home *** CD-ROM | disk | FTP | other *** search
/ PC World 2006 December / PCWorld_2006-12_cd.bin / zabezpeceni / outpost / OutpostProInstall.exe / {app} / presets.ini < prev    next >
INI File  |  2006-05-05  |  12KB  |  399 lines
  1. ;Last modify build:    #544
  2. ;Last modify date:    29.09.2005
  3.  
  4. ;10000xx - reserved by Ads presets
  5. ;10001xx - reserved by Content presets 
  6. ;10002xx - reserved by DNS presets 
  7. ;10003xx - reserved by Attachment presets 
  8. ;10004xx - reserved by Attack Detection
  9. ;10005xx - reserved by Active Content
  10. ;10006xx - reserved by Connection Log
  11. ;10007xx - reserved by Antispyware
  12.  
  13. [PresetsVer]
  14. IniSectionVer=355, 00000000
  15.  
  16. [Fields]
  17. ;Ads
  18. 100000="%ps_ads_key_count%", VISIBLE|FORMAT_RIGHT, 80, TEXT_INTEGER, 
  19.  
  20. ;content
  21. 100100="%ps_content_key_count%", VISIBLE|FORMAT_RIGHT, 80, TEXT_INTEGER, 
  22. 100101="%ps_content_url_count%", VISIBLE|FORMAT_RIGHT, 80, TEXT_INTEGER, 
  23.  
  24. ;DNS
  25. 100200="%ps_dns_count%", VISIBLE|FORMAT_RIGHT, 80, TEXT_INTEGER, 
  26.  
  27. :Attachment
  28. 100300="%ps_attach_file_count%", VISIBLE|FORMAT_RIGHT, 80, TEXT_INTEGER, 
  29.  
  30. ;Attack
  31.  
  32. ;Active Content
  33. 100500="%ps_act_cont_event_count%", VISIBLE|FORMAT_RIGHT, 80, TEXT_INTEGER,
  34.  
  35. ;Antispyware
  36. 100700="%ps_asw_date_time%", VISIBLE|FORMAT_RIGHT, 80, TEXT_DATETIME,
  37. 100701="%ps_asw_defs_count%", VISIBLE|FORMAT_RIGHT, 80, TEXT_INTEGER,
  38.  
  39.  
  40. [AliaseToIDMapping]
  41.  
  42. ;Ads
  43. ps_ads_key_count=100000
  44.  
  45. ;content
  46. ps_content_key_count=100100
  47. ps_content_url_count=100101
  48.  
  49. ;DNS
  50. ps_dns_count=100200
  51.  
  52. ;Attachment
  53. ps_attach_file_count=100300
  54.  
  55. ;Attack
  56.  
  57. ;Active Content
  58. ps_act_cont_event_count=100500
  59.  
  60. ;ASW
  61. ps_asw_date_time=100700
  62. ps_asw_defs_count=100701
  63.  
  64. ;////////////////////////////////////////////////////////
  65. ;//
  66. ;//    presets
  67. ;//
  68. ;////////////////////////////////////////////////////////
  69.  
  70.  
  71. ;////////////////////////////////////////////////////////
  72. ;Ads
  73. [ps_ads_block]
  74. _PARENT=Ads
  75. DisplayName=%Last 10 Ads blocked%
  76. Icon=op_log.dll, 16
  77. OpenIcon=op_log.dll, 16
  78. DataTable=SELECT TOP 10 * from ads_log order by fld_20005_11 desc 
  79. DefaultOrder=20005, 20002, 20003, 20004
  80. MaxRecordCount=10
  81.  
  82. [ps_ads_keywords]
  83. _PARENT=Ads
  84. DisplayName=%Most popular keywords%
  85. Icon=op_log.dll, 16
  86. OpenIcon=op_log.dll, 16
  87. DataTable=SELECT fld_20004_9/*Keyword*/, count(fld_20004_9) as ps_ads_key_count from ads_log group by fld_20004_9 order by 2 desc 
  88. DefaultOrder=20004, 100000
  89.  
