# -*-html-*-   (emacs hook. keep this.)
#
# fw tool UI file used by Generic::UI.
#
# T.L. <tom@daemon.de>
#
# Required naming conventions:
#
#   d_<name>          - data identifiers
#   t_<name>          - table identifiers
#   r_<field>_<table> - reference type
#
#
# Available abstract datatypes:
#
#   string           - VARCHAR(255)
#   shortstring      - VARCHAR(64)
#   text             - BLOB
#   int              - INT(32)
#   int+[value]      - INT(32) auto-incremented. If value exists, incremented by value
#                      otherwise by 1 (the mysql default).
#   shortint         - INT(8)
#   val1|val2|..     - ENUM('val1', 'val2',..) - the first one will be the default.
#                      Only on option may be valid.
#   (val1|val2|..)   - virtual type, uses VARCHAR(255) for storage and
#                      behaves like a Config::General FlagBit option. One or more
#                      options may be valid.
#   password         - same as shortstring, but handled in a secure way
#
#
# How to mark UNIQE fields:
#
#   unique  = d_name,d_ts
#
# multiple occurences are allowed and supported.
#
#
# Reserved fields, which will always be created:
#
#   idx  = Index field, which is the primary key
#   ts   = Timestamp field, which contains the last change time




<t_interface>
  d_name     string
  d_device   string
  d_type     access | bridge | trunk | virtual | vlan | tunnel
  d_vlan     shortstring
  d_tunsrc   shortstring
  d_tundst   shortstring
  d_mac      string
  d_media    10 | 100 | 1000 | 10/100 | 10/100/1000 | <auto> | -
  d_duplex   half | full
  d_metric   shortint
  d_mtu      shortint
  d_parent   string
  r_bridge   t_bridge.idx.d_device
  d_ip       shortstring
  d_mask     shortstring
  d_note     text
  d_status   up | down
  unique     d_name
  unique     d_device
</t_interface>

<t_network>
  d_name     shortstring
  d_net      shortstring
  d_note     text
  unique     d_name,d_net
</t_network>

<t_port>
  d_name     shortstring
  d_port     string
  d_note     string
  unique     d_name,d_port
</t_port>

<t_proto>
  d_name     shortstring
  d_proto    string
  d_note     string
  unique     d_name,d_proto
</t_proto>

<t_firewall>
  d_name     string
  d_note     text
  d_status   active | inactive
  unique     d_name
</t_firewall>

<t_rule>
  d_icon  ( <img src='../icons/accept.png' alt='accept'> | \
            <img src='../icons/block.png' alt='block'> | \
	    <img src='../icons/console.png' alt='console'> | \
	    <img src='../icons/delete.png' alt='delete'> | \
	    <img src='../icons/encrypt.png' alt='encrypt'> | \
	    <img src='../icons/important.png' alt='important'> | \
	    <img src='../icons/internet.png' alt='internet'> | \
	    <img src='../icons/lan.png' alt='lan'> | \
	    <img src='../icons/launch.png' alt='launch'> | \
	    <img src='../icons/lock.png' alt='lock'> | \
	    <img src='../icons/log.png' alt='log'> )

  d_name	    string
  r_interface       t_interface.idx.d_name
  r_firewall        t_firewall.idx.d_name
  d_pos             shortint+10
  d_direction       in | out
  d_options         ( log | log-all | quick )
  d_flags           SYN/SYN-ACK | SYN/SYN | SYN/ | /SYN-FIN-RST-ACK
  d_action          block | block(return-rst) | block(return-icmp) | pass
  d_state	    ( keep-frags | keep-state | modulate-state )
  d_state_timeout   shortstring
  r_src_net	    t_network.idx.d_name
  r_src_port	    t_port.idx.d_name
  r_dst_net         t_network.idx.d_name
  r_dst_port	    t_port.idx.d_name
  r_proto           t_proto.idx.d_name
  d_protocode       shortstring
  d_note            shortstring
  d_status	    active | locked
  order             d_pos
  unique	    r_interface,r_firewall,d_direction,d_options,d_flags,d_action,d_state,d_protocode,\
                    r_src_net,r_src_port,r_dst_net,r_dst_port,r_proto
</t_rule>

