Open Nacho-Neko opened 5 years ago
Thanks for the brief suggestion here
Could you provide a little more detail how you actually see these working?
N
It would be nice to be able to run easyrule (rule command line management) with the API. From a security perspective it would be interesting, you could send from a SIEM calls to block malware connections in firewall.
You may want to review the approach discussed here https://github.com/ndejong/pfsense_fauxapi/issues/56#issuecomment-569243747
rule_update Rule_ID(1) type:(UDP/TCP/ICMP/ALL/OTHER) Port(80;443;21:22) Description (TEST) return (True?False)
rule_create type:(UDP/TCP/ICMP/ALL/OTHER) Port(80;443;21:22) Description (TEST) return (Rule_ID?-1)
rule_delect Rule_ID(1) return (True?False)
rule_search source(192.168.1) || destination(192.1681.2) return Serialization(List)