  90. ;////////////////////////////////////////////////////////
  91. ;Content
  92. [ps_content_keywords]
  93. _PARENT=Content
  94. DisplayName=%Most often keywords used for blocking%
  95. Icon=op_log.dll, 16
  96. OpenIcon=op_log.dll, 16
  97. DataTable=SELECT fld_21004_9/*Keyword*/, count(fld_21004_9) as ps_content_key_count from cnt_log group by fld_21004_9 order by 2 desc
  98. DefaultOrder=21004, 100100
  99.  
  100. [ps_content_often]
  101. _PARENT=Content
  102. DisplayName=%Most often sites blocked%
  103. Icon=op_log.dll, 16
  104. OpenIcon=op_log.dll, 16
  105. DataTable=SELECT fld_21003_9/*URL*/, count(fld_21003_9) as ps_content_url_count from cnt_log group by fld_21003_9 order by 2 desc
  106. DefaultOrder=21003, 100101
  107.  
  108. [ps_content_10]
  109. _PARENT=Content
  110. DisplayName=%Last 10 sites blocked%
  111. Icon=op_log.dll, 16
  112. OpenIcon=op_log.dll, 16
  113. DataTable=SELECT TOP 10 * FROM cnt_log order by fld_21005_11/*Date Time*/ desc
  114. DefaultOrder=21005, 21002, 21003, 21004
  115. MaxRecordCount=10
  116.  
  117. ;////////////////////////////////////////////////////////
  118. ;DNS Cache
  119. [ps_dNS_cache_used]
  120. _PARENT=Dns
  121. DisplayName=%Most used records%
  122. Icon=op_log.dll, 16
  123. OpenIcon=op_log.dll, 16
  124. DataTable=SELECT fld_22004_9/*Host*/, count(fld_22004_9) as ps_dns_count from dns_log WHERE fld_22002_7=2/*Event Type*/ group by fld_22004_9 order by 2 desc
  125. DefaultOrder=22004, 100200
  126.  
  127. [ps_dNS_cache_10_used]
  128. _PARENT=Dns
  129. DisplayName=%Last 10 used records%
  130. Icon=op_log.dll, 16
  131. OpenIcon=op_log.dll, 16
  132. DataTable=SELECT TOP 10 fld_22003_9/*IP*/, fld_22004_9/*Host*/, fld_22005_11/*Date Time*/ FROM dns_log WHERE fld_22002_7=2/*Event Type*/ order by fld_22005_11/*Date Time*/ desc
  133. DefaultOrder=22005, 22004, 22003
  134. MaxRecordCount=10
  135.  
  136. [ps_dNS_cache_10_new]
  137. _PARENT=Dns
  138. DisplayName=%Last 10 new records%
  139. Icon=op_log.dll, 16
  140. OpenIcon=op_log.dll, 16
  141. DataTable=SELECT TOP 10 fld_22003_9/*IP*/, fld_22004_9/*Host*/, fld_22005_11/*Date Time*/ FROM dns_log WHERE fld_22002_7=0/*Event Type*/ order by fld_22005_11/*Date Time*/ desc
  142. DefaultOrder=22005, 22004, 22003
  143. MaxRecordCount=10
  144.  
  145. ;////////////////////////////////////////////////////////
  146. ;Attachment filter
  147. [ps_attachment_quar]
  148. _PARENT=EmailAttachments
  149. DisplayName=%Most often renamed file types%
  150. Icon=op_log.dll, 16
  151. OpenIcon=op_log.dll, 16
  152. DataTable=SELECT fld_23006_9/*File type*/, count(fld_23006_9) as ps_attach_file_count FROM email_log where fld_23007_2=1 or fld_23007_2=3 group by fld_23006_9 order by 2 desc
  153. DefaultOrder=23006, 100300
  154.  
  155. [ps_attachment_10]
  156. _PARENT=EmailAttachments
  157. DisplayName=%Last 10 e-mails with attachments%
  158. Icon=op_log.dll, 16
  159. OpenIcon=op_log.dll, 16
  160. DataTable=SELECT TOP 10 * FROM email_log order by fld_23002_11/*Date Time*/ desc
  161. DefaultOrder=23002, 23003, 23004, 23005, 23006, 23007
  162. MaxRecordCount=10
  163.  
