tango-tsg-master/bin/tsg_maat.json

{
    "compile_table": "TSG_SECURITY_COMPILE",
    "group_table": "GROUP_COMPILE_RELATION",
    "rules": [
        {
            "compile_id": 1,
            "service": 0,
            "action": 128,
            "do_blacklist": 0,
            "do_log": 1,
            "effective_rage": 0,
            "user_region": "anything",
            "is_valid": "yes",
            "groups": [
                {
                    "group_name": "IP_ADDR_1",
                    "regions": [
                        {
                            "table_name": "TSG_OBJ_IP_ADDR",
                            "table_type": "ip_plus",
                            "table_content": {
                                "addr_type": "ipv4",
                                "src_ip": "192.168.100.5",
                                "mask_src_ip": "255.255.255.255",
                                "src_port": "0",
                                "mask_src_port": "65535",
                                "dst_ip": "0.0.0.0",
                                "mask_dst_ip": "255.255.255.255",
                                "dst_port": "0",
                                "mask_dst_port": "65535",
                                "protocol": 6,
                                "direction": "double"
                            }
                        }
                    ]
                },
                {
                    "group_name": "IP_ADDR_2",
                    "regions": [
                        {
                            "table_name": "TSG_OBJ_IP_ADDR",
                            "table_type": "ip_plus",
                            "table_content": {
                                "addr_type": "ipv4",
                                "src_ip": "192.168.50.37",
                                "mask_src_ip": "255.255.255.255",
                                "src_port": "0",
                                "mask_src_port": "65535",
                                "dst_ip": "0.0.0.0",
                                "mask_dst_ip": "255.255.255.255",
                                "dst_port": "0",
                                "mask_dst_port": "65535",
                                "protocol": 6,
                                "direction": "double"
                            }
                        }
                    ]
                },
                {
                    "group_name": "ASN",
                    "regions": [
                        {
                            "table_name": "TSG_OBJ_AS_NUMBER",
                            "table_type": "expr",
                            "table_content": {
                                "keywords": "101",
                                "expr_type": "none",
                                "match_method": "sub",
                                "format": "uncase plain"
                            }
                        },
                        {
                            "table_name": "TSG_OBJ_AS_NUMBER",
                            "table_type": "expr",
                            "table_content": {
                                "keywords": "102",
                                "expr_type": "none",
                                "match_method": "sub",
                                "format": "uncase plain"
                            }
                        }
                    ]
                },
                {
                    "group_name": "LOCATION",
                    "regions": [
                        {
                            "table_name": "TSG_OBJ_GEO_LOCATION",
                            "table_type": "expr",
                            "table_content": {
                                "keywords": "China",
                                "expr_type": "none",
                                "match_method": "sub",
                                "format": "uncase plain"
                            }
                        }
                    ]
                }
            ]    
        },
        {
            "compile_id": 5,
            "service": 0,
            "action": 128,
            "do_blacklist": 0,
            "do_log": 1,
            "effective_rage": 0,
            "user_region": "anything",
            "is_valid": "yes",
            "groups": [
                {
                    "group_name":"IP_ADDR_1",
                    "virtual_table":"TSG_SECURITY_SOURCE_ADDR",
                    "not_flag":0                   
                },
                {
                    "group_name":"IP_ADDR_2",
                    "virtual_table":"TSG_SECURITY_DESTINATION_ADDR",
                    "not_flag":0                   
                },
                {
                    "group_name":"ASN",
                    "virtual_table":"TSG_SECURITY_SOURCE_ASN",
                    "not_flag":0                   
                },
                {
                    "group_name":"LOCATION",
                    "virtual_table":"TSG_SECURITY_DESTINATION_LOCATION",
                    "not_flag":0                   
                }
            ]
        }
    ],
    "plugin_table": [
        {
            "table_name": "TSG_IP_ASN_USER_DEFINED",
            "table_content": [
                "101\t4\t192.168.50.1\t192.168.50.255\t101\tmesa\t1",
                "102\t4\t192.168.100.1\t192.168.100.255\t102\tgeedge\t1"
            ]
        },
        {
            "table_name": "TSG_IP_LOCATION_USER_DEFINED",
            "table_content": [
                "201\t20100\t4\t192.168.50.1\t192.168.50.255\t11.12\t11.12\t0\ten\tAS\tAsia\tCN\tChina\tBJ\tBeijing\tBeijing\tAsia/Singapore\t1",
                "202\t20200\t4\t192.168.100.1\t192.168.100.255\t11.12\t11.12\t0\ten\tAS\tAsia\tCN\tChina\tSH\tShanghai\tShanghai\tAsia/Singapore\t1"
            ]
        }
    ]
}