//SunScreenConfig 3.0

// Copyright 1999 Sun Microsystems, Inc.  All Rights Reserved.  This is the
// template registry file used to initialize a new domain (configuration
// database).  The format of this file is internal to the SunScreen software.
// The only supported way of creating or editing SunScreen configuration files
// is via the documented interfaces (the GUI and command-line configuration
// editors).

REGISTRY_VERSION 0

//Internal State Engines -- GENERATES PFL CODE IN THIS ORDER!!!
realaudio	STATE_ENGINE ;
rsh		STATE_ENGINE ;
sqlnet		STATE_ENGINE ;
ftp		STATE_ENGINE ;
tcp		STATE_ENGINE ;
dns		STATE_ENGINE ;
udp		STATE_ENGINE ;
stateless	STATE_ENGINE ;
pmapudp		STATE_ENGINE ;
pmaptcp		STATE_ENGINE ;
ip		STATE_ENGINE ;
ping		STATE_ENGINE ;
nfsro		STATE_ENGINE ;

//State Engines
nfsro		STATE_ENGINE nfsro port FORWARD 11 0 0xFFFF 3 86400 1 0;
nis		STATE_ENGINE udp program FORWARD 10 0 0xFFFFFFFF 3 60 1 1; 
pmap_nis	STATE_ENGINE pmapudp program FORWARD 9 0 0xFFFFFFFF 2 60 -1; 
pmap_udp	STATE_ENGINE pmapudp program FORWARD 8 0 0xFFFFFFFF 2 60 3600; 
pmap_tcp	STATE_ENGINE pmaptcp program FORWARD 7 0 0xFFFFFFFF 2 60 3600;  
rpc_tcp		STATE_ENGINE tcp program FORWARD 6 0 0xFFFFFFFF 1 86400;
rpc_udp		STATE_ENGINE udp program FORWARD 5 0 0xFFFFFFFF 3 60 1 0;

realaudio	STATE_ENGINE realaudio port FORWARD 4 1 0xFFFF 1 3600;
rsh		STATE_ENGINE rsh port FORWARD 4 1 0xFFFF 1 86400;
sqlnet		STATE_ENGINE sqlnet port FORWARD 4 1 0xFFFF 1 3600;
ftp		STATE_ENGINE ftp port FORWARD 4 1 0xFFFF 3 600 600 0;
tcp		STATE_ENGINE tcp port FORWARD 4 1 0xFFFF 1 86400;
tcpall		STATE_ENGINE tcp port FORWARD 4 0 0xFFFF 1 86400;

dns		STATE_ENGINE dns port FORWARD 3 2 0xFFFF 2 60 1;	
ntp		STATE_ENGINE udp port FORWARD 3 2 0xFFFF 3 60 1 0;
udp_stateless	STATE_ENGINE stateless port FORWARD 3 1 0xFFFF 0;
udp_datagram	STATE_ENGINE stateless port FORWARD 3 1 0xFFFF 0;
udp		STATE_ENGINE udp port FORWARD 3 1 0xFFFF 3 60 1 0;
udpall		STATE_ENGINE udp port FORWARD 3 0 0xFFFF 3 60 1 0;

ping		STATE_ENGINE ping type FORWARD 2 1 0xFFFF 1 10;
icmp		STATE_ENGINE stateless type FORWARD 2 0 0xFF 0;

ipmobile	STATE_ENGINE ip type FORWARD 1 3 0xFF 2 3600 0;
iptunnel	STATE_ENGINE ip type FORWARD REVERSE 1 2 0xFF 2 60 0;
ipfwd		STATE_ENGINE ip type FORWARD 1 1 0xFF 2 60 1;
ip		STATE_ENGINE stateless type FORWARD 1 0 0xFF 0;

ether		STATE_ENGINE stateless type FORWARD 0 0 0xFFFF 0;

