| IPFWACC-MIB DEFINITIONS ::= BEGIN |
| |
| -- This module defines MIB components for reading information from the |
| -- accounting rules IP Firewall. This would typically let you read the rules |
| -- and the counters. I did not include some flags and fields that I |
| -- considered irrelevant for the accounting rules. Resetting the counters of |
| -- the rules by SNMP would be simple, but I don't consider it so useful. I |
| -- gave no consideration to implementing write access for allowing |
| -- modification of the accounting rules. |
| -- Cristian.Estan@net.utcluj.ro |
| |
| IMPORTS |
| OBJECT-TYPE |
| FROM SNMPv2-SMI |
| DisplayString |
| FROM SNMPv2-TC |
| ucdavis, ucdExperimental |
| FROM UCD-SNMP-MIB; |
| |
| |
| ipFwAccTable OBJECT-TYPE |
| SYNTAX SEQUENCE OF IpFwAccEntry |
| ACCESS not-accessible |
| STATUS mandatory |
| DESCRIPTION |
| "A table with the accounting rules of the IP firewall" |
| INDEX { ipFwAccIndex } |
| ::= { ucdExperimental 1 } |
| |
| ipFwAccEntry OBJECT-TYPE |
| SYNTAX IpFwAccEntry |
| ACCESS not-accessible |
| STATUS mandatory |
| DESCRIPTION |
| "An accounting rule of the IP firewall" |
| INDEX { ipFwAccIndex } |
| ::= { ipFwAccTable 1 } |
| |
| IpFwAccTable ::= SEQUENCE { |
| ipFwAccIndex INTEGER, |
| ipFwAccSrcAddr IpAddress, |
| ipFwAccSrcNetMask IpAddress, |
| ipFwAccDstAddr IpAddress, |
| ipFwAccDstNetMask IpAddress, |
| ipFwAccViaName DisplayString, |
| ipFwAccViaAddr IpAddress, |
| ipFwAccProto INTEGER, |
| ipFwAccBidir INTEGER, |
| ipFwAccDir INTEGER, |
| ipFwAccBytes Counter, |
| ipFwAccPackets Counter, |
| ipFwAccNrSrcPorts INTEGER, |
| ipFwAccNrDstPorts INTEGER, |
| ipFwAccSrcIsRange INTEGER, |
| ipFwAccDstIsRange INTEGER, |
| ipFwAccPort1 INTEGER, |
| ipFwAccPort2 INTEGER, |
| ipFwAccPort3 INTEGER, |
| ipFwAccPort4 INTEGER, |
| ipFwAccPort5 INTEGER, |
| ipFwAccPort6 INTEGER, |
| ipFwAccPort7 INTEGER, |
| ipFwAccPort8 INTEGER, |
| ipFwAccPort9 INTEGER, |
| ipFwAccPort10 INTEGER |
| } |
| |
| ipFwAccIndex OBJECT-TYPE |
| SYNTAX INTEGER |
| ACCESS read-only |
| STATUS mandatory |
| DESCRIPTION |
| "Reference index for each firewall rule." |
| ::= { ipFwAccEntry 1 } |
| |
| ipFwAccSrcAddr OBJECT-TYPE |
| SYNTAX IpAddress |
| ACCESS read-only |
| STATUS mandatory |
| DESCRIPTION |
| "The source address in the firewall rule." |
| ::= { ipFwAccEntry 2 } |
| |
| ipFwAccSrcNetMask OBJECT-TYPE |
| SYNTAX IpAddress |
| ACCESS read-only |
| STATUS mandatory |
| DESCRIPTION |
| "The netmask of the source address in the firewall rule." |
| ::= { ipFwAccEntry 3 } |
| |
| ipFwAccDstAddr OBJECT-TYPE |
| SYNTAX IpAddress |
| ACCESS read-only |
| STATUS mandatory |
| DESCRIPTION |
| "The destination address in the firewall rule." |
| ::= { ipFwAccEntry 4 } |
| |
| ipFwAccDstNetMask OBJECT-TYPE |
| SYNTAX IpAddress |
| ACCESS read-only |
| STATUS mandatory |
| DESCRIPTION |
| "The netmask of the destination address in the firewall rule." |
| ::= { ipFwAccEntry 5 } |
| |
| ipFwAccViaName OBJECT-TYPE |
| SYNTAX DisplayString |
| ACCESS read-only |
| STATUS mandatory |
| DESCRIPTION |
| "The name of the interface to which the rule applies. If no |
| interface is associated with the present rule, this should |
| contain a dash (-) ." |
| ::= { ipFwAccEntry 6 } |
| |
| ipFwAccViaAddr OBJECT-TYPE |
| SYNTAX IpAddress |
| ACCESS read-only |
| STATUS mandatory |
| DESCRIPTION |
| "The address of the interface to which the rule applies. |
| Using this parameter makes sense when multiple addresses are |
| associated to the same physical interface. If not defined |
| for the current rule this should be set to 0." |
| ::= { ipFwAccEntry 7 } |
| |
| ipFwAccProto OBJECT-TYPE |
| SYNTAX INTEGER { |
| other(1), |
| all(2), |
| tcp(3), |
| udp(4), |
| icmp(5) |
| } |
| ACCESS read-only |
