WFilter: Created page with "{{DISPLAYTITLE:Custom Protocols}} == Protocols == You can customize protocols and application in this module. Protocols can be blocked by App Control and repo..."

2021-03-18T08:56:06Z

Created page with "{{DISPLAYTITLE:Custom Protocols}} == Protocols == You can customize protocols and application in this module. Protocols can be blocked by App Control and repo..."

New page

{{DISPLAYTITLE:Custom Protocols}}

== Protocols ==

You can customize protocols and application in this module. Protocols can be blocked by [[appcontrol|App Control]] and reported in [[wfreport|Reports]].

Screenshots:

[[File: protocols01.png|750px]]

[[File: protocols02.png|750px]]

Settings:

* Type:
** TCP SEND, match TCP outgoing packets.
** TCP RECV, match TCP incoming packets.
** TCP ALL, match TCP outgoing & incoming packets.
** UDP SEND, match UDP outgoing packets.
** UDP RECV, match UDP incoming packets.
** UDP ALL, match UDP outgoing & incoming packets.
** HTTP SEND, match HTTP request headers.
** HTTP RECV, match HTTP response headers.
** TLS, match TLS domains.
* Offset: start matching position.
* Format:
** Regular expression: matching packet content against a regular expression.
** Fixed port: matching a fixed remote port.
* Local Ports: matching local ports, allow comma separated list of port ranges, eg:"100-200,201,300-400".
* Remote Ports: matching remote ports, allow comma separated list of port ranges, eg:"100-200,201,300-400".
* Packet Length: matching packet length, allow comma separated list of length ranges, eg:"100-200,201,300-400".

== Examples ==
=== Regular Expression ===

Take "HTTP" as an example, HTTP is matched against a regular expression as "^(GET|CONNECT|HEAD|OPTIONS|PUT)\s.*HTTP":

[[File: protocols_http.png|750px]]

=== Fixed Port ===

Take "FTP" as an example, FTP runs on a fixed port 21, so we make a fixed port pattern:

[[File: protocols_ftp.png|750px]]

Protocols - Revision history

WFilter: Created page with "{{DISPLAYTITLE:Custom Protocols}} == Protocols == You can customize protocols and application in this module. Protocols can be blocked by App Control and repo..."