1 /* $Id: ssp_netscreen.h,v 2.5 2008/04/26 19:53:21 fknobbe Exp $
2  *
3  *
4  * Copyright (c) 2002-2008 Frank Knobbe <frank@knobbe.us>
5  * All rights reserved.
6  *
7  * Redistribution and use in source and binary forms, with or without
8  * modification, are permitted provided that the following conditions
9  * are met:
10  * 1. Redistributions of source code must retain the above copyright
11  *    notice, this list of conditions and the following disclaimer.
12  * 2. Redistributions in binary form must reproduce the above copyright
13  *    notice, this list of conditions and the following disclaimer in the
14  *    documentation and/or other materials provided with the distribution.
15  *
16  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
17  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
18  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
19  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
20  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
21  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
22  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
23  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
24  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
25  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
26  * SUCH DAMAGE.
27  *
28  * Acknowledgements:
29  *
30  * Thanks to Christopher Lyon for his assistance in the concept, support,
31  * and providing a test environment.
32  *
33  *
34  *
35  * ssp_netscreen.h
36  *
37  * Purpose:
38  *
39  * This SnortSam plugin telnet's into one or more Netscreen firewalls,
40  * setups up a global group for blocked addresses, and then adds
41  * blocked IP address to this group. SnortSam will also expire the blocks
42  * itself since the Netscreen does not have automatic time-out functionality.
43  *
44  *
45  */
46 
47 
48 #ifndef		__SSP_NETSCREEN_H__
49 #define		__SSP_NETSCREEN_H__
50 
51 
52 #define NETSCRN_STRLEN		23		/* Maximum password length */
53 #define NETSCRN_NETWAIT		20		/* Network timeout in sec */
54 
55 
56 typedef struct _netscrndata				/* List of PIX firewalls */
57 {	struct in_addr	ip;
58 	unsigned char	software_version;
59 	char			loginid[NETSCRN_STRLEN+1];
60 	char			loginpw[NETSCRN_STRLEN+1];
61 	char			denygroup[NETSCRN_STRLEN+1];
62 	char			zone[NETSCRN_STRLEN+1];
63 }	NETSCRNDATA;
64 
65 
66 int NetScrnCheckVersion(SOCKET,NETSCRNDATA *,char *);
67 void NetScrnParse(char *,char *,unsigned long,DATALIST *);
68 void NetScrnBlock(BLOCKINFO *,void *,unsigned long);
69 
70 #endif /* __SSP_NETSCREEN_H__ */
71 
72