| STATUS mandatory |
| DESCRIPTION |
| "The protocol(s) to which the rule applies." |
| ::= { ipFwAccEntry 8 } |
| |
| ipFwAccBidir OBJECT-TYPE |
| SYNTAX INTEGER { |
| unidirectional(1), |
| bidirectional(2) |
| } |
| ACCESS read-only |
| STATUS mandatory |
| DESCRIPTION |
| "Whether the rule works in both directions (i.e. with the |
| source and destination parts swapped) or not." |
| ::= { ipFwAccEntry 9 } |
| |
| ipFwAccDir OBJECT-TYPE |
| SYNTAX INTEGER { |
| both(1), |
| in(2), |
| out(3) |
| } |
| ACCESS read-only |
| STATUS mandatory |
| DESCRIPTION |
| "Whether the rule applies to packets entering or exiting the |
| kernel." |
| ::= { ipFwAccEntry 10 } |
| |
| ipFwAccBytes OBJECT-TYPE |
| SYNTAX Counter |
| ACCESS read-only |
| STATUS mandatory |
| DESCRIPTION |
| "The number of bytes that matched this rule since the last |
| reset of the counters." |
| ::= { ipFwAccEntry 11 } |
| |
| ipFwAccPackets OBJECT-TYPE |
| SYNTAX Counter |
| ACCESS read-only |
| STATUS mandatory |
| DESCRIPTION |
| "The number of packets that matched this rule since the last |
| reset of the counters." |
| ::= { ipFwAccEntry 12 } |
| |
| ipFwAccNrSrcPorts OBJECT-TYPE |
| SYNTAX INTEGER |
| ACCESS read-only |
| STATUS mandatory |
| DESCRIPTION |
| "The number of ports that refer to the source address." |
| ::= { ipFwAccEntry 13 } |
| |
| ipFwAccNrDstPorts OBJECT-TYPE |
| SYNTAX INTEGER |
| ACCESS read-only |
| STATUS mandatory |
| DESCRIPTION |
| "The number of ports that refer to the destination address." |
| ::= { ipFwAccEntry 14 } |
| |
| ipFwAccSrcIsRange OBJECT-TYPE |
| SYNTAX INTEGER { |
| srchasrange(1), |
| srchasnorange(2) |
| } |
| ACCESS read-only |
| STATUS mandatory |
| DESCRIPTION |
| "Interpret the first two ports of the source part as |
| the upper and lower limit of an interval or not." |
| ::= { ipFwAccEntry 15 } |
| |
| ipFwAccDstIsRange OBJECT-TYPE |
| SYNTAX INTEGER { |
| dsthasrange(1), |
| dsthasnorange(2) |
| } |
| ACCESS read-only |
| STATUS mandatory |
| DESCRIPTION |
| "Interpret the first two ports of the destination part as |
| the upper and lower limit of an interval or not." |
| ::= { ipFwAccEntry 16 } |
| |
| ipFwAccPort1 OBJECT-TYPE |
| SYNTAX INTEGER |
| ACCESS read-only |
| STATUS mandatory |
| DESCRIPTION |
| "Port number 1." |
| ::= { ipFwAccEntry 17 } |
| |
| ipFwAccPort2 OBJECT-TYPE |
| SYNTAX INTEGER |
| ACCESS read-only |
| STATUS mandatory |
| DESCRIPTION |
| "Port number 2." |
| ::= { ipFwAccEntry 18 } |
| |
| ipFwAccPort3 OBJECT-TYPE |
| SYNTAX INTEGER |
| ACCESS read-only |
| STATUS mandatory |
| DESCRIPTION |
| "Port number 3." |
| ::= { ipFwAccEntry 19 } |
| |
| ipFwAccPort4 OBJECT-TYPE |
| SYNTAX INTEGER |
| ACCESS read-only |
| STATUS mandatory |
| DESCRIPTION |
| "Port number 4." |
| ::= { ipFwAccEntry 20 } |
| |
| ipFwAccPort5 OBJECT-TYPE |
| SYNTAX INTEGER |
| ACCESS read-only |
| STATUS mandatory |
| DESCRIPTION |
| "Port number 5." |
| ::= { ipFwAccEntry 21 } |
| |
| ipFwAccPort6 OBJECT-TYPE |
| SYNTAX INTEGER |
| ACCESS read-only |
| STATUS mandatory |
| DESCRIPTION |
| "Port number 6." |
| ::= { ipFwAccEntry 22 } |
| |
| ipFwAccPort7 OBJECT-TYPE |
| SYNTAX INTEGER |
| ACCESS read-only |
| STATUS mandatory |
| DESCRIPTION |
| "Port number 7." |
| ::= { ipFwAccEntry 23 } |
| |
| ipFwAccPort8 OBJECT-TYPE |
| SYNTAX INTEGER |
| ACCESS read-only |
| STATUS mandatory |
| DESCRIPTION |
| "Port number 8." |
| ::= { ipFwAccEntry 24 } |
| |
| ipFwAccPort9 OBJECT-TYPE |
| SYNTAX INTEGER |
| ACCESS read-only |
| STATUS mandatory |
| DESCRIPTION |
| "Port number 9." |
| ::= { ipFwAccEntry 25 } |
| |
| ipFwAccPort10 OBJECT-TYPE |
| SYNTAX INTEGER |
| ACCESS read-only |
| STATUS mandatory |
| DESCRIPTION |
| "Port number 10." |
| ::= { ipFwAccEntry 26 } |
| |
| END |
