I'm trying now two write a rule that will filter out all outgoing port 80 requests from users.<br><br>How do I make a list of the variables I'd like to search for?<br><br>XXX.XXX.XXX.XXX,80 PR tcp len 20 52 -AF IN
<br>XXX.XXX.XXX.XXX,80 PR tcp len 20 52 -AR IN<br>XXX.XXX.XXX.XXX,80 PR tcp len 20 52 -S K-S IN<br><br>the AR, AF and S-K are the three I'd like to search for.<br><br>Here's a bit of code I've got running for the K-S.
<br><br>[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3},80 PR tcp len [0-9]{2} [0-9]{2} -S K-S IN$<br><br><br>Thanks,<br><br>Denis<br>