PC World 2006 November/PCWorld_2006-11_cd.bin/zabezpeceni/avs/avs.msi/AH_Bases_fwpresets.ini

Text File | 2006-08-28 | 122KB | 6,538 lines

;Concise format description:
;
;[App preset name]               [non-empty string]           preset name (if 'PacketRule' specified, packet rule will be created)
;App=app1.exe, app2.exe          [set of non-empty strings]   list of executable files. comma-separated
;CommandLine=app args            [string]                     arguments with witch process has been started
;UseCommandLine=1                [1,0]                        use / not use command line parameter. 0 by default
;Name=some App activity          [non-empty string]           rule name (must be the first line of each rule description)
;Enable=1                        [1,0]                        enable / disable rule. 1 by default
;Allow=1                         [1,0]                        allow / deny network activity. 1 by default
;Protocol=TCP                    [TCP,UDP]                    protocol. TCP by default
;Direction=OutboundStream        [Inbound,Outbound,InboundOutbound,InboundStream,OutboundStream] direction. InboundOutbound by default
;RemotePort=21, 22, 25-28        [set of port numbers]        remote ports (only for TCP and UDP protocols may be specified). comma-separated
;LocalPort=21, 22, 25-27         [set of port numbers]        local ports (only for TCP and UDP protocols may be specified). comma-separated
;RemoteAddress=1.2.3.4, 4.3.2.1  [set of ip-addresses]        remote addresses. comma-separated
;LocalAddress=1.2.3.4, 4.3.2.1   [set of ip-addresses]        remote addresses. comma-separated. for packet rules only.
;Log=1                           [1,0]                        log then applied. 0 by default
;Warning=1                       [1,0]                        notify (show ballon) then applied. 0 by default

[Allow All]
Name=Allow Any TCP Activity
Protocol=TCP

Name=Allow Any UDP Activity
Protocol=UDP

[Block All]
Name=Block Any TCP Activity
Allow=0
Protocol=TCP

Name=Block Any UDP Activity
Allow=0
Protocol=UDP

;General

[Mail Client]
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Send Mail By Default Mail Client
Protocol=TCP
RemotePort=25, 465
Direction=OutboundStream

Name=Read News By Default Mail Client
Protocol=TCP
RemotePort=119
Direction=OutboundStream

Name=Receive Mail By Default Mail Client
Protocol=TCP
RemotePort=110, 995
Direction=OutboundStream

Name=Default Mail Client IMAP Activity
Protocol=TCP
RemotePort=143, 993
Direction=OutboundStream

[Browser]
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Browser HTTP Activity
Protocol=TCP
RemotePort=80-83
Direction=OutboundStream

Name=Browser HTTPS Activity
Protocol=TCP
RemotePort=443
Direction=OutboundStream

Name=Browser SOCKS Activity
Protocol=TCP
RemotePort=1080
Direction=OutboundStream

Name=Browser PROXY Activity
Protocol=TCP
RemotePort=3128, 8080, 8088
Direction=OutboundStream

Name=Browser FTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=Browser FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[Download Manager]
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Download Manager HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

Name=Download Manager FTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=Download Manager FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[FTP Client]
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=FTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[Telnet Client]
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Telnet Activity
Protocol=TCP
RemotePort=23
Direction=OutboundStream

Name=Secure Telnet Activity
Protocol=TCP
RemotePort=22
Direction=OutboundStream

[Time Synchronizer]
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Time Synchronizer Activity
Protocol=UDP
RemotePort=123

Name=Time Synchronizer Activity
Protocol=UDP
RemotePort=37

Name=Time Synchronizer Activity
Protocol=TCP
RemotePort=37
Direction=OutboundStream

Name=Time Synchronizer Activity
Protocol=TCP
RemotePort=13
Direction=OutboundStream

;Windows services

[Microsoft ICS Manager]
App=icsmgr.exe
Name=Microsoft ICS Manager DNS Resolving
Protocol=UDP
RemotePort=53
Direction=OutboundStream
RemoteAddress=10.0.0.0/255.0.0.0, 169.254.0.0/255.255.0.0, 172.16.0.0/255.240.0.0, 192.168.0.0/255.255.0.0

Name=Microsoft ICS Manager Activity
Protocol=UDP
RemotePort=67
RemoteAddress=10.0.0.0/255.0.0.0, 169.254.0.0/255.255.0.0, 172.16.0.0/255.240.0.0, 192.168.0.0/255.255.0.0

[Microsoft ActiveSync]
App=wcescomm.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Send Mail By Microsoft ActiveSync
Protocol=TCP
RemotePort=25, 465
Direction=OutboundStream

Name=Receive Mail By Microsoft ActiveSync
Protocol=TCP
RemotePort=110, 995
Direction=OutboundStream

Name=Microsoft ActiveSync IMAP Activity
Protocol=TCP
RemotePort=143, 993
Direction=OutboundStream

Name=Microsoft ActiveSync HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[Generic Host Process]
App=svchost.exe
Name=Localhost UDP Activity
Protocol=UDP
RemoteAddress=127.0.0.1
RemotePort=1024-65535
Direction=OutboundStream

Name=Svchost DNS Service Over UDP
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Svchost DNS Service Over TCP
Protocol=TCP
RemotePort=53
Direction=OutboundStream

Name=Svchost DCOM Activity
Protocol=TCP
RemotePort=135
Direction=OutboundStream

Name=DHCP Service
Protocol=UDP
LocalPort=68
RemotePort=67
Direction=InboundOutbound

Name=HTTP Activity
Protocol=TCP
RemotePort=80
Direction=OutboundStream

Name=HTTPS Activity
Protocol=TCP
RemotePort=443
Direction=OutboundStream

Name=Time Synchronizer Activity
Protocol=UDP
RemotePort=123
Direction=OutboundStream

Name="SSDP Discovery Service" And "UPnP device Host" Activity
Protocol=UDP
LocalPort=1024-65535
RemotePort=1900
RemoteAddress=10.0.0.0/255.0.0.0, 169.254.0.0/255.255.0.0, 172.16.0.0/255.240.0.0, 192.168.0.0/255.255.0.0, 239.255.255.250/255.255.255.255
Direction=InboundOutbound

Name="SSDP Discovery Service" And "UPnP device Host" Activity
Protocol=UDP
LocalPort=1900
RemoteAddress=10.0.0.0/255.0.0.0, 169.254.0.0/255.255.0.0, 172.16.0.0/255.240.0.0, 192.168.0.0/255.255.0.0
Direction=InboundStream

Name="SSDP Discovery Service" And "UPnP device Host" Activity
Protocol=TCP
RemotePort=5000
Direction=OutboundStream

Name=Microsoft Remote Desktop TCP Activity
Protocol=TCP
RemotePort=3389
Direction=OutboundStream

Name=Generic Host Process LDAP Activity
Protocol=TCP
RemotePort=389, 3268
Direction=OutboundStream

[Microsoft ALG Service]
App=alg.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Allow ALG Redirect
Protocol=TCP
Direction=InboundStream

Name=Microsoft Application Layer Gateway Service Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

[Microsoft Application Error Reporting]
App=dw.exe, dwwin.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Microsoft Application Error Reporting HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[Microsoft Registration Wizard]
App=regwiz.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Microsoft Registration Wizard HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[Microsoft RDP CIip Monitor]
App=rdpclip.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Microsoft RDP CIip Monitor TCP Activity
Protocol=TCP
RemotePort=3389
Direction=OutboundStream

Name=Microsoft RDP CIip Monitor UDP Activity
Protocol=UDP
RemotePort=3389

[Microsoft Remote Desktop]
App=mstsc.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Microsoft Remote Desktop TCP Activity
Protocol=TCP
RemotePort=3389
Direction=OutboundStream

Name=Microsoft Remote Desktop UDP Activity
Protocol=UDP
RemotePort=3389

[Microsoft Remote Desktop Help Session Manager]
App=sessmgr.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Microsoft Remote Desktop Help Session Manager Activity
Protocol=UDP
RemotePort=1900, 2234

[Microsoft Synchronization Manager]
App=mobsync.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Microsoft Synchronization Manager HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[Microsoft Windows AutoUpdate]
App=wuauclt.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Microsoft Windows AutoUpdate HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[Run a DLL as an App]
App=rundll32.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name="SSDP Discovery Service" And "UPnP device Host" Activity
Protocol=UDP
LocalPort=1024-65535
RemotePort=1900
RemoteAddress=10.0.0.0/255.0.0.0, 169.254.0.0/255.255.0.0, 172.16.0.0/255.240.0.0, 192.168.0.0/255.255.0.0, 239.255.255.250/255.255.255.255
Direction=InboundOutbound

Name="SSDP Discovery Service" And "UPnP device Host" Activity
Protocol=UDP
LocalPort=1900
RemoteAddress=10.0.0.0/255.0.0.0, 169.254.0.0/255.255.0.0, 172.16.0.0/255.240.0.0, 192.168.0.0/255.255.0.0
Direction=InboundStream

Name="SSDP Discovery Service" And "UPnP device Host" Activity
Protocol=TCP
RemotePort=5000
Direction=OutboundStream

Name=ICS TCP Activity
Protocol=TCP
LocalPort=1000-4000
Direction=OutboundStream

Name=ICS UDP Activity
Protocol=UDP
LocalPort=1000-4000

[SSDP Service]
App=ssdpsrv.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=ICS TCP Activity
Protocol=TCP
LocalPort=1000-4000
Direction=OutboundStream

Name=ICS UDP Activity
Protocol=UDP
LocalPort=1000-4000

[Spooler SubSystem App]
App=spoolsv.exe
Name=DNS Service
Protocol=UDP
Direction=OutboundStream
RemotePort=53

Name=Spooler SubSystem DCOM Activity
Protocol=TCP
RemotePort=135, 1025-1040
Direction=OutboundStream

;Mail

[FoxMail]
App=foxmail.exe, foxhot.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Send Mail By FoxMail
Protocol=TCP
RemotePort=25, 465
Direction=OutboundStream

Name=Receive Mail By FoxMail
Protocol=TCP
RemotePort=110, 995
Direction=OutboundStream

Name=FoxMail HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[IncrediMail]
App=incmail.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Send Mail By IncrediMail
Protocol=TCP
RemotePort=25, 465
Direction=OutboundStream

Name=Receive Mail By IncrediMail
Protocol=TCP
RemotePort=110, 995
Direction=OutboundStream

Name=IncrediMail IMAP Activity
Protocol=TCP
RemotePort=143, 993
Direction=OutboundStream

Name=IncrediMail HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[Outlook Express]
App=msimn.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Send Mail By Outlook Express
Protocol=TCP
RemotePort=25, 465
Direction=OutboundStream

Name=Outlook Express NNTP Activity
Protocol=TCP
RemotePort=119
Direction=OutboundStream

Name=Receive Mail By Outlook Express
Protocol=TCP
RemotePort=110, 995
Direction=OutboundStream

Name=Outlook Express IMAP Activity
Protocol=TCP
RemotePort=143, 993
Direction=OutboundStream

Name=Outlook Express HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

Name=Outlook Express LDAP Activity
Protocol=TCP
RemotePort=389, 3268
Direction=OutboundStream

Name=Outlook Express Exchange Client Activity
Protocol=TCP
RemotePort=135
Direction=OutboundStream

[Microsoft Outlook]
App=outlook.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Send Mail By Microsoft Outlook
Protocol=TCP
RemotePort=25, 465
Direction=OutboundStream

Name=Microsoft Outlook NNTP Activity
Protocol=TCP
RemotePort=119
Direction=OutboundStream