//Services
"echo"			SERVICE	tcp		7 ;
"discard"		SERVICE	tcp		9 ;
"systat"		SERVICE	tcp		11 ;
"daytime"		SERVICE	tcp		13 ;
"quote"			SERVICE	tcp		17 ;
"chargen"		SERVICE	tcp		19 ;
"ftp"			SERVICE	ftp		21 ;
"telnet"		SERVICE	tcp		23 ;
"smtp"			SERVICE	tcp		25 ;
"time"			SERVICE tcp		37 ;
"whois"			SERVICE	tcp		43 ;
"nicname"		SERVICE	tcp		43 ;
"dns"			SERVICE	tcp		53 
				dns		53 ;
"tftp"			SERVICE	udp		69 PARAMS (60 -1 7);
"gopher"		SERVICE	tcp		70 ;
"finger"		SERVICE	tcp		79 ;
"www"			SERVICE	tcp		80 ;
"pop"			SERVICE	tcp		109 - 110 ;
"imap"			SERVICE tcp		143 ;
"auth"			SERVICE	tcp		113 ;
"ntp"			SERVICE	udp		123 ;
"nntp"			SERVICE	tcp		119 ;
"snmp"			SERVICE	tcp		161 
				udp		161 ;
"snmp traps"		SERVICE udp_datagram	162 ;
"rlogin"		SERVICE	tcp		513 ;
"rsh"			SERVICE	rsh		514 ;
"sqlnet"		SERVICE	sqlnet		1521 ;
"syslog"		SERVICE	udp_datagram	514 ;
"printer"		SERVICE	tcp		515 ;
"rip"			SERVICE	udp_datagram	520
						520 BROADCAST ;
"archie"		SERVICE	udp		1525 PARAMS (360 -1 0);
"certificate discovery"	SERVICE udp		1640 PARAMS (60 1 1);
"remote administration" SERVICE tcp		3852 - 3854;
"HA administration"	SERVICE tcp		3853;
"HA heartbeat"		SERVICE	ping		8;
"HA"			SERVICE_GROUP		"HA heartbeat"
						"HA administration";
"SecurID PIN"		SERVICE tcp		3855;
"securid"		SERVICE udp		5500;
"securidprop"		SERVICE tcp		5510;
"real audio"		SERVICE realaudio	7070 ;
"traceroute"		SERVICE udp_datagram	33430 - 34000
			REVERSE icmp		11
			REVERSE icmp		3 ;
"tracert"		SERVICE ping		8
			REVERSE icmp		11;
"icmp echo-reply"	SERVICE	icmp 		0 ;
"icmp unreach"		SERVICE	icmp		3 ;
"icmp quench"		SERVICE	icmp		4 ;
"icmp redirect"		SERVICE	icmp		5 ;
"icmp echo-request"	SERVICE	icmp		8 ;
"router announcement" 	SERVICE icmp		9
						9 BROADCAST ;
"router solicitation"	SERVICE icmp		10
						10 BROADCAST ;
"icmp exceeded"		SERVICE	icmp		11 ;
"icmp params"		SERVICE	icmp		12 ;
"icmp info"		SERVICE	icmp		13 14 15 16 17 18 ;
"ping"			SERVICE	ping		8 ;
"router discovery"	SERVICE icmp		10
						10 BROADCAST
			REVERSE icmp		9
						9 BROADCAST ;
"rstat"			SERVICE	rpc_udp		100001
				pmap_udp	100001;
"rusers"		SERVICE	rpc_udp		100002
				pmap_udp 	100002;
"nfs prog"		SERVICE	pmap_udp 	100003
				udp		2049
				tcp		2049 ;
"nfs readonly prog"	SERVICE	pmap_tcp	100003
				pmap_udp        100003
				nfsro		2049 ;
"ypserv"		SERVICE	nis		100004
				pmap_nis 	100004
				pmap_nis 	100004 BROADCAST ;
"mountd"		SERVICE	rpc_tcp		100005 
				rpc_udp 	100005
				pmap_tcp 	100005 
				pmap_udp 	100005 ;
"ypbind"		SERVICE	rpc_udp		100007
				pmap_udp	100007;
"wall"			SERVICE	rpc_udp		100008
				pmap_udp 	100008;
"yppasswd"		SERVICE	rpc_udp		100009
				pmap_udp 	100009;
"rquota"		SERVICE	rpc_tcp		100011
				rpc_udp 	100011
				pmap_tcp 	100011
				pmap_udp 	100011 ;
"spray"			SERVICE	rpc_udp		100012
				pmap_udp 	100012;
"rex"			SERVICE	rpc_udp		100017
				pmap_udp 	100017;
"nlm"			SERVICE	rpc_tcp		100021
				rpc_udp 	100021
				pmap_tcp 	100021
				pmap_udp 	100021
			REVERSE	rpc_tcp		100021	
			REVERSE	rpc_udp		100021	
			REVERSE pmap_tcp 	100021
			REVERSE pmap_udp 	100021;
"status"		SERVICE	rpc_tcp		100024
				rpc_udp 	100024
				pmap_tcp 	100024
				pmap_udp 	100024;
"ypupdate"		SERVICE	rpc_udp		100028
				pmap_udp 	100028;
"nfs acl"		SERVICE	rpc_tcp		100227
				rpc_udp 	100227
				pmap_tcp 	100227
				pmap_udp 	100227;
"nfs"			SERVICE_GROUP		"mountd"
						"nfs prog"
						"rquota"	
						"nlm"
						"status"
						"nfs acl";
"nfs readonly"		SERVICE_GROUP		"mountd"
						"nfs readonly prog"
						"rquota"	
						"nlm"
						"status"
						"nfs acl";
"nis"			SERVICE_GROUP		"ypserv"
						"yppasswd"
						"ypupdate"	
						"ypbind";
"ospf"			SERVICE	ip		89 BROADCAST 
						89 ;
"skip"			SERVICE	iptunnel	57
						79 ;
"esp"			SERVICE	iptunnel	50 ;
"ah"			SERVICE	iptunnel	51 ;
"isakmp"		SERVICE udp		500 ;
"ipsec"			SERVICE_GROUP		"esp"
						"ah"
						"isakmp";
"ipv6 tunnel"		SERVICE	iptunnel	41 ;
"icmp all"		SERVICE	icmp		*
						* BROADCAST ;
"ip all"		SERVICE	ip		* ;
"ip mobile"		SERVICE ipmobile	* ;
"ip tunnel"		SERVICE iptunnel	* ;
"ip forward"		SERVICE ipfwd		* ;
"udp all"		SERVICE	udpall		* ;	
"tcp all"		SERVICE	tcpall		0 - 3850	
						3855 - 65535 ;
"rpc all"		SERVICE rpc_udp		* ;
"rpc tcp all"		SERVICE rpc_tcp 	* ;
"pmap udp all"		SERVICE pmap_udp 	*
						* BROADCAST;
"pmap tcp all" 		SERVICE pmap_tcp 	* ;
"common"		SERVICE_GROUP		"tcp all"
						"udp all"
						"syslog"
						"dns"
 						"rpc all"
						"nfs prog"
						"icmp all"
						"rip"
	   					"ftp"
						"rsh"
						"real audio"
						"pmap udp all"
						"pmap tcp all"
						"rpc tcp all"
						"nis"
						"archie"
						"traceroute"
						"ping";
"common services"	SERVICE_GROUP		"tcp all"
						"udp all"
						"syslog"
						"dns"
 						"rpc all"
						"nfs prog"
						"icmp all"
						"rip"
	   					"ftp"
						"rsh"
						"real audio"
						"pmap udp all"
						"pmap tcp all"
						"rpc tcp all"
						"nis"
						"archie"
						"traceroute"
						"ping";
"X11"			SERVICE tcp		6000 - 6063 ;
"pcnfsd"		SERVICE pmap_tcp	150001
				pmap_udp	150001
				rpc_tcp		150001 
				rpc_udp		150001 ;
"automount"		SERVICE pmap_tcp	300019
				pmap_udp	300019
				rpc_tcp		300019 
				rpc_udp		300019 ;
"ypxfrd"		SERVICE pmap_tcp	100069
				pmap_udp	100069
				rpc_tcp		100069
				rpc_udp		100069 ;
"exec"			SERVICE tcp		512 ;
"wais"			SERVICE tcp		210 ;
"uucp"			SERVICE tcp		540 ;
"irc"			SERVICE tcp		6670
				tcp		6680 ;
"VDOLive"		SERVICE tcp		7000 
				tcp		7010 
			REVERSE udp 		32649 ; 
"CU See Me"		SERVICE udp_datagram	7648 - 7652 ;
"Vosaic"		SERVICE tcp		1235
			REVERSE udp_datagram	61801 - 61820
			REVERSE udp_datagram	20000 - 20020 ;
"StreamWorks"		SERVICE	udp_datagram	1558
			REVERSE udp_datagram	1558 ;
"CoolTalk"		SERVICE	tcp		6499 - 6500 
				udp_datagram 	13000
			REVERSE udp_datagram	13000 ;
"Backweb"		SERVICE udp		370 PARAMS (60 0 3);