  164. ;////////////////////////////////////////////////////////
  165. ;Attack Detection
  166. [ps_suspicious_packets]
  167. _PARENT=Protect
  168. DisplayName=%Suspicious packets%
  169. Icon=op_log.dll, 16
  170. OpenIcon=op_log.dll, 16
  171. DataTable=select fld_24007_11/*Date Time*/, fld_24002_8/*IP*/, fld_24006_10/*Scan data*/, fld_24005_7/*Scan count*/, fld_24003_8/*IP1*/, fld_24004_6 from prot_log where fld_24004_6=3 order by 1 desc
  172. DefaultOrder=24007, 24002, 24006
  173.  
  174. [ps_suspicious_packets\FieldsState]
  175. _NoCopyIfExist=true
  176. 24004=HIDE, 1, 100
  177.  
  178. [ps_atack_10]
  179. _PARENT=Protect
  180. DisplayName=%Last 10 Attacks detected%
  181. Icon=op_log.dll, 16
  182. OpenIcon=op_log.dll, 16
  183. DataTable=SELECT TOP 10 * FROM prot_log where fld_24004_6 <> 3 ORDER BY fld_24007_11/*Date Time*/ desc
  184. DefaultOrder=24007, 24004, 24002, 24006
  185. MaxRecordCount=10
  186.  
  187. ;////////////////////////////////////////////////////////
  188. ;Active Content
  189. [ps_active_content_blocked]
  190. _PARENT=Web
  191. DisplayName=%Most often active elements blocked%
  192. Icon=op_log.dll, 16
  193. OpenIcon=op_log.dll, 16
  194. DataTable=SELECT fld_25002_7/*Event Type*/, count(fld_25002_7) as ps_act_cont_event_count from web_log group by fld_25002_7/*Event Type*/ order by 2 desc
  195. DefaultOrder=25002, 100500
  196.  
  197. [ps_active_content_active]
  198. _PARENT=Web
  199. DisplayName=%Sites with a lot of active elements%
  200. Icon=op_log.dll, 16
  201. OpenIcon=op_log.dll, 16
  202. DataTable=SELECT fld_25003_9/*URL*/, count(fld_25003_9) as ps_act_cont_event_count from web_log group by fld_25003_9  order by 2 desc
  203. DefaultOrder=25003, 100500
  204.  
  205. [ps_active_content_10]
  206. _PARENT=Web
  207. DisplayName=%Last 10 active elements blocked%
  208. Icon=op_log.dll, 16
  209. OpenIcon=op_log.dll, 16
  210. DataTable=SELECT TOP 10 fld_25003_9/*URL*/, fld_25002_7/*Elements*/, fld_25005_11/*Date Time*/ FROM web_log order by fld_25005_11/*Date Time*/ desc
  211. DefaultOrder=25005, 25002, 25003
  212. MaxRecordCount=10
  213.  
  214. ;////////////////////////////////////////////////////////
  215. ;Allowed history
  216. [ps_conn_log_allow_today]
  217. _PARENT=conn_log_allow
  218. DisplayName=%Allowed Today%
  219. IsFilter=true
  220. EnableDBNotify=false
  221. DefaultOrder=30023, 30027, 30038, 30024, 30033, 30031, 30032, 30029, 30030, 30025, 30037, 30028, 30036, 30034, 30035
  222. SortField=fld_30027_11
  223. AscSort=no
  224. [ps_conn_log_allow_today\Filter]
  225. _NoCopyIfExist=true
  226. 30027={Enable:=1}{UseLastTime:=true}{LastTimeType:=5}{LastTimeValue:=1}{FromTime:=2003.2.16.17.39.1}{ToTime:=2003.2.16.17.39.1}
  227.  