Name=Receive Mail By Microsoft Outlook
Protocol=TCP
RemotePort=110, 995
Direction=OutboundStream

Name=Microsoft Outlook IMAP Activity
Protocol=TCP
RemotePort=143, 993
Direction=OutboundStream

Name=Microsoft Outlook HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

Name=Microsoft Outlook LDAP Activity
Protocol=TCP
RemotePort=389, 3268
Direction=OutboundStream

Name=Microsoft Outlook Exchange Client Activity
Protocol=TCP
RemotePort=135
Direction=OutboundStream

[Pegasus Mail]
App=winpm-32.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Send Mail By Pegasus Mail
Protocol=TCP
RemotePort=25, 465
Direction=OutboundStream

Name=Receive Mail By Pegasus Mail
Protocol=TCP
RemotePort=110, 995
Direction=OutboundStream

Name=Pegasus Mail IMAP Activity
Protocol=TCP
RemotePort=143, 993
Direction=OutboundStream

Name=Pegasus Mail HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[The BAT]
App=thebat.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Send Mail By The BAT
Protocol=TCP
RemotePort=25, 465
Direction=OutboundStream

Name=Read News By The BAT
Protocol=TCP
RemotePort=119
Direction=OutboundStream

Name=Receive Mail By The BAT
Protocol=TCP
RemotePort=110, 995
Direction=OutboundStream

Name=The BAT IMAP Activity
Protocol=TCP
RemotePort=143, 993
Direction=OutboundStream

Name=The Bat LDAP Activity
Protocol=TCP
RemotePort=389, 3268
Direction=OutboundStream

[Express Plus]
App=expressplus.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Send Mail By Express Plus
Protocol=TCP
RemotePort=25, 465
Direction=OutboundStream

Name=Receive Mail By Express Plus
Protocol=TCP
RemotePort=110, 995
Direction=OutboundStream

Name=Express Plus IMAP Activity
Protocol=TCP
RemotePort=143, 993
Direction=OutboundStream

Name=Express Plus HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[Becky!]
App=b2.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Send Mail By Becky!
Protocol=TCP
RemotePort=25, 465
Direction=OutboundStream

Name=Read News By Becky!
Protocol=TCP
RemotePort=119
Direction=OutboundStream

Name=Receive Mail By Becky!
Protocol=TCP
RemotePort=110, 995
Direction=OutboundStream

Name=Becky! IMAP Activity
Protocol=TCP
RemotePort=143, 993
Direction=OutboundStream

[Eudora]
App=eudora.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Send Mail By Eudora
Protocol=TCP
RemotePort=25, 465
Direction=OutboundStream

Name=Receive Mail By Eudora
Protocol=TCP
RemotePort=110, 995
Direction=OutboundStream

Name=Eudora IMAP Activity
Protocol=TCP
RemotePort=143, 993
Direction=OutboundStream

Name=Eudora HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[Calypso]
App=calypso.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Send Mail By Calypso
Protocol=TCP
RemotePort=25, 465
Direction=OutboundStream

Name=Receive Mail By Calypso
Protocol=TCP
RemotePort=110, 995
Direction=OutboundStream

Name=Calypso LDAP Activity
Protocol=TCP
RemotePort=389, 3268
Direction=OutboundStream

Name=Calypso HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[Mozilla Thunderbird]
App=thunderbird.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Send Mail By Mozilla Thunderbird
Protocol=TCP
RemotePort=25, 465
Direction=OutboundStream

Name=Receive Mail By Mozilla Thunderbird
Protocol=TCP
RemotePort=110, 995
Direction=OutboundStream

Name=Mozilla Thunderbird IMAP Activity
Protocol=TCP
RemotePort=143, 993
Direction=OutboundStream

Name=Mozilla Thunderbird HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

Name=Mozilla Thunderbird Localhost TCP Activity
Protocol=TCP
RemoteAddress=127.0.0.1
Direction=OutboundStream

Name=Read News By Mozilla Thunderbird
Protocol=TCP
RemotePort=119
Direction=OutboundStream

[YahooPOPs!]
App=yahoopops.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Receive Mail By YahooPOPs!
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[Yahta]
App=yahta.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Receive Mail By Yahta
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[AD MailBox Manager]
App=mbm.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=AD MailBox Manager Activity
Protocol=TCP
RemotePort=110, 995
Direction=OutboundStream

[Magic Mail Monitor]
App=magic.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Magic Mail Monitor Activity
Protocol=TCP
RemotePort=110, 995
Direction=OutboundStream

[MailBell]
App=Mailbell.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=MailBell Activity
Protocol=TCP
RemotePort=110, 995
Direction=OutboundStream

[Mail Navigator]
App=connect.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Receive Mail By Mail Navigator
Protocol=TCP
RemotePort=110, 995
Direction=OutboundStream

Name=Send Mail By Mail Navigator
Protocol=TCP
RemotePort=25
Direction=OutboundStream

[Mail.Ru Agent]
App=mra.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Mail.Ru Agent HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

Name=Mail.Ru Agent Activity
Protocol=TCP
RemotePort=2041, 2042
Direction=OutboundStream

[POP Peeper]
App=poppeeper.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Send Mail By POP Peeper
Protocol=TCP
RemotePort=25, 465
Direction=OutboundStream

Name=Receive Mail By POP Peeper
Protocol=TCP
RemotePort=110, 995
Direction=OutboundStream

Name=POP Peeper HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[MSGTAG]
App=MSGTAG.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Send Tagged Mail By MSGTAG
Protocol=TCP
RemotePort=25, 465
Direction=OutboundStream

Name=MSGTAG HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[GMail Notifier]
App=gnotify.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=GMail Notifier HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

;Browser

[Windows Explorer]
App=explorer.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Windows Explorer HTTP Activity
Enable=0
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

Name=Windows Explorer FTP Activity
Enable=0
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=Windows Explorer FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

Name=Windows Explorer LDAP Activity
Protocol=TCP
Direction=OutboundStream
RemotePort=389, 3268

[Amaya]
App=amaya.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Amaya HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[Avant Browser]
App=avant.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Avant Browser HTTP Activity
Protocol=TCP
RemotePort=80-83
Direction=OutboundStream

Name=Avant Browser HTTPS Activity
Protocol=TCP
RemotePort=443
Direction=OutboundStream

Name=Avant Browser SOCKS Activity
Protocol=TCP
RemotePort=1080
Direction=OutboundStream

Name=Avant Browser PROXY Activity
Protocol=TCP
RemotePort=3128, 8080, 8088
Direction=OutboundStream

Name=Avant Browser FTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=Avant Browser FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[Internet Explorer]
App=iexplore.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Internet Explorer HTTP Activity
Protocol=TCP
RemotePort=80-83
Direction=OutboundStream

Name=Internet Explorer HTTPS Activity
Protocol=TCP
RemotePort=443
Direction=OutboundStream

Name=Internet Explorer SOCKS Activity
Protocol=TCP
RemotePort=1080
Direction=OutboundStream

Name=Internet Explorer PROXY Activity
Protocol=TCP
RemotePort=3128, 8080, 8088
Direction=OutboundStream

Name=Internet Explorer Gopher Activity
Protocol=TCP
RemotePort=70
Direction=OutboundStream

Name=Internet Explorer Web Folders
Protocol=TCP
LocalPort=1375
Direction=InboundStream

Name=Internet Explorer Web Folders
Protocol=UDP
LocalPort=1040-1050

Name=Internet Explorer FTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=Internet Explorer FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

Name=Internet Explorer show video
Protocol=TCP
RemotePort=554
Direction=OutboundStream

[Netscape Navigator]
App=netscape.exe, netscp.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Netscape HTTP Activity
Protocol=TCP
RemotePort=80-83
Direction=OutboundStream

Name=Netscape HTTPS Activity
Protocol=TCP
RemotePort=443
Direction=OutboundStream

Name=Netscape SOCKS Activity
Protocol=TCP
RemotePort=1080
Direction=OutboundStream

Name=Netscape PROXY Activity
Protocol=TCP
RemotePort=3128, 8080, 8088
Direction=OutboundStream

Name=Netscape Messenger Send Mail
Protocol=TCP
RemotePort=25
Direction=OutboundStream

Name=Netscape Messenger Read News
Protocol=TCP
RemotePort=119
Direction=OutboundStream

Name=Netscape Messenger Receive Mail
Protocol=TCP
RemotePort=110, 995
Direction=OutboundStream

Name=Netscape Messenger IMAP Activity
Protocol=TCP
RemotePort=143
Direction=OutboundStream

Name=Netscape FTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=Netscape FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[Netscape Mail Notification]
App=nsnotify.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Netscape Mail Notification
Protocol=TCP
RemotePort=110, 995
Direction=OutboundStream

[Crazy Browser]
App=crazy browser.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Crazy Browser HTTP Activity
Protocol=TCP
RemotePort=80-83
Direction=OutboundStream

Name=Crazy Browser HTTPS Activity
Protocol=TCP
RemotePort=443
Direction=OutboundStream

Name=Crazy Browser SOCKS Activity
Protocol=TCP
RemotePort=1080
Direction=OutboundStream

Name=Crazy Browser PROXY Activity
Protocol=TCP
RemotePort=3128, 8080, 8088
Direction=OutboundStream

Name=Crazy Browser Gopher Activity
Protocol=TCP
RemotePort=70
Direction=OutboundStream

Name=Crazy Browser FTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=Crazy Browser FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[The Off By One Web Browser]
App=ob1.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=The Off By One Web Browser HTTP Activity
Protocol=TCP
RemotePort=80-83
Direction=OutboundStream

Name=The Off By One Web Browser HTTPS Activity
Protocol=TCP
RemotePort=443
Direction=OutboundStream

Name=The Off By One Web Browser SOCKS Activity
Protocol=TCP
RemotePort=1080
Direction=OutboundStream

Name=The Off By One Web Browser PROXY Activity
Protocol=TCP
RemotePort=3128, 8080, 8088
Direction=OutboundStream

[Opera]
App=opera.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Opera HTTP Activity
Protocol=TCP
RemotePort=80-83
Direction=OutboundStream

Name=Opera HTTPS Activity
Protocol=TCP
RemotePort=443
Direction=OutboundStream

Name=Opera SOCKS Activity
Protocol=TCP
RemotePort=1080
Direction=OutboundStream

Name=Opera PROXY Activity
Protocol=TCP
RemotePort=3128, 8080, 8088
Direction=OutboundStream

Name=Opera FTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=Opera FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

Name=Opera NNTP Activity
Protocol=TCP
RemotePort=119
Direction=OutboundStream

Name=Opera SMTP Activity
Protocol=TCP
RemotePort=25
Direction=OutboundStream

Name=Opera POP3 Activity
Protocol=TCP
RemotePort=110, 995
Direction=OutboundStream

[NetCaptor]
App=netcaptor.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=NetCaptor HTTP Activity
Protocol=TCP
RemotePort=80-83
Direction=OutboundStream

Name=NetCaptor HTTPS Activity
Protocol=TCP
RemotePort=443
Direction=OutboundStream

Name=NetCaptor SOCKS Activity
Protocol=TCP
RemotePort=1080
Direction=OutboundStream

Name=NetCaptor PROXY Activity
Protocol=TCP
RemotePort=3128, 8080, 8088
Direction=OutboundStream

Name=NetCaptor Gopher Activity
Protocol=TCP
RemotePort=70
Direction=OutboundStream

Name=NetCaptor Web Folders
Protocol=TCP
LocalPort=1375
Direction=InboundStream

Name=NetCaptor Web Folders
Protocol=UDP
LocalPort=1040-1050

Name=NetCaptor FTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=NetCaptor FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[NeoPlanet]
App=np.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=NeoPlanet HTTP Activity
Protocol=TCP
RemotePort=80-83
Direction=OutboundStream

