncategorized youporn.com
		PornHub uncategorized pornhub.com