  228. [ps_conn_log_allow_10_min]
  229. _PARENT=conn_log_allow
  230. DisplayName=%Allowed during last 10 min%
  231. IsFilter=true
  232. EnableDBNotify=false
  233. DefaultOrder=30023, 30027, 30038, 30024, 30033, 30031, 30032, 30029, 30030, 30025, 30037, 30028, 30036, 30034, 30035
  234. SortField=fld_30027_11
  235. AscSort=no
  236. [ps_conn_log_allow_10_min\Filter]
  237. _NoCopyIfExist=true
  238. 30027={Enable:=1}{UseLastTime:=true}{LastTimeType:=1}{LastTimeValue:=10}{FromTime:=2003.2.16.17.39.1}{ToTime:=2003.2.16.17.39.1}
  239.  
  240.  
  241. ;////////////////////////////////////////////////////////
  242. ;Blocked history
  243. [ps_conn_log_block_today]
  244. _PARENT=conn_log_block
  245. DisplayName=%Blocked Today%
  246. IsFilter=true
  247. EnableDBNotify=false
  248. DefaultOrder=30023, 30027, 30038, 30024, 30033, 30031, 30032, 30029, 30030, 30025, 30037, 30028, 30036, 30034, 30035
  249. SortField=fld_30027_11
  250. AscSort=no
  251. [ps_conn_log_block_today\Filter]
  252. _NoCopyIfExist=true
  253. 30027={Enable:=1}{UseLastTime:=true}{LastTimeType:=5}{LastTimeValue:=1}{FromTime:=2003.2.16.17.39.1}{ToTime:=2003.2.16.17.39.1}
  254.  
  255. [ps_conn_log_block_today_10_min]
  256. _PARENT=conn_log_block
  257. DisplayName=%Blocked during last 10 min%
  258. IsFilter=true
  259. CanAddFilter=0
  260. EnableDBNotify=false
  261. DefaultOrder=30023, 30027, 30038, 30024, 30033, 30031, 30032, 30029, 30030, 30025, 30037, 30028, 30036, 30034, 30035
  262. SortField=fld_30027_11
  263. AscSort=no
  264. [ps_conn_log_block_today_10_min\Filter]
  265. _NoCopyIfExist=true
  266. 30027={Enable:=1}{UseLastTime:=true}{LastTimeType:=1}{LastTimeValue:=10}{FromTime:=2003.2.16.17.39.1}{ToTime:=2003.2.16.17.39.1}
  267.  
  268. ;////////////////////////////////////////////////////////
  269. ;Netbios history
  270. [conn_log_allow_netbios_filter]
  271. _PARENT=conn_log_allow
  272. DisplayName=%NetBios history Allow%
  273. IsFilter=true
  274. CanAddFilter=0
  275. EnableDBNotify=false
  276. DefaultOrder=30023, 30027, 30038, 30024, 30033, 30031, 30032, 30029, 30030, 30025, 30037, 30028, 30036, 30034, 30035
  277. SortField=fld_30027_11
  278. AscSort=no
  279.  
  280. [conn_log_allow_netbios_filter\Filter]
  281. _NoCopyIfExist=true
  282. 30038={Enable:=1}{Values_0:=NETBIOS}
  283.  
  284. [conn_log_allow_netbios_filter\FieldsState]
  285. _NoCopyIfExist=true
  286. 30027=VISIBLE, 1, 100
  287. 30038=HIDE, 3, 120
  288. 30024=VISIBLE, 3, 80
  289. 30033=HIDE, 4, 100
  290. 30031=VISIBLE, 2, 100
  291. 30032=HIDE, 5, 100
  292. 30029=HIDE, 7, 100
  293. 30030=HIDE, 8, 100
  294. 30025=HIDE, 6, 300
  295. 30037=HIDE, 9, 300
  296. 30028=HIDE, 10, 100
  297. 30036=HIDE, 11, 100
  298. 30034=HIDE, 12, 100
  299. 30035=HIDE, 13, 100
  300.  
  301.  
  302. ;////////////////////////////////////////////////////////
  303. ;Web History
  304. [conn_log_allow_web_filter]
  305. _PARENT=conn_log_allow
  306. DisplayName=%Web history Allow%
  307. IsFilter=true
  308. CanAddFilter=0
  309. EnableDBNotify=false
  310. DefaultOrder=30023, 30027, 30038, 30024, 30033, 30031, 30032, 30029, 30030, 30025, 30037, 30028, 30036, 30034, 30035
  311. SortField=fld_30027_11
  312. AscSort=no
  313.  