Name=NeoPlanet HTTPS Activity
Protocol=TCP
RemotePort=443
Direction=OutboundStream

Name=NeoPlanet SOCKS Activity
Protocol=TCP
RemotePort=1080
Direction=OutboundStream

Name=NeoPlanet PROXY Activity
Protocol=TCP
RemotePort=3128, 8080, 8088
Direction=OutboundStream

Name=NeoPlanet Gopher Activity
Protocol=TCP
RemotePort=70
Direction=OutboundStream

Name=NeoPlanet Web Folders
Protocol=TCP
LocalPort=1375
Direction=InboundStream

Name=NeoPlanet Web Folders
Protocol=UDP
LocalPort=1040-1050

Name=NeoPlanet FTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=NeoPlanet FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[Phoenix Web Browser]
App=phoenix.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Phoenix Web Browser HTTP Activity
Protocol=TCP
RemotePort=80-83
Direction=OutboundStream

Name=Phoenix Web Browser HTTPS Activity
Protocol=TCP
RemotePort=443
Direction=OutboundStream

Name=Phoenix Web Browser SOCKS Activity
Protocol=TCP
RemotePort=1080
Direction=OutboundStream

Name=Phoenix Web Browser PROXY Activity
Protocol=TCP
RemotePort=3128, 8080, 8088
Direction=OutboundStream

Name=Phoenix Web Browser FTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=Phoenix Web Browser FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[Mozilla Firebird]
App=mozillafirebird.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Mozilla Firebird HTTP Activity
Protocol=TCP
RemotePort=80-83
Direction=OutboundStream

Name=Mozilla Firebird HTTPS Activity
Protocol=TCP
RemotePort=443
Direction=OutboundStream

Name=Mozilla Firebird SOCKS Activity
Protocol=TCP
RemotePort=1080
Direction=OutboundStream

Name=Mozilla Firebird PROXY Activity
Protocol=TCP
RemotePort=3128, 8080, 8088
Direction=OutboundStream

Name=Mozilla Firebird FTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=Mozilla Firebird FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[Mozilla Firefox]
App=firefox.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Mozilla Firefox HTTP Activity
Protocol=TCP
RemotePort=80-83
Direction=OutboundStream

Name=Mozilla Firefox Localhost Activity
Protocol=TCP
RemoteAddress=127.0.0.1
Direction=OutboundStream

Name=Mozilla Firefox HTTPS Activity
Protocol=TCP
RemotePort=443
Direction=OutboundStream

Name=Mozilla Firefox SOCKS Activity
Protocol=TCP
RemotePort=1080
Direction=OutboundStream

Name=Mozilla Firefox PROXY Activity
Protocol=TCP
RemotePort=3128, 8080, 8088
Direction=OutboundStream

Name=Mozilla Firefox FTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=Mozilla Firefox FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[Smart Explorer]
App=sexplorer.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Smart Explorer HTTP Activity
Protocol=TCP
RemotePort=80-83
Direction=OutboundStream

Name=Smart Explorer HTTPS Activity
Protocol=TCP
RemotePort=443
Direction=OutboundStream

Name=Smart Explorer SOCKS Activity
Protocol=TCP
RemotePort=1080
Direction=OutboundStream

Name=Smart Explorer PROXY Activity
Protocol=TCP
RemotePort=3128, 8080, 8088
Direction=OutboundStream

Name=Smart Explorer Gopher Activity
Protocol=TCP
RemotePort=70
Direction=OutboundStream

Name=Smart Explorer Web Folders
Protocol=TCP
LocalPort=1375
Direction=InboundStream

Name=Smart Explorer Web Folders
Protocol=UDP
LocalPort=1040-1050

Name=Smart Explorer FTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=Smart Explorer FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[Mozilla]
App=mozilla.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Mozilla HTTP Activity
Protocol=TCP
RemotePort=80-83
Direction=OutboundStream

Name=Mozilla Localhost Activity
Protocol=TCP
RemoteAddress=127.0.0.1
Direction=OutboundStream

Name=Mozilla HTTPS Activity
Protocol=TCP
RemotePort=443
Direction=OutboundStream

Name=Mozilla SOCKS Activity
Protocol=TCP
RemotePort=1080
Direction=OutboundStream

Name=Mozilla PROXY Activity
Protocol=TCP
RemotePort=3128, 8080, 8088
Direction=OutboundStream

Name=Mozilla Gopher Activity
Protocol=TCP
RemotePort=70
Direction=OutboundStream

Name=Mozilla FTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=Mozilla FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

Name=Mozilla Send Mail
Protocol=TCP
RemotePort=25
Direction=OutboundStream

Name=Mozilla Read News
Protocol=TCP
RemotePort=119
Direction=OutboundStream

Name=Mozilla Receive Mail
Protocol=TCP
RemotePort=110, 995
Direction=OutboundStream

Name=Mozilla IMAP Activity
Protocol=TCP
RemotePort=143
Direction=OutboundStream

[Maxthon Web Browser]
App=maxthon.exe,myie.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Maxthon Web Browser HTTP Activity
Protocol=TCP
RemotePort=80-83
Direction=OutboundStream

Name=Maxthon Web Browser HTTPS Activity
Protocol=TCP
RemotePort=443
Direction=OutboundStream

Name=Maxthon Web Browser SOCKS Activity
Protocol=TCP
RemotePort=1080
Direction=OutboundStream

Name=Maxthon Web Browser PROXY Activity
Protocol=TCP
RemotePort=3128, 8080, 8088
Direction=OutboundStream

Name=Maxthon Web Browser Gopher Activity
Protocol=TCP
RemotePort=70
Direction=OutboundStream

Name=Maxthon Web Folders
Protocol=TCP
LocalPort=1375
Direction=InboundStream

Name=Maxthon Web Folders
Protocol=UDP
LocalPort=1040-1050

Name=Maxthon Web Browser FTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=Maxthon Web Browser FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[GoSURF]
App=gosurf.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=GoSURF HTTP Activity
Protocol=TCP
RemotePort=80-83
Direction=OutboundStream

Name=GoSURF HTTPS Activity
Protocol=TCP
RemotePort=443
Direction=OutboundStream

Name=GoSURF SOCKS Activity
Protocol=TCP
RemotePort=1080
Direction=OutboundStream

Name=GoSURF PROXY Activity
Protocol=TCP
RemotePort=3128, 8080, 8088
Direction=OutboundStream

Name=GoSURF Gopher Activity
Protocol=TCP
RemotePort=70
Direction=OutboundStream

Name=GoSURF Web Folders
Protocol=TCP
LocalPort=1375
Direction=InboundStream

Name=GoSURF Web Folders
Protocol=UDP
LocalPort=1040-1050

;Proxies

[AnalogX Proxy]
App=proxy.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=AnalogX Proxy HTTP Activity
Protocol=TCP
RemotePort=80-83, 1080, 3128, 8080, 8088, 11523
Direction=OutboundStream

Name=AnalogX Proxy HTTPS Activity
Protocol=TCP
RemotePort=443
Direction=OutboundStream

Name=Send Mail By AnalogX Proxy
Protocol=TCP
RemotePort=25
Direction=OutboundStream

Name=Receive Mail By AnalogX Proxy
Protocol=TCP
RemotePort=110, 995
Direction=OutboundStream

Name=Read news By AnalogX Proxy
Protocol=TCP
RemotePort=119
Direction=OutboundStream

Name=AnalogX Proxy FTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=AnalogX Proxy FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[WebWasher]
App=wwasher.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=WebWasher Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[The Proxomitron]
App=proxomitron.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=The Proxomitron Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

Name=Allow Local Proxomitron Activity
Protocol=TCP
RemoteAddress=127.0.0.1
Direction=InboundStream

Name=Block Inbound Proxomitron Activity
Allow=0
Protocol=TCP
Direction=InboundStream

;Download Manager

[Download Accelerator Plus]
App=dap.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Download Accelerator Plus HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

Name=Download Accelerator Plus FTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=Download Accelerator Plus FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[LeechGet]
App=LeechGet.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=LeechGet HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

Name=LeechGet FTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=LeechGet FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[Download Master]
App=dmaster.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Download Master HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

Name=Download Master FTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=Download Master FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[ReGet]
App=reget.exe, regetdx.exe, regetjr.exe, regetpro.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=ReGet Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

Name=ReGet FTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=ReGet FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[ReGet Update]
App=regetupd.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=ReGet Updater
Protocol=TCP
RemotePort=80, 3128, 8080, 1080, 11523
Direction=OutboundStream

[3wGet]
App=3wget.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=3wGet Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

Name=3wGet FTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=3wGet FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[Mass Downloader]
App=massdown.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Mass Downloader Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

Name=Mass Downloader FTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=Mass Downloader FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[NetAnts]
App=netants.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=NetAnts Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

Name=NetAnts FTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=NetAnts FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[Lightning Download]
App=lightning.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Lightning Download Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

Name=Lightning Download FTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=Lightning Download FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[Star Downloader]
App=stardown.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Star Downloader Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

Name=Star Downloader FTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=Star Downloader FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[FlashGet]
App=jetcar.exe, flashget.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=FlashGet Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

Name=FlashGet FTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=FlashGet FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[Go!Zilla]
App=go.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Go!Zilla Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

Name=Go!Zilla FTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=Go!Zilla FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[GetRight]
App=getright.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=GetRight Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

Name=GetRight FTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=GetRight FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[Net Vampire]
App=vampire.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Net Vampire Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

Name=Net Vampire FTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=Net Vampire FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[WGET]
App=wget.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=WGET Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

Name=WGET FTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=WGET FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[Bit Torrent Client]
App=btdownloadgui.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Bit Torrent HTTP Activity
Protocol=TCP
RemotePort=80
Direction=OutboundStream

Name=Bit Torrent HTTPS Activity
Protocol=TCP
RemotePort=443
Direction=OutboundStream

Name=Bit Torrent Network TCP Outbound Activity
Protocol=TCP
RemotePort=1024-65535
Direction=OutboundStream

Name=Bit Torrent Network TCP Inbound Activity
Protocol=TCP
LocalPort=6881-6999
Direction=InboundStream

Name=TCP Inbound Coverage Activity
Allow=0
Protocol=TCP
Direction=InboundStream

Name=TCP Outbound Coverage Activity
Allow=0
Protocol=TCP
Direction=OutboundStream

Name=UDP Coverage Activity
Allow=0
Protocol=UDP

;Offline Browser

[DISCo Pump]
App=dpump.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=DISCo Pump Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[DISCo Pump Update]
App=dupgrad.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=DISCo Pump Update Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[Teleport Pro]
App=pro.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Teleport Pro Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[Offline Explorer]
App=oe.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Offline Explorer Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[SuperHTTP Web Spider]
App=superhttp.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=SuperHTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[WebZIP]
App=webzip.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=WebZIP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[WebCopier]
App=webcopier.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=WebCopier Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[WebSite eXtractor]
App=webextra.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=WebSite eXtractor Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

;Agnitum Products

[Tauscan Update]
App=taupdate.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Tauscan Update
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[Agnitum Products Update]
App=aupdrun.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Agnitum Products Update
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[Jammer]
App=jammer.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Jammer Report
Protocol=TCP
RemotePort=25
Direction=OutboundStream

[Agnitum Auto FeedBack]
App=feedback.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Agnitum Auto FeedBack
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[Agnitum Outpost Firewall]
App=outpost.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Outpost Firewall News
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

