Results 1 to 5 of 5
  1. #1
    Newbie
    Join Date
    Jul 2010
    Posts
    13

    Default Custom signatures

    Could someone please direct me on how to create a new signature? Right now I only need to be able to block packets starting with 5 or so specific characters in the data and then the rest will be dynamic content/length.

    Thanks!

  2. #2
    Master Untangler
    Join Date
    Apr 2007
    Posts
    594

    Default

    I am pretty sure the default ruleset for signatures comes from here, so this might be a good place to start.
    http://l7-filter.sourceforge.net/

  3. #3
    Newbie
    Join Date
    Jul 2010
    Posts
    13

    Default

    I'm finding this to be a little confusing. Does anyone have a quick template that can do what I need?

    Thanks

  4. #4
    Untangler RatKnight's Avatar
    Join Date
    Nov 2010
    Location
    Shepherd University
    Posts
    57

    Default

    Honestly, you need to download the "l7-protocols-2009-05-28" file. Under "protocols" you will have a listing of .pat files. Open them with Notepad++, and take a look. It will give you the pattern, etc. You just go into your untange server, add one, and put in that information... Honestly though, the current is probably based off of this tanyhow... so... yea.

  5. #5
    Untangle Junkie dmorris's Avatar
    Join Date
    Nov 2006
    Location
    San Carlos, CA
    Posts
    17,486

    Default

    The signatures are just regex. Do some googling and you'll find some regex tutorials about how to write regexs and you can just write your own fairly easily.
    Attention: Support and help on the Untangle Forums is provided by volunteers and community members like yourself.
    If you need Untangle support please call or email support@untangle.com

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

SEO by vBSEO 3.6.0 PL2