  314. [conn_log_allow_web_filter\Filter]
  315. _NoCopyIfExist=true
  316. 30033={Enable:=1}{TCP:=true}
  317. 30032={Enable:=1}{Ports:=80-83, 443, 1080, 3128, 8080, 8088}
  318.  
  319. [conn_log_allow_web_filter\FieldsState]
  320. _NoCopyIfExist=true
  321. 30027=VISIBLE, 1, 100
  322. 30038=HIDE, 4, 120
  323. 30024=HIDE, 6, 80
  324. 30033=HIDE, 5, 100
  325. 30031=VISIBLE, 2, 100
  326. 30032=HIDE, 7, 100
  327. 30029=HIDE, 9, 100
  328. 30030=HIDE, 10, 100
  329. 30025=HIDE, 8, 300
  330. 30037=HIDE, 11, 300
  331. 30028=HIDE, 12, 100
  332. 30036=HIDE, 13, 100
  333. 30034=VISIBLE, 3, 100
  334. 30035=VISIBLE, 4, 100
  335.  
  336.  
  337. ;////////////////////////////////////////////////////////
  338. ;Email history
  339. [conn_log_allow_email_filter]
  340. _PARENT=conn_log_allow
  341. DisplayName=%Email history Allow%
  342. IsFilter=true
  343. CanAddFilter=0
  344. EnableDBNotify=false
  345. DefaultOrder=30023, 30027, 30038, 30024, 30033, 30031, 30032, 30029, 30030, 30025, 30037, 30028, 30036, 30034, 30035
  346. SortField=fld_30027_11
  347. AscSort=no
  348.  
  349. [conn_log_allow_email_filter\Filter]
  350. _NoCopyIfExist=true
  351. 30033={Enable:=1}{TCP:=true}
  352. 30032={Enable:=1}{Ports:=25, 109, 110, 143, 995}
  353.  
  354. [conn_log_allow_email_filter\FieldsState]
  355. _NoCopyIfExist=true
  356. 30027=VISIBLE, 1, 100
  357. 30038=HIDE, 5, 120
  358. 30024=VISIBLE, 3, 80
  359. 30033=HIDE, 6, 100
  360. 30031=VISIBLE, 2, 100
  361. 30032=HIDE, 7, 100
  362. 30029=HIDE, 9, 100
  363. 30030=HIDE, 10, 100
  364. 30025=HIDE, 8, 300
  365. 30037=HIDE, 11, 300
  366. 30028=HIDE, 12, 100
  367. 30036=HIDE, 13, 100
  368. 30034=VISIBLE, 4, 100
  369. 30035=VISIBLE, 5, 100
  370.  
  371. ;////////////////////////////////////////////////////////
  372. ;AntiSpyware
  373. [ps_asw_scan]
  374. _PARENT=AntiSpyware
  375. DisplayName=%Spyware Scanner found items%
  376. Icon=op_log.dll, 16
  377. OpenIcon=op_log.dll, 16
  378. DataTable=SELECT * from asw_log where fld_31506_7=0 order by fld_31502_11 desc
  379. DefaultOrder=31502, 31505, 31503, 31504
  380.  
  381. [ps_asw_mon]
  382. _PARENT=AntiSpyware
  383. DisplayName=%Spyware Monitor found items%
  384. Icon=op_log.dll, 16
  385. OpenIcon=op_log.dll, 16
  386. DataTable=SELECT * from asw_log where fld_31506_7=1 order by fld_31502_11 desc
  387. DefaultOrder=31502, 31505, 31503, 31504
  388.  
  389. [ps_asw_defs]
  390. _PARENT=AntiSpyware
  391. DisplayName=%Spyware definitions update%
  392. Icon=op_log.dll, 16
  393. OpenIcon=op_log.dll, 16
  394. DataTable=SELECT fld_32002_11 as ps_asw_date_time, fld_32003_7 as ps_asw_defs_count from asw_def_log order by fld_32002_11 desc
  395.  
  396. ;////////////////////////////////////////////////////////
  397. ;eof presets
  398. ////////////////////////////////////////////////////////
  399.