;FTP

[Windows FTP Client]
App=ftp.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Windows FTP Client Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=Windows FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[CuteFTP]
App=cutftp32.exe, cftppro.exe, ftpte.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=CuteFTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=CuteFTP FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

Name=CuteFTP HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[BulletProof FTP]
App=bpftp.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=BulletProof FTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=BulletProof FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[Dreamweaver FTP client]
App=dreamweaver.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Dreamweaver FTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=Dreamweaver FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[PrimaSoft AutoFTP]
App=ftppro.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=PrimaSoft FTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=PrimaSoft FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[FlashFXP]
App=flashfxp.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=FlashFXP FTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=FlashFXP FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[FTP Now]
App=ftp now.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=FTP Now Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=FTP Now DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[TurboFTP]
App=turboftp.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=TurboFTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=TurboFTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[AbsoluteFTP]
App=absoluteftp.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=AbsoluteFTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=AbsoluteFTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[RemFTP]
App=remftp.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=RemFTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=RemFTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[Simply COOL FTP]
App=scftp.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Simply COOL FTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=Simply COOL FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[Crystal FTP]
App=crystalftp.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Crystal FTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=Crystal FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

Name=Crystal FTP Update
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[KenFTP]
App=ken ftp.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=KenFTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=KenFTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[FTP Commander]
App=ftpcomm.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=FTP Commander Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=FTP Commander DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[FTP Navigator]
App=ftpnavi.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=FTP Navigator Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=FTP Navigator DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[AceFTP]
App=aceftp.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=AceFTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=AceFTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[AutoSyncFTP]
App=autosyncftp.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=AutoSyncFTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=AutoSyncFTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[Click FTP]
App=click ftp.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Click FTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=Click FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[CoffeeCup Direct FTP]
App=directftp5.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=CoffeeCup Direct FTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=CoffeeCup Direct FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[DC SmartFTP]
App=dcsmartftp.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=DC SmartFTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=DC SmartFTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[SmartFTP]
App=smartftp.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=SmartFTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=SmartFTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

Name=SmartFTP HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[FileZilla]
App=filezilla.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=FileZilla FTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=FileZilla FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[Site Publisher]
App=sitepub.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Site Publisher FTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=Site Publisher FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[FTP Voyager]
App=ftpvoyager.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=FTP Voyager Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=FTP Voyager DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[FTPRight]
App=ftpright.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=FTPRight Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=FTPRight DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[IglooFTP Pro]
App=iglooftp pro.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=IglooFTP Pro Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=IglooFTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[Magellan Explorer]
App=magellan.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Magellan Explorer FTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=Magellan Explorer FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[Microviet Internet FTP]
App=internet ftp.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Microviet Internet FTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=Microviet Internet FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[miniftp]
App=miniftp.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=miniftp Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=miniftp DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[NetLoad]
App=netload.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=NetLoad FTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=NetLoad FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[SecureFX]
App=securefx.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=SecureFX Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=SecureFX SFTP Activity
Protocol=TCP
RemotePort=22
Direction=OutboundStream

Name=SecureFX FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[WebFTP]
App=webftp3.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=WebFTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=WebFTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[WS_FTP]
App=ftp95pro.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=WS_FTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=WS_FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[Windows Sockets FTP Client]
App=winftp32.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=WinFTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=WinFTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[FAR Manager]
App=far.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=FAR Manager FTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=FAR Manager FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[Total Commander]
App=totalcmd.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Total Commander FTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=Total Commander FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[Windows Commander]
App=wincmd32.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Windows Commander FTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=Windows Commander FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

;Telnet

[SecureCRT]
App=securecrt.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=SecureCRT Activity
Protocol=TCP
RemotePort=22
Direction=OutboundStream

[AlphaCom Terminal Emulator]
App=alpha.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=AlphaCom Telnet Activity
Protocol=TCP
RemotePort=23
Direction=OutboundStream

[Anzio]
App=anzio32r.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Anzio Telnet Activity
Protocol=TCP
RemotePort=23
Direction=OutboundStream

Name=Anzio Rlogin Activity
Protocol=TCP
RemotePort=513
Direction=OutboundStream

[Com]
App=com75.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Com Telnet Activity
Protocol=TCP
RemotePort=23
Direction=OutboundStream

Name=Com Inbound Telnet Activity
Protocol=TCP
LocalPort=23
Direction=InboundStream

Name=Com FTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=Com FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[Emu]
App=emu.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Emu Telnet Activity
Protocol=TCP
RemotePort=23
Direction=OutboundStream

[IVT]
App=ivt.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=IVT Telnet Activity
Protocol=TCP
RemotePort=23
Direction=OutboundStream

[KoalaTerm]
App=mkt.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=KoalaTerm Telnet Activity
Protocol=TCP
RemotePort=23
Direction=OutboundStream

Name=KoalaTerm Echo Activity
Protocol=TCP
RemotePort=7
Direction=OutboundStream

[Mocha]
App=mtn5250.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Mocha Telnet Activity
Protocol=TCP
RemotePort=23
Direction=OutboundStream

[NetTerm]
App=netterm.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=NetTerm Telnet Activity
Protocol=TCP
RemotePort=23
Direction=OutboundStream

[Nexus Mainframe Terminal]
App=nmt.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Nexus Mainframe Terminal Telnet Activity
Protocol=TCP
RemotePort=23
Direction=OutboundStream

[Putty]
App=nmt.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Putty Telnet Activity
Protocol=TCP
RemotePort=23
Direction=OutboundStream

[Quick3270]
App=quick3270.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Quick3270 Telnet Activity
Protocol=TCP
RemotePort=23
Direction=OutboundStream

[ShellTelnet]
App=shellnet.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=ShellTelnet Telnet Activity
Protocol=TCP
RemotePort=23
Direction=OutboundStream

[TelStar]
App=telstar.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=TelStar Telnet Activity
Protocol=TCP
RemotePort=23
Direction=OutboundStream

[Telnet Streamer]
App=xns.exe, tns.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Telnet Streamer Activity
Protocol=TCP
RemotePort=23
Direction=OutboundStream

[Tera Term Pro]
App=ttermpro.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Tera Term Pro Activity
Protocol=TCP
RemotePort=22, 23
Direction=OutboundStream

[TN3270]
App=tn3270.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=TN3270 Telnet Activity
Protocol=TCP
RemotePort=23
Direction=OutboundStream

[Windows Telnet Client]
App=telnet.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Windows Telnet Client Activity
Protocol=TCP
RemotePort=23
Direction=OutboundStream

Name=Windows Telnet Client RLOGIN Activity
Protocol=TCP
RemotePort=513
Direction=OutboundStream

;Communications

[AOL Instant Messenger]
App=aim.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=AOL Instant Messenger Activity
Protocol=TCP
RemotePort=5190
Direction=OutboundStream

Name=AOL Instant Messenger HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[Boomerang SST]
App=shuttle.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Boomerang SST Activity
Protocol=TCP
RemoteAddress=216.129.147.*
Direction=OutboundStream

[Dwyco CDC32]
App=cdc32.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Dwyco CDC32 Server Activity
Protocol=TCP
RemotePort=6700-6703
Direction=OutboundStream

Name=Dwyco CDC32 Direct Activity
Protocol=TCP
RemotePort=6780
Direction=OutboundStream

Name=Dwyco CDC32 File Transfer
Protocol=TCP
RemotePort=1024-5000
Direction=OutboundStream

Name=Dwyco CDC32 Real-Time Audio And Video
Protocol=UDP
RemotePort=10096, 12000-16090

Name=Dwyco CDC32 Link Test
Protocol=TCP
RemotePort=0
Direction=OutboundStream

[ICQ]
App=icq.exe, icqlite.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=ICQ Server Activity
Protocol=UDP
RemotePort=4000

Name=ICQ Client Outbound UDP Activity
Protocol=UDP
RemotePort=5140, 5150
Direction=Outbound

Name=ICQ Client Inbound TCP Activity
Protocol=TCP
RemotePort=1024-65535
Direction=InboundStream

Name=ICQ Client Outbound TCP Activity
Protocol=TCP
RemotePort=1024-65535
Direction=OutboundStream

Name=ICQ Client Send Mail
Protocol=TCP
RemotePort=25
Direction=OutboundStream

Name=ICQ Client Receive Mail
Protocol=TCP
RemotePort=110, 995
Direction=OutboundStream

Name=ICQ Client HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[Miranda IM]
App=miranda32.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Miranda IRC AUTH Activity
Protocol=TCP
RemotePort=113
Direction=InboundStream

Name=Miranda IRC Activity
Protocol=TCP
RemotePort=6667-7000
Direction=OutboundStream

Name=Miranda MSN Activity
Protocol=TCP
RemotePort=1863
Direction=OutboundStream

Name=Miranda Yahoo Activity
Protocol=TCP
RemotePort=5050
Direction=OutboundStream

Name=Miranda Jabber Activity
Protocol=TCP
RemotePort=5222
Direction=OutboundStream

Name=Miranda HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 5190, 8000, 8080, 8088, 11523
Direction=OutboundStream

[MSN Messenger]
App=msmsgs.exe, msnmsgr.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=MSN Messenger Activity
Protocol=TCP
RemotePort=1863
Direction=OutboundStream

Name=MSN Messenger Voice Communications
Protocol=TCP
LocalPort=6901
Direction=OutboundStream

Name=MSN Messenger Voice Communications
Protocol=UDP
RemotePort=6901, 7001

Name=MSN Messenger File Transfer
Protocol=TCP
RemotePort=6891-6900
Direction=OutboundStream

Name=MSN Messenger Remote Assistance
Protocol=TCP
RemotePort=3389
Direction=OutboundStream

Name=MSN Messenger Application Sharing And Whiteboard
Protocol=TCP
RemotePort=1503
Direction=OutboundStream

Name=MSN Messenger RTP Activity
Protocol=UDP
LocalPort=5004-65535

Name=MSN Messenger Main Activity Via Proxy
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[Odigo]
App=odigo.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Odigo Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 2562, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[Eyeball Chat]
App=eyeballchat.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Eyeball Chat TCP Activity
Protocol=TCP
RemotePort=5500, 5501, 5515
Direction=OutboundStream

Name=Eyeball Chat UDP Activity
Protocol=UDP
RemotePort=5700-5702

[Trillian]
App=trillian.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Trillian IRC AUTH Activity
Protocol=TCP
RemotePort=113
Direction=InboundStream

Name=Trillian IRC Activity
Protocol=TCP
RemotePort=6667-7000
Direction=OutboundStream

Name=Trillian MSN Activity
Protocol=TCP
RemotePort=1863
Direction=OutboundStream

Name=Trillian Yahoo Activity
Protocol=TCP
RemotePort=5050
Direction=OutboundStream

Name=Trillian Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 5190, 8000, 8080, 8088, 11523
Direction=OutboundStream

[mIRC]
App=mirc32.exe, mirc.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=mIRC Activity
Protocol=TCP
RemotePort=6660-6670
Direction=OutboundStream

Name=mIRC AUTH Activity
Protocol=TCP
LocalPort=113
Direction=InboundStream

[Microsoft NetMeeting]
App=conf.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Microsoft NetMeeting Conference
Protocol=TCP
RemotePort=1000-2999
Direction=OutboundStream

Name=Microsoft NetMeeting Conference
Protocol=UDP
RemotePort=49600-49700

Name=Microsoft NetMeeting LDAP Activity
Protocol=TCP
RemotePort=389, 3268
Direction=OutboundStream

Name=Microsoft NetMeeting HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[Microsoft Chat]
App=cchat.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Microsoft Chat Activity
Protocol=TCP
RemotePort=6667
Direction=OutboundStream

