<?xml version="1.0" encoding="ISO-8859-1"?>
<?xml-stylesheet type="text/xsl" href="fw.xsl"?>
<firewallconfig>

    <availablebandwidth>355</availablebandwidth>

    <service> <name>SSH</name>   <rate>90</rate>
        <match>-p tcp --sport ssh</match>
        <match>-p tcp --dport ssh</match>
    </service>
    <service> <name>HTTP Requests</name> <rate>90</rate>
        <match>-p tcp --dport http</match>
        <match>-p tcp --dport https</match>
    </service>
    <service> <name>HTTP Replies </name> <rate>90</rate>
        <match>-p tcp --sport http</match>
        <match>-p tcp --sport https</match>
    </service>
    <service> <name>IM           </name> <rate>15</rate>
        <match>-p tcp --sport 6666:6669</match>
        <match>-p tcp --dport 6666:6669</match>
        <match>-p tcp --sport silc</match>
        <match>-p tcp --dport silc</match>
        <match>-p tcp --sport smtp</match>
        <match>-p tcp --dport smtp</match>
        <match>-p tcp --sport smtps</match>
        <match>-p tcp --dport smtps</match>
        <!-- Both ICQ and AOL AIM use port 5190 -->
        <match>-p tcp --sport 5190</match>
        <match>-p tcp --dport 5190</match>
        <match>-p udp --sport 5190</match>
        <match>-p udp --dport 5190</match>
    </service>
    <service> <name>Telnet</name> <rate>10</rate>
        <match>-p tcp --sport telnet</match>
        <match>-p tcp --dport telnet</match>
    </service>
    <service> <name>ICMP</name> <rate>5</rate>
        <match>-p icmp</match>
    </service>
    <service> <name>DNS</name> <rate>5</rate>
        <match>-p udp --sport domain</match>
        <match>-p udp --dport domain</match>
        <match>-p tcp --sport domain</match>
        <match>-p tcp --dport domain</match>
    </service>
    <service> <name>Small packets</name> <rate>15</rate>
        <match>-p tcp -m length --length :64</match>
    </service>
    <service> <name>Bulk         </name> <rate>20</rate>
        <match>-p tcp --sport ftp-data</match>
        <match>-p tcp --dport ftp-data</match>
        <match>--uid-owner 1015</match>
    </service>
    <service default="true"> <name>Unclassified </name> <rate>15</rate>
    </service>

</firewallconfig>