"radius"		SERVICE udp		1645 ;
"ssl"			SERVICE tcp		443 ;
"who" 			SERVICE udp_datagram 	513 BROADCAST ; 
"netstat"		SERVICE tcp 		15 ;
"biff" 			SERVICE udp_datagram	512 BROADCAST ;
"bootp"			SERVICE udp		67 BROADCAST PARAMS (60 0 3) ;
"kerberos" 		SERVICE udp		88 ;
"ntp-tcp"		SERVICE tcp		123 ;
"netbios name"		SERVICE	udp		137 
						137 BROADCAST;
"netbios datagram"	SERVICE udp_datagram	138
						138 BROADCAST;
"netbios session"	SERVICE tcp		139 ;
"netbios"		SERVICE_GROUP		"netbios name" 
				    		"netbios datagram"
				     		"netbios session" ;
"lpd"			SERVICE	tcp		2766 ;
"mosaic" 		SERVICE_GROUP "www" "ssl" "gopher" "ftp" "archie" ;
"echo-udp"		SERVICE udp		7 ;
"echo group"		SERVICE_GROUP "echo" "echo-udp" ;
"discard-udp"		SERVICE udp		9 ;
"discard group"		SERVICE_GROUP "discard" "discard-udp" ;
"time-udp"		SERVICE udp		37 ;
"time group"		SERVICE_GROUP "time" "time-udp";
"daytime-udp"		SERVICE udp		13 ;
"daytime group"		SERVICE_GROUP "daytime" "daytime-udp" ;
"tcp-high-ports"	SERVICE tcp		1024 - 65535 ;
"udp-high-ports"	SERVICE udp		1024 - 65535 ;

//Screens

//Certificates

//Time objects