Name=Microsoft Chat AUTH Activity
Protocol=TCP
RemotePort=113
Direction=InboundStream

[SMSTation]
App=smstation.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=SMSTation Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[Yahoo! Messenger]
App=ypager.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Yahoo! Messenger HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

Name=Yahoo! Messenger Send Mail
Protocol=TCP
RemotePort=25, 465
Direction=OutboundStream

Name=Yahoo! Messenger Login
Protocol=TCP
RemotePort=23, 5050
Direction=OutboundStream

Name=Yahoo! Messenger Conference TCP Activity
Protocol=TCP
RemotePort=5000, 5001
Direction=OutboundStream

Name=Yahoo! Messenger Conference UDP Activity
Protocol=UDP
LocalPort=5000

Name=Yahoo! Messenger Call Center
Protocol=UDP
RemotePort=6801

Name=Yahoo! Messenger Call Center
Protocol=UDP
LocalPort=5000, 5055

Name=Yahoo! Messenger Call Center
Protocol=TCP
RemotePort=7800-7825
Direction=OutboundStream

Name=Yahoo! Messenger WebCam
Protocol=TCP
RemotePort=5100
Direction=OutboundStream

[Yahoo! AutoUpdater]
App=yupdater.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Yahoo! Messenger AutoUpdater
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[Quiet Internet Pager]
App=qip.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=QIP HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 5190, 8000, 8080, 8088, 11523
Direction=OutboundStream

[Skype]
App=Skype.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Skype HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

Name=Skype Voice UDP Activity
Protocol=UDP
RemotePort=1024-65535
Direction=InboundOutbound

Name=Skype Voice TCP Activity
Protocol=TCP
RemotePort=1024-65535
Direction=InboundOutbound

[Simple Instant Messenger]
App=sim.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=SIM MSN Activity
Protocol=TCP
RemotePort=1863
Direction=OutboundStream

Name=SIM Yahoo Activity
Protocol=TCP
RemotePort=5050
Direction=OutboundStream

Name=SIM Jabber Activity
Protocol=TCP
RemotePort=5222
Direction=OutboundStream

Name=SIM HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 5190, 8000, 8080, 8088, 11523
Direction=OutboundStream

;Antiviral

[Dr. Web Update]
App=drwebupw.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Dr. Web Update
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[SpIDer Mail]
App=spiderml.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=SpIDer Mail Activity
Protocol=TCP
RemotePort=110, 995
Direction=OutboundStream

[NOD32 AntiVirus Control Centre]
App=nod32cc.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=NOD32 Update
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[NOD32 AntiVirus EMail Scanner]
App=pop3scan.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Scan Inbound Mail For Viruses
Protocol=TCP
RemotePort=110, 995
Direction=OutboundStream

[Symantec Common Client Application]
App=ccapp.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Scan Inbound Mail For Viruses
Protocol=TCP
RemotePort=25, 110, 143, 465, 993, 995
Direction=OutboundStream

[Symantec LiveUpdate]
App=lucomserver.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Symantec LiveUpdate HTTP
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

Name=Symantec LiveUpdate FTP
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=Symantec LiveUpdate FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[KAV Updater]
App=avpupd.exe, kavsvc.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=KAV Updater HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

Name=KAV Updater FTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=KAV Updater FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

[McAfee Update]
App=mupdate.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=McAfee Update
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[BitDefender Update]
App=bdmcon.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=BitDefender Update HTTP Activity
Protocol=TCP
Direction=OutboundStream
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523

[SpywareBlaster AutoUpdate]
App=spywareblaster.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=SpywareBlaster AutoUpdate Activity
Protocol=TCP
Direction=OutboundStream
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523

[AntiSpywareMain]
App=GIANTAntiSpywareMain.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Microsoft AntiSpyware Main HTTP Activity
Protocol=TCP
Direction=OutboundStream
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523

[AntiSpyware Data Service]
App=gcasDtServ.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Microsoft AntiSpyware Data Service HTTP Activity
Protocol=TCP
Direction=OutboundStream
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523

[AntiSpyware Updater]
App=GIANTAntiSpywareUpdater.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Microsoft AntiSpyware Updater HTTP Activity
Protocol=TCP
Direction=OutboundStream
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523

[AntiSpyware Service User Interface]
App=gcasServAlert.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Microsoft AntiSpyware Service User Interface HTTP Activity
Protocol=TCP
Direction=OutboundStream
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523

[Ad-Aware SE]
App=Ad-Aware.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Ad-Aware SE Update HTTP Activity
Protocol=TCP
Direction=OutboundStream
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523

[Spybot - Search&Destroy]
App=SpybotSD.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Spybot - Search & Destroy HTTP Activity
Protocol=TCP
Direction=OutboundStream
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523

[HiJackThis]
App=hijackthis.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=HiJackThis Update HTTP Activity
Protocol=TCP
Direction=OutboundStream
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523

[MooSoft Trojan Scanner And Cleaner]
App=cleaner.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=MooSoft Trojan Scanner And Cleaner FTP Activity
Protocol=TCP
Direction=OutboundStream
RemotePort=21

Name=MooSoft Trojan Scanner And Cleaner FTP DATA Activity
Protocol=TCP
Direction=InboundStream
RemotePort=20

[MooSoft Live Update]
App=moolive.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=MooSoft Live Update HTTP Activity
Protocol=TCP
Direction=OutboundStream
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523

;Net Utilites

[NetLab]
App=netlab.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Get Time NetLab Activity
Protocol=TCP
RemotePort=37
Direction=OutboundStream

Name=NetLab WhoIs Activity
Protocol=TCP
RemotePort=43
Direction=OutboundStream

Name=NetLab Quote Activity
Protocol=TCP
RemotePort=17
Direction=OutboundStream

Name=NetLab Finger Activity
Protocol=TCP
RemotePort=79
Direction=OutboundStream

[SmartWhois]
App=sw3.exe, sw.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=SmartWhoIs Activity
Protocol=TCP
RemotePort=43
Direction=OutboundStream

[NeoTrace]
App=neotrace.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Neotrace HTTP
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

Name=Neotrace WhoIs
Protocol=TCP
RemotePort=43
Direction=OutboundStream

[VisualRoute]
App=visualroute.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=VisualRoute HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

Name=VisualRoute WhoIs Activity
Protocol=TCP
RemotePort=43
Direction=OutboundStream

[DiamondCS Port Explorer]
App=PORTEXPLORER.EXE
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=DiamondCS Port Explorer NICNAME/WHOIS Activity
Protocol=TCP
Direction=OutboundStream
RemotePort=43

Name=DiamondCS Port Explorer Update Activity
Protocol=TCP
Direction=OutboundStream
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523

[Ping utility]
App=ping.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

[Tracert utility]
App=tracert.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

[NSLookup utility]
App=nslookup.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

[Finger utility]
App=finger.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Finger TCP Activity
Protocol=TCP
Direction=OutboundStream
RemotePort=79

[Rcp utility]
App=rcp.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Rcp TCP Activity
Protocol=TCP
Direction=OutboundStream
RemotePort=514

[Remote Process Execution utility]
App=rexec.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Remote Process Execution TCP Activity
Protocol=TCP
Direction=OutboundStream
RemotePort=512

[Lpq utility]
App=lpq.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Lpq TCP Activity
Protocol=TCP
Direction=OutboundStream
RemotePort=515

[Rsh utility]
App=rsh.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Rsh TCP Activity
Protocol=TCP
Direction=OutboundStream
RemotePort=514

[Lpr utility]
App=lpr.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Lpr TCP Activity
Protocol=TCP
Direction=OutboundStream
RemotePort=515

[Tftp utility]
App=tftp.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Tftp UDP Activity
Protocol=UDP
Direction=OutboundStream
RemotePort=69

;Time Synchronizers

[Chameleon Clock]
App=chamclock.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Chameleon Clock Time Activity
Protocol=UDP
RemotePort=123

[Advanced System Agent]
App=asa_ext.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Advanced System Agent Time Activity
Protocol=UDP
RemotePort=123

[12Ghosts Synchronize]
App=12sync.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=12Ghosts Synchronize SNTP Activity
Protocol=UDP
RemotePort=123

Name=12Ghosts Synchronize Time Activity
Protocol=UDP
RemotePort=37

Name=12Ghosts Synchronize Time Activity
Protocol=TCP
RemotePort=37
Direction=OutboundStream

[1st Atomic Time]
App=1stat.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=1st Atomic Time SNTP Activity
Protocol=UDP
RemotePort=123

Name=1st Atomic Time Daytime Activity
Protocol=TCP
RemotePort=13
Direction=OutboundStream

[Absolute Time Corrector]
App=atc.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Absolute Time Corrector Activity
Protocol=TCP
RemotePort=37
Direction=OutboundStream

[AceClock Pro]
App=aceclock.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=AceClock Pro SNTP Activity
Protocol=UDP
RemotePort=123

Name=AceClock Pro Time Activity
Protocol=TCP
RemotePort=37
Direction=OutboundStream

[Atom Timer]
App=atomt.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Atom Timer Daytime Activity
Protocol=TCP
RemotePort=13
Direction=OutboundStream

[AtomSync]
App=atomuhr.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=AtomSync SNTP Activity
Protocol=UDP
RemotePort=123

[Attache Transparent Clock]
App=attacheclock.exe, configtool.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Attache Clock SNTP Activity
Protocol=UDP
RemotePort=123

[Desktop Atomic Clock]
App=dac.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Desktop Atomic Clock Daytime Activity
Protocol=TCP
RemotePort=13
Direction=OutboundStream

[DS Clock]
App=dsclock.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=DS Clock SNTP Activity
Protocol=UDP
RemotePort=123

[Easy Time]
App=easytime.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Easy Time SNTP Activity
Protocol=UDP
RemotePort=123

[EZTimeSync]
App=eztimesync.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=EZTimeSync Activity
Protocol=TCP
RemotePort=37
Direction=OutboundStream

[Dimension 4]
App=d4.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Dimension 4 SNTP Activity
Protocol=UDP
RemotePort=123

Name=Dimension 4 Time Activity
Protocol=TCP
RemotePort=37
Direction=OutboundStream

Name=Dimension 4 Time Activity
Protocol=UDP
RemotePort=37

[NMEATime]
App=nmeatime.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=NMEATime Daytime Activity
Protocol=TCP
RemotePort=13
Direction=OutboundStream

Name=NMEATime SNTP Activity
Protocol=UDP
RemotePort=123

[SolidSync]
App=solidsync.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=SolidSync Time Activity
Protocol=TCP
RemotePort=37
Direction=OutboundStream

[Tardis]
App=tardis.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Tardis SNTP Activity
Protocol=UDP
RemotePort=123

Name=Tardis Time Activity
Protocol=UDP
RemotePort=37

Name=Tardis Time Activity
Protocol=TCP
RemotePort=37
Direction=OutboundStream

Name=Tardis Daytime Activity
Protocol=TCP
RemotePort=13
Direction=OutboundStream

Name=Tardis HTTP Activity
Protocol=TCP
RemotePort=80
Direction=OutboundStream

[Tech-Pro World Clock]
App=worldclock.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Tech-Pro World Clock Activity
Protocol=TCP
RemotePort=37
Direction=OutboundStream

[TimeSync]
App=timesync.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=TimeSync Time Activity
Protocol=TCP
RemotePort=37
Direction=OutboundStream

[Time Sync Pro]
App=timesync.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Time Sync Pro SNTP Activity
Protocol=UDP
RemotePort=123

[TSync]
App=tsync.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=TSync Time Activity
Protocol=TCP
RemotePort=37
Direction=OutboundStream

