# # # # action { tag = 10000, execute = "/usr/bin/mail -s 'tag 10000' root" }; action { tag = 2000, every 10 seconds, execute = "echo 'XXXXXXXX tag 2000 packet XXXXXXXX'" }; # action { protocol = udp, result = block, execute = "/usr/bin/mail -s 'blocked udp' root" }; # action { srcip = 10.1.0.0/16, dstip = 192.168.1.0/24, execute = "/usr/bin/mail -s 'from 10.1 to 192.168.1' root" }; # action { rule = 12, tag = 101, direction = in, result = block, protocol = udp, srcip = 10.1.0.0/16, dstip = 192.168.1.0/24, execute = "run shell command" }; #