[WebTime]
App=webtime.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=WebTime Time Activity
Protocol=TCP
RemotePort=37
Direction=OutboundStream

[YATS32]
App=yats32.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=YATS32 SNTP Activity
Protocol=UDP
RemotePort=123

;Multimedia

[Ashampoo Media Player+]
App=ampplus.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Ashampoo Media Player+ Info Channel
Protocol=TCP
RemoteAddress=195.125.111.109
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[DivX Player]
App=DivX Player 2.0 Alpha.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=DivX Player HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[MusicMatch Jukebox]
App=mmjb.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=MusicMatch Jukebox HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[MusicMatch Jukebox Update]
App=mmupdatemgr.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=MusicMatch Jukebox Update HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[Sonique]
App=sqstart.exe, Sonique.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Sonique HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[WinAmp]
App=winamp.exe, studio.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=WinAmp Activity
Protocol=TCP
RemotePort=8000-8900
Direction=OutboundStream

Name=WinAmp MiniBrowser Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[Windows Media Player]
App=mplayer2.exe, wmplayer.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Windows Media Player HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

Name=Windows Media Player Activity
Protocol=TCP
RemotePort=1755, 8000, 8001
Direction=OutboundStream

[CDex]
App=cdex.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=CDex HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 888, 1080, 3128, 8080, 8088, 11523
Direction=OutboundStream

[QuickTime]
App=quicktimeplayer.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=QuickTime Player Activity
Protocol=TCP
RemotePort=554
Direction=OutboundStream

Name=QuickTime Player Activity
Protocol=UDP
RemotePort=2001

Name=QuickTime Player HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[RealPlayer]
App=realplay.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=RealPlayer Activity
Protocol=TCP
RemotePort=554, 7070, 7071
Direction=OutboundStream

Name=RealPlayer HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

Name=RealPlayer Inbound UDP Activity
Protocol=UDP
LocalPort=6770-32000

Name=RealPlayer Outbound UDP Activity
Protocol=UDP
RemotePort=6770-32000

[RealNetworks Event Launcher]
App=realevent.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=RealNetworks Event Launcher HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[Nero 6 Updater]
App=NeroStartSmart.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Nero 6 Updater HTTP Activity
Protocol=TCP
Direction=OutboundStream
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523

[jetCast streaming server]
App=JCSERVER.EXE
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=jetCast Server MediaStream Activity
Protocol=TCP
Direction=InboundStream
LocalPort=9000, 9001

[jetAudio]
App=JETAUDIO.EXE
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=JetAudio HTTP Activity
Protocol=TCP
Direction=OutboundStream
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 9000, 9001, 11523

[jetCast]
App=JETCAST.EXE
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=jetCast HTTP Activity
Protocol=TCP
Direction=OutboundStream
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 9000, 9001, 11523

[jetChat]
App=JETCHAT.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=jetChat Outbound Chatting Activity
Protocol=TCP
Direction=OutboundStream
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 9010, 11523

Name=jetChat Inbound Chatting Activity
Protocol=TCP
Direction=InboundStream
LocalPort=9010

[jetAudio TrueUpdate 2.0 Client]
App=JETUPDATE.EXE
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=JetAudio Update HTTP Activity
Protocol=TCP
Direction=OutboundStream
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523

;Internet Search

[Copernic]
App=copernicsvr.exe, copernic.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Copernic Search Activity
Protocol=TCP
RemotePort=80
Direction=OutboundStream

;P2P

[eMule Default]
App=emule.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=eMule Client To Client Source Exchange
Protocol=TCP
LocalPort=4662
Direction=InboundStream

Name=eMule Client To Client Source Exchange
Protocol=TCP
RemotePort=4662
Direction=OutboundStream

Name=eMule Queue Rating, File Reask Ping
Protocol=UDP
LocalPort=4672

Name=eMule Queue Rating, File Reask Ping
Protocol=UDP
RemotePort=4672

Name=eMule Activity To Server
Protocol=TCP
RemotePort=4661
Direction=OutboundStream

Name=eMule Source Asking On Servers
Protocol=UDP
RemotePort=4665

Name=eMule Webserver
Protocol=TCP
LocalPort=4711
Direction=InboundStream

Name=eMule HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[iMesh]
App=imeshclient.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=iMesh Activity
Protocol=TCP
RemotePort=4000-5000
Direction=OutboundStream

Name=iMesh HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[KaZaA Media Desktop]
App=kazaa.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=KaZaA Media Desktop Outbound Activity
Protocol=TCP
RemotePort=1214
Direction=OutboundStream

Name=KaZaA Media Desktop Inbound Activity
Protocol=TCP
LocalPort=1214
Direction=InboundStream

Name=KaZaA Media Desktop HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[Morpheus]
App=morpheus.exe, morpheusp.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Morpheus Outbound Activity
Protocol=TCP
RemotePort=1214
Direction=OutboundStream

Name=Morpheus Inbound Activity
Protocol=TCP
LocalPort=1214
Direction=InboundStream

Name=Morpheus HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[WinMX]
App=winmx.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=WinMX Server Activity
Protocol=TCP
RemotePort=5690, 6257, 6699, 7729-7735, 7940-7952
Direction=OutboundStream

Name=WinMX Inbound UDP Activity
Protocol=UDP
RemotePort=6257

Name=WinMX Inbound TCP Activity
Protocol=TCP
LocalPort=6699
Direction=InboundStream

Name=WinMX HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[Direct Connect]
App=direct connect.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Direct Connect Outbound Activity
Protocol=TCP
RemotePort=411
Direction=OutboundStream

Name=Direct Connect Inbound Activity
Protocol=TCP
LocalPort=412
Direction=InboundStream

Name=Direct Connect HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[AudioGalaxy]
App=agsatellite.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=AudioGalaxy Outbound Activity
Protocol=TCP
RemotePort=21, 1117-5190, 41000 - 50000
Direction=OutboundStream

Name=AudioGalaxy Inbound Activity
Protocol=TCP
LocalPort=21, 1117-5190, 41000 - 50000
Direction=InboundStream

[BearShare]
App=bearshare.exe, bearsharepro.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=BearShare HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

Name=BearShare Outbound Activity
Protocol=TCP
RemotePort=6346-6349
Direction=OutboundStream

Name=BearShare Inbound Activity
Protocol=TCP
LocalPort=6346
Direction=InboundStream

[Gnotella]
App=gnotella.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Gnotella HTTP Activity
Protocol=TCP
RemotePort=80, 3128, 8080, 8088
Direction=OutboundStream

Name=Gnotella Outbound Activity
Protocol=TCP
RemotePort=6346-6352
Direction=OutboundStream

Name=Gnotella Inbound Activity
Protocol=TCP
LocalPort=6346
Direction=InboundStream

[Soulseek]
App=slsk.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Soulseek HTTP Activity
Protocol=TCP
RemotePort=80, 3128, 8080, 8088
Direction=OutboundStream

Name=Soulseek HTTPS Activity
Protocol=TCP
RemotePort=443
Direction=OutboundStream

Name=Soulseek Activity
Protocol=TCP
RemotePort=2234-2240, 5534, 6997
Direction=OutboundStream

Name=Soulseek Inbound Activity
Protocol=TCP
RemotePort=2234
Direction=InboundStream

[Blubster]
App=blubster.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Blubster HTTP Activity
Protocol=TCP
RemotePort=80, 3128, 8080, 8088
Direction=OutboundStream

Name=Blubster Outbound Activity
Protocol=UDP
RemotePort=41170

Name=Blubster Inbound Activity
Protocol=UDP
LocalPort=41170

;Storage

[Storage]
App=idriveproxy.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=I-drive Storage Server
Protocol=TCP
RemotePort=443
Direction=OutboundStream

;Microsoft

[Microsoft Excel]
App=excel.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Microsoft Excel HTTP
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

Name=Microsoft Excel FTP
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=Microsoft Excel FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

Name=Microsoft Excel Mail
Protocol=TCP
RemotePort=25, 110
Direction=OutboundStream

Name=Microsoft Excel LDAP
Protocol=TCP
RemotePort=389, 3268
Direction=OutboundStream

Name=Microsoft Excel MSSQL
Protocol=TCP
RemotePort=1433, 1434
Direction=OutboundStream

[Microsoft Word]
App=winword.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Microsoft Word HTTP
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

Name=Microsoft Word FTP
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=Microsoft Word FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

Name=Microsoft Word Mail
Protocol=TCP
RemotePort=25, 110
Direction=OutboundStream

Name=Microsoft Word LDAP
Protocol=TCP
RemotePort=389, 3268
Direction=OutboundStream

[Microsoft Access]
App=msaccess.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Microsoft Access HTTP
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

Name=Microsoft Access FTP
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=Microsoft Access FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

Name=Microsoft Access Mail
Protocol=TCP
RemotePort=25, 110
Direction=OutboundStream

Name=Microsoft Access LDAP
Protocol=TCP
RemotePort=389, 3268
Direction=OutboundStream

;Word Processing

[Adobe Acrobat]
App=acrobat.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Update Adobe Acrobat
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[Adobe Acrobat Reader]
App=acrord32.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Update Adobe Acrobat Reader
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[EditPad Pro]
App=editpadpro.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Send Mail By EditPad Pro
Protocol=TCP
RemotePort=25
Direction=OutboundStream

Name=Download/Update EPP Syntax Colour Schemes
Protocol=TCP
RemotePort=80
RemoteAddress=216.92.230.239
Direction=OutboundStream

[Babylon]
App=babylon.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Babylon HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

;Encryption

[ECM SignCode]
App=signcode.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=ECM SignCode HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[PGP Keys]
App=pgpkeys.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=PGP Keys HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

Name=PGP Keys Server Activity
Protocol=TCP
RemotePort=11370-11371
Direction=OutboundStream

Name=PGP Keys LDAP Activity
Protocol=TCP
RemotePort=389, 3268
Direction=OutboundStream

;E-Commerce

[Cyphermint PayCash]
App=wallet.exe, cyphermintwallet.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Cyphermint PayCash Activity
Protocol=TCP
RemotePort=8128
Direction=OutboundStream

Name=Cyphermint PayCash PROXY Activity
Protocol=TCP
RemotePort=3128, 8080
Direction=OutboundStream

Name=Cyphermint PayCash Inbound Activity
Protocol=TCP
LocalPort=8128
Direction=InboundStream

[WebMoney]
App=webmoney.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=WebMoney Activity
Protocol=TCP
RemotePort=2802
Direction=OutboundStream

Name=WebMoney HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

;ARC

[PowerArchiver]
App=powerarc.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Update PowerArchiver
Protocol=TCP
RemoteAddress=140.99.102.66
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

;Server

[Pointcast SMTP Server]
App=pointcastserver.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Send Mail By PointCast Server
Protocol=TCP
RemotePort=25
Direction=OutboundStream

Name=PointCast Server HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[FTP Server]
App=ftpserve.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=FTP Server Inbound FTP Activity
Protocol=TCP
LocalPort=21
Direction=InboundStream

[Serv-U FTP Server]
App=servudaemon.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Serv-U FTP Server Activity
Protocol=TCP
LocalPort=21
Direction=InboundStream

[Cerberus FTP Server]
App=cerberus.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Cerberus FTP Server Activity
Protocol=TCP
LocalPort=21
Direction=InboundStream

;Games

[Catch the Sperm!]
App=catchthesperm.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Catch The Sperm! HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[Catch the Sperm II]
App=catchthesperm2.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Catch the Sperm! HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[Medal of Honour: Allied Assault]
App=mohaa.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Medal Of Honour Outbound UDP Activity
Protocol=UDP
RemotePort=12203, 12206

Name=Medal Of Honour Inbound UDP Activity
Protocol=UDP
RemotePort=12203, 12206

Name=Medal Of Honour Send 'heartbeat' To Master Server
Protocol=UDP
RemotePort=27900
RemoteAddress=216.177.89.34

[Championship Manager]
App=cm0001.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Championship Manager TCP Activity
Protocol=TCP
RemotePort=6667
Direction=OutboundStream

Name=Championship Manager UDP Activity
Protocol=UDP
RemotePort=6667

[Ultima Online]
App=uo.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Ultima Online
Protocol=TCP
RemotePort=7785, 9999, 5001-5010, 7775-7777, 8800-8900
Direction=OutboundStream

[Quake II]
App=quake2.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Quake II TCP Activity
Protocol=TCP
RemotePort=27901
Direction=OutboundStream

Name=Quake II UDP Activity
Protocol=UDP
RemotePort=27910-27961

[Quake III]
App=quake3.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Quake III TCP Activity
Protocol=TCP
RemotePort=27950-30000
Direction=OutboundStream

Name=Quake III UDP Activity
Protocol=UDP
RemotePort=1025, 27910-30000

[Unreal]
App=unreal.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Unreal TCP Activity
Protocol=TCP
RemotePort=7777, 8888, 27900
Direction=OutboundStream

Name=Unreal UDP Activity
Protocol=UDP
RemotePort=7777-7781

[Delta Force]
App=df.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Delta Force TCP Activity
Protocol=TCP
RemotePort=3100-3999
Direction=OutboundStream

Name=Delta Force UDP Activity
Protocol=UDP
RemotePort=3100-3999, 3568-3569

[Half-Life]
App=hl.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Half-Life TCP Activity
Protocol=TCP
RemotePort=6000-6003, 7001
Direction=OutboundStream

Name=Half-Life UDP Activity
Protocol=UDP
RemotePort=27000-28000
Direction=OutboundStream

Name=Half-Life Server UDP Activity
Protocol=UDP
LocalPort=27015
Direction=InboundStream

[Game Zone]
App=zclientm.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=MSN(tm) Zone TCP Activity
Enable=0
Protocol=TCP
RemotePort=6667, 8000-9000, 9110, 9113, 8995-11000, 28800-29000
Direction=OutboundStream

Name=MSN(tm) Zone UDP Activity
Protocol=UDP
RemotePort=0, 8000-9000, 9000-9100, 28800-29000

Name=DirectX And Direct Play Games TCP Activity
Protocol=TCP
RemotePort=2300-2400, 47264
Direction=OutboundStream

Name=DirectX And Direct Play Games UDP Activity
Protocol=UDP
RemotePort=2300-2400

Name=MSN(tm) Zone HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[Ricochet]
App=ricochet.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Ricochet HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[Counter Strike Source]
App=hl2.exe, steam.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=CSS Client Find Friends Activity
Protocol=UDP
RemotePort=1200
Direction=OutboundStream

Name=CSS Client Get Servers List Activity
Protocol=UDP
RemotePort=27011
Direction=OutboundStream

Name=CSS Client Get Servers Info Activity
Protocol=UDP
RemotePort=27000-28000
Direction=InboundOutbound

Name=CSS Client In-Game Activity
Protocol=UDP
LocalPort=27005-27020
RemotePort=27015-27020
Direction=OutboundStream

Name=CSS Client Steam Activity
Protocol=TCP
RemotePort=27020-27039
Direction=OutboundStream

[CSS Dedicated Server]
App=srcds.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=CSS Dedicated Server Registration Activity
Protocol=UDP
LocalPort=27015-27020
RemotePort=27011
Direction=OutboundStream

Name=CSS Dedicated Server In-Game Activity
Protocol=UDP
LocalPort=27015-27020
Direction=InboundStream

Name=CSS Dedicated Server Remote Console Activity
Protocol=TCP
LocalPort=27015-27020
Direction=InboundStream

Name=CSS Dedicated Server Steam Activity
Protocol=TCP
RemotePort=27020-27039
Direction=OutboundStream

;Administration

[Citrix ICA]
App=pn.exe, wfica32.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=ICA Server Search
Protocol=UDP
RemotePort=1604

Name=ICA Data Activity
Protocol=TCP
RemotePort=1494
Direction=OutboundStream

[NetAdmin (MySQL)]
App=netadmin.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=NetAdmin MySQL Data Activity
Protocol=TCP
Direction=OutboundStream
RemotePort=3306

[PCAnywhere Remote Control]
App=awrem32.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=PCAnywhere UDP Activity (OUT)
Protocol=UDP
RemotePort=5632
Direction=OutboundStream

Name=PCAnywhere TCP Activity (OUT)
Protocol=TCP
RemotePort=5631
Direction=OutboundStream

[PCAnywhere Host]
App=awhost32.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=PCAnywhere UDP Activity (IN)
Protocol=UDP
LocalPort=5632

Name=PCAnywhere TCP Activity (IN)
Protocol=TCP
Direction=InboundStream
LocalPort=5631

[Remote Administrator Client]
App=radmin.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Remote Administrator Client Activity
Protocol=TCP
Direction=OutboundStream
RemotePort=4899

[Remote Administrator Host]
App=r_service.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Remote Administrator Host Activity
Protocol=TCP
LocalPort=4899
Direction=InboundStream

[Kaspersky Network Agent]
App=KLNAGENT.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Kaspersky Network Agent UDP Main Activity
Protocol=UDP
LocalPort=15000
Direction=Inbound

Name=Kaspersky Network Agent TCP Main Activity
Protocol=TCP
RemotePort=13000, 14000
Direction=OutboundStream

;Development tools

[Namo WebEditor 2006]
App=WEBEDITOR.EXE
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Namo WebEditor 2006 HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

Name=Namo WebEditor 2006 FTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream

Name=Namo WebEditor 2006 FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream

;Other

[United Devices]
App=ud.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=United Devices HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[MTS Balance]
App=mtsbalance.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=MTS Balance HTTPS Activity
Protocol=TCP
Direction=OutboundStream
RemotePort=443

[Semagic LiveJournal Client]
App=livejournalu.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Semagic LiveJournal Client Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[Google Earth]
App=GoogleEarth.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Google Earth HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[SiSoftware Sandra Thin Client]
App=sandra.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=SiSoftware Sandra WebUpdate HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

Name=SiSoftware Sandra 'Named Pipes' Activity
Protocol=TCP
Direction=OutboundStream
RemotePort=135, 445

Name=SiSoftware Sandra HTTP Through IIS Activity
Protocol=TCP
Direction=OutboundStream
RemotePort=80

[SiSoftware Sandra Server]
App=RpcSandraSrv.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=SiSoftware Sandra Server Internet Peerage Benchmark HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[Ulead PhotoImpact]
App=iedit.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Ulead PhotoImpact HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[Ulead PhotoImpact Updater]
App=BatchDL.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Ulead PhotoImpact Update HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[Weather Bug - Maxthon Web Browser Plugin]
App=weatherbug.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Weather Bug HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

[Punto Switcher Updater]
App=Update.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Punto Switcher Updater HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

;Anti-Spam

[Bounce Spam Mail]
App=bsm18.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Send Mail By Bounce Spam Mail
Protocol=TCP
RemotePort=25
Direction=OutboundStream

[SpamPal]
App=spampal.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=SpamPal HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream

Name=Receive Mail By SpamPal
Protocol=TCP
RemotePort=110, 995
Direction=OutboundStream

;NTDomain

[LSASS.EXE]
App=lsass.exe
Name=Local Security Authority Service Kerberos TCP Activity
Protocol=TCP
RemotePort=88
Direction=OutboundStream

Name=Local Security Authority Service Kerberos UDP Activity
Protocol=UDP
RemotePort=88
Direction=OutboundStream

Name=Local Security Authority Service LDAP Activity
Protocol=UDP
RemotePort=389, 3268
Direction=OutboundStream

Name=Local Security Authority Service DNS Activity
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Local Security Authority Service DCOM dynamic port allocation
Protocol=TCP
RemotePort=1025-1040
Direction=OutboundStream

Name=Local Security Authority Service DCOM Activity
Protocol=TCP
RemotePort=135
Direction=OutboundStream

[SERVICES.EXE]
App=services.exe
Name=Localhost UDP Activity
Protocol=UDP
RemoteAddress=127.0.0.1
RemotePort=1024-65535
Direction=OutboundStream

Name=Services DNS Service Over UDP
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Services DNS Service Over TCP
Protocol=TCP
RemotePort=53
Direction=OutboundStream

Name=Services DCOM Activity
Protocol=TCP
RemotePort=135
Direction=OutboundStream

Name=Services DCOM Dynamic Port Allocation
Protocol=TCP
RemotePort=1090-1110
Direction=OutboundStream

Name=Services LDAP Activity
Protocol=UDP
RemotePort=389, 3268
Direction=OutboundStream

[WINLOGON.EXE]
App=winlogon.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Microsoft Winlogon LDAP Activity
Protocol=TCP
RemotePort=389, 3268
Direction=OutboundStream

[USERINIT.EXE]
App=userinit.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Microsoft Userinit LDAP Activity
Protocol=TCP
RemotePort=389, 3268
Direction=OutboundStream

Name=Microsoft Userinit DCOM Activity
Protocol=TCP
RemotePort=135
Direction=OutboundStream

[System]
App=system
Name=Allow Any UDP Activity
Protocol=UDP

[Cisco VPN Client]
App=vpngui.exe, cvpnd.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Cisco VPN Client Activity
Protocol=TCP
RemotePort=62514, 62516
Direction=OutboundStream

Name=Cisco VPN Client Activity
Protocol=UDP
LocalPort=500
RemotePort=500

[Kerio VPN Client]
App=kvpnclient.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream

Name=Kerio VPN Client UDP Activity
Protocol=UDP
LocalPort=4090
RemotePort=4090
Direction=OutboundStream

Name=Kerio VPN Client TCP Activity
Protocol=TCP
LocalPort=4090
RemotePort=4090
Direction=OutboundStream

;Win98

[Windows Routing Process]
App=MPREXE.EXE
Name=Windows Routing Process NetBIOS Name Service Activity
Protocol=UDP
RemotePort=137
Direction=OutboundStream

Name=Windows Routing Process NetBIOS Datagram Service Activity
Protocol=UDP
RemotePort=138
Direction=OutboundStream

Name=Windows Routing Process NetBIOS Session Service Activity
Protocol=TCP
RemotePort=139
Direction=OutboundStream

;Packet Rules

[PacketRule]
Name=ICMP Type 0 (Echo Reply)
Protocol=1
Direction=Inbound
IcmpCode=0

[PacketRule]
Name=ICMP Type 8 (Echo)
Protocol=1
Direction=Outbound
IcmpCode=8

[PacketRule]
Name=ICMP Type 11 (Time Exceeded)
Protocol=1
Direction=Inbound
IcmpCode=11

[PacketRule]
Name=Other ICMP Types
Allow=0
Protocol=1
Direction=InboundOutbound

[PacketRule]
Name=DHCP Client Activity
Protocol=UDP
LocalPort=68, 546
RemotePort=67, 547
Direction=InboundOutbound

[PacketRule]
Name=Windows "DCOM RPC" Activity
Allow=0
Protocol=UDP
LocalPort=135
Direction=Inbound

[PacketRule]
Name=Windows "DCOM RPC" Activity
Allow=0
Protocol=TCP
LocalPort=135
Direction=InboundStream

[PacketRule]
Name=Windows "NetBIOS Name Service" Activity
Allow=0
Protocol=UDP
LocalPort=137
Direction=InboundOutbound

[PacketRule]
Name=Windows "NetBIOS Datagram Service" Activity
Allow=0
Protocol=UDP
LocalPort=138
Direction=InboundOutbound

[PacketRule]
Name=Windows "NetBIOS Session Service" Activity
Allow=0
Protocol=TCP
LocalPort=139
Direction=InboundStream

[PacketRule]
Name=Windows "Server Message Block" Activity
Allow=0
Protocol=UDP
LocalPort=445
Direction=InboundOutbound

[PacketRule]
Name=Windows "Server Message Block" Activity
Allow=0
Protocol=TCP
LocalPort=445
Direction=InboundStream

[PacketRule]
Name=Localhost Loopback UDP Activity
Enable=0
Protocol=UDP
RemoteAddress=127.0.0.1

[PacketRule]
Name=Localhost Loopback TCP Activity
Enable=0
Protocol=TCP
RemoteAddress=127.0.0.1

[PacketRule]
Name=PPTP Control Activity
Enable=0
Protocol=TCP
LocalPort=1024-65535
RemotePort=1723
Direction=OutboundStream

[PacketRule]
Name=Malicious Software "NetSky" Ports
Enable=0
Allow=0
Protocol=TCP
LocalPort=82, 665
Direction=InboundStream

[PacketRule]
Name=Malicious Software "Padobot" Ports
Enable=0
Allow=0
Protocol=TCP
LocalPort=113, 3067, 2041
Direction=InboundStream

[PacketRule]
Name=Malicious Software "Farnaz" Ports
Enable=0
Allow=0
Protocol=TCP
LocalPort=133
Direction=InboundStream

[PacketRule]
Name=Malicious Software "Krass" Ports
Enable=0
Allow=0
Protocol=TCP
LocalPort=456
Direction=InboundStream

[PacketRule]
Name=Malicious Software "Backdoor.jr" Ports
Enable=0
Allow=0
Protocol=TCP
LocalPort=777
Direction=InboundStream

[PacketRule]
Name=Malicious Software "Sobig" Ports
Enable=0
Allow=0
Protocol=TCP
LocalPort=995, 996, 997, 998, 999
Direction=InboundStream

[PacketRule]
Name=Malicious Software "Dumaru" Ports
Enable=0
Allow=0
Protocol=TCP
LocalPort=1001, 2283, 10000
Direction=InboundStream

[PacketRule]
Name=Malicious Software "Kipis" Ports
Enable=0
Allow=0
Protocol=TCP
LocalPort=1029
Direction=InboundStream

[PacketRule]
Name=Malicious Software "MyDoom" Ports
Enable=0
Allow=0
Protocol=TCP
LocalPort=1034, 1042, 1080, 3127-3198, 5422, 5424, 10080
Direction=InboundStream

[PacketRule]
Name=Malicious Software "Warhome.a" Ports
Enable=0
Allow=0
Protocol=TCP
LocalPort=1035
Direction=InboundStream

[PacketRule]
Name=Malicious Software "Bugbear" Ports
Enable=0
Allow=0
Protocol=TCP
LocalPort=1080
Direction=InboundStream

[PacketRule]
Name=Malicious Software "Bagle" Ports
Enable=0
Allow=0
Protocol=TCP
LocalPort=1080, 1234, 2535, 2556, 2745, 4751, 6777, 8866, 9035
Direction=InboundStream

[PacketRule]
Name=Malicious Software "Orion" Ports
Enable=0
Allow=0
Protocol=TCP
LocalPort=1150
Direction=InboundStream

[PacketRule]
Name=Malicious Software "Plexus" Ports
Enable=0
Allow=0
Protocol=TCP
LocalPort=1250
Direction=InboundStream

[PacketRule]
Name=Malicious Software "Bofra" Ports
Enable=0
Allow=0
Protocol=TCP
LocalPort=1639
Direction=InboundStream

[PacketRule]
Name=Malicious Software "Bifrose" Ports
Enable=0
Allow=0
Protocol=TCP
LocalPort=1971
Direction=InboundStream

[PacketRule]
Name=Malicious Software "Skybag" Ports
Enable=0
Allow=0
Protocol=TCP
LocalPort=2345
Direction=InboundStream

[PacketRule]
Name=Malicious Software "Vesser" Ports
Enable=0
Allow=0
Protocol=TCP
LocalPort=2766
Direction=InboundStream

[PacketRule]
Name=Malicious Software "Brador" Ports
Enable=0
Allow=0
Protocol=TCP
LocalPort=2989
Direction=InboundStream

[PacketRule]
Name=Malicious Software "Mimail" Ports
Enable=0
Allow=0
Protocol=TCP
LocalPort=3000
Direction=InboundStream

[PacketRule]
Name=Malicious Software "Delf" Ports
Enable=0
Allow=0
Protocol=TCP
LocalPort=3195
Direction=InboundStream

[PacketRule]
Name=Malicious Software "OptixPro" Ports
Enable=0
Allow=0
Protocol=TCP
LocalPort=3410
Direction=InboundStream

[PacketRule]
Name=Malicious Software "Busters" Ports
Enable=0
Allow=0
Protocol=TCP
LocalPort=3950
Direction=InboundStream

[PacketRule]
Name=Malicious Software "Lovesan" Ports
Enable=0
Allow=0
Protocol=TCP
LocalPort=4444
Direction=InboundStream

[PacketRule]
Name=Malicious Software "Backdoor.iw/Nail" Ports
Enable=0
Allow=0
Protocol=TCP
LocalPort=4567
Direction=InboundStream

[PacketRule]
Name=Malicious Software "Tettona" Ports
Enable=0
Allow=0
Protocol=TCP
LocalPort=5001
Direction=InboundStream

[PacketRule]
Name=Malicious Software "Jix" Ports
Enable=0
Allow=0
Protocol=TCP
LocalPort=5533
Direction=InboundStream

[PacketRule]
Name=Malicious Software "Sasser" Ports
Enable=0
Allow=0
Protocol=TCP
LocalPort=5554, 9996
Direction=InboundStream

[PacketRule]
Name=Malicious Software "Sysbug/Mimail" Ports
Enable=0
Allow=0
Protocol=TCP
LocalPort=5555
Direction=InboundStream

[PacketRule]
Name=Malicious Software "LovGate" Ports
Enable=0
Allow=0
Protocol=TCP
LocalPort=6000
Direction=InboundStream

[PacketRule]
Name=Malicious Software "Glace.a" Ports
Enable=0
Allow=0
Protocol=TCP
LocalPort=7386
Direction=InboundStream

[PacketRule]
Name=Malicious Software "G_Door" Ports
Enable=0
Allow=0
Protocol=TCP
LocalPort=7626
Direction=InboundStream

[PacketRule]
Name=Malicious Software "Zebroxy" Ports
Enable=0
Allow=0
Protocol=TCP
LocalPort=8137, 23116, 54112
Direction=InboundStream

[PacketRule]
Name=Malicious Software "Zafi" Ports
Enable=0
Allow=0
Protocol=TCP
LocalPort=8181
Direction=InboundStream

[PacketRule]
Name=Malicious Software "Bozori" Ports
Enable=0
Allow=0
Protocol=TCP
LocalPort=8594
Direction=InboundStream

[PacketRule]
Name=Malicious Software "Mytob" Ports
Enable=0
Allow=0
Protocol=TCP
LocalPort=8888, 33333
Direction=InboundStream

[PacketRule]
Name=Malicious Software "Dabber" Ports
Enable=0
Allow=0
Protocol=TCP
LocalPort=8967, 9898
Direction=InboundStream

[PacketRule]
Name=Malicious Software "Mitglieder" Ports
Enable=0
Allow=0
Protocol=TCP
LocalPort=11117
Direction=InboundStream

[PacketRule]
Name=Malicious Software "DipNet" Ports
Enable=0
Allow=0
Protocol=TCP
LocalPort=11768
Direction=InboundStream

[PacketRule]
Name=Malicious Software "Latinus.svr" Ports
Enable=0
Allow=0
Protocol=TCP
LocalPort=11831, 29559
Direction=InboundStream

[PacketRule]
Name=Malicious Software "NetBus" Ports
Enable=0
Allow=0
Protocol=TCP
LocalPort=12345
Direction=InboundStream

[PacketRule]
Name=Malicious Software "Backdoor.qr" Ports
Enable=0
Allow=0
Protocol=TCP
LocalPort=12973, 12975
Direction=InboundStream

[PacketRule]
Name=Malicious Software "Haxdoor" Ports
Enable=0
Allow=0
Protocol=TCP
LocalPort=16661
Direction=InboundStream

[PacketRule]
Name=Malicious Software "Kuang" Ports
Enable=0
Allow=0
Protocol=TCP
LocalPort=17300
Direction=InboundStream

[PacketRule]
Name=Malicious Software "XControl" Ports
Enable=0
Allow=0
Protocol=TCP
LocalPort=18081
Direction=InboundStream

[PacketRule]
Name=Malicious Software "Rux.30" Ports
Enable=0
Allow=0
Protocol=TCP
LocalPort=22222
Direction=InboundStream

[PacketRule]
Name=Malicious Software "SubSeven" Ports
Enable=0
Allow=0
Protocol=TCP
LocalPort=27374
Direction=InboundStream

[PacketRule]
Name=Malicious Software "Small.a/Small.ad" Ports
Enable=0
Allow=0
Protocol=TCP
LocalPort=28185, 44888
Direction=InboundStream

[PacketRule]
Name=Malicious Software "BackOrifice" Ports
Enable=0
Allow=0
Protocol=TCP
LocalPort=31337
Direction=InboundStream

[PacketRule]
Name=Malicious Software "Tanatos" Ports
Enable=0
Allow=0
Protocol=TCP
LocalPort=36794
Direction=InboundStream

[PacketRule]
Name=Malicious Software "Mitglieder" Ports
Enable=0
Allow=0
Protocol=TCP
LocalPort=39999
Direction=InboundStream

[PacketRule]
Name=Malicious Software "Autooter" Ports
Enable=0
Allow=0
Protocol=TCP
LocalPort=57005
Direction=InboundStream

[PacketRule]
Name=Malicious Software "Agobot" Ports
Enable=0
Allow=0
Protocol=TCP
LocalPort=65506
Direction=InboundStream

[PacketRule]
Name=Malicious Software "Gst" Ports
Enable=0
Allow=0
Protocol=UDP
LocalPort=1047, 2048
Direction=Inbound

[PacketRule]
Name=Malicious Software "Scalper" Ports
Enable=0
Allow=0
Protocol=UDP
LocalPort=2001
Direction=Inbound

[PacketRule]
Name=Malicious Software "Osf" Ports
Enable=0
Allow=0
Protocol=UDP
LocalPort=3049
Direction=Inbound

[PacketRule]
Name=Malicious Software "Hupigon" Ports
Enable=0
Allow=0
Protocol=UDP
LocalPort=8310
Direction=Inbound

[PacketRule]
Name=Malicious Software "Sobig" Ports
Enable=0
Allow=0
Protocol=UDP
LocalPort=8998
Direction=Inbound

[PacketRule]
Name=Malicious Software "Small.a/Small.b" Ports
Enable=0
Allow=0
Protocol=UDP
LocalPort=12345, 48992
Direction=Inbound

[PacketRule]
Name=Malicious Software "Netso" Ports
Enable=0
Allow=0
Protocol=UDP
LocalPort=34031, 34033
Direction=Inbound

; 0XLSznpdI71fB300e7Uwj1UZXwhnXURMAKsw9BtU7wR7AvPfkXIU0v5+xo¡¡