<t_macrule>
  r_firewall t_firewall.idx.d_name
  d_name     string
  d_ether    string
  d_options  ( log | quick )
  d_action   ( block | pass )
  d_status   active | locked
  unique     d_ether,d_action
</t_macrule>

<t_staticmac>
  d_host     string
  d_ether    string
  d_status   active | locked
  unique     d_ether
</_staticmac>

<t_iproute>
  r_firewall t_firewall.idx.d_name
  d_name     string
  r_dst_net  t_network.idx.d_name
  r_dst_gw   t_network.idx.d_name
  d_metric   int
  d_status   active | locked
  unique     r_dst_net,r_dst_gw
</t_iproute>

<t_bridge>
  d_name     string
  d_device   bridge0 | bridge1 | bridge2 | bridge3
  d_status   up | down
  unique     d_device
</t_bridge>

<t_nat>
  d_name       string
  d_type       nat | binat | redirect
  d_makeit     yes | no
  r_interface  t_interface.idx.d_name
  r_firewall   t_firewall.idx.d_name
  r_proto      t_proto.idx.d_name
  r_src_net    t_network.idx.d_name
  r_src_port   t_port.idx.d_name
  r_dst_net    t_network.idx.d_name
  r_dst_port   t_port.idx.d_name
  r_to_net     t_network.idx.d_name
  r_to_port    t_network.idx.d_name
  d_to_if      shortstring
  d_status     active | locked
  unique       d_type,d_makeit,r_interface,r_proto,r_src_net,r_src_port,r_dst_net,r_dst_port,r_to_net,d_to_if 
</t_nat>

<t_log>
  d_entry    string
</t_log>

<t_user>
  d_name     shortstring
  d_passwd   password
  r_group    t_group.idx.d_name
  d_status   active | locked
  unique     d_name
</t_user>

<t_group>
  d_name        shortstring
  d_options     ( quick-save | fast-return )
  unique        d_name
</t_group>

<t_permission>
  d_name     shortstring
  d_table    t_interface | \
             t_network | \
             t_port | \
             t_proto | \
             t_firewall | \
             t_rule | \
             t_simplerule | \
             t_nat | \
	     t_macrule | \
	     t_staticmac | \
	     t_iproute | \
             t_log | \
             t_user | \
             t_group | \
             t_permission | \
             t_nabou_config | \
             t_nabou_locations | \
             t_nabou_mail | \
             t_nabou_suid | \
             t_nabou_directory | \
             t_nabou_define | \
             t_nabou_check | \
             t_nabou_reports | \
             t_nabou_crontab | *
  d_mode     read-write | read-only | none
  r_group    t_group.idx.d_name
</t_permission>

<t_nabou_config>
  d_name           shortstring
  d_features       ( use_mail | use_ls | use_temp_sum | use_shadow | read_only_db )
  d_checks         ( check_cron | check_suid | check_files | check_root \
                     | check_user | check_diskusage | check_ports | check_symlinks )
  d_basedir        string
  d_checksum_algo  shortstring
  d_cipher_algo    shortstring
</t_nabou_config>

<t_nabou_locations>
  d_passwd   string
  d_shadow   string
  d_shells   string
  d_sendmail string
  d_crontab  string
  d_who      string
  d_lsof     string
  r_nabourc  t_nabou_config.idx.d_name
</t_nabou_locations>

<t_nabou_mail>
  d_rcpt     string
  d_cc       string
  d_alert    string
  d_from     string
  d_subject  string
  r_nabourc  t_nabou_config.idx.d_name
</t_nabou_mail>

<t_nabou_suid>
  d_options  ( chk_md5 | chk_dev | chk_ino | chk_mode | chk_nlink | chk_uid | \
               chk_gid | chk_rdev | chk_size | chk_atime | chk_mtime | chk_ctime | \
               chk_blksize | chk_blocks | chk_decrease )
  r_nabourc   t_nabou_config.idx.d_name
</t_nabou_suid>

<t_nabou_directory>
  d_directory     string
  d_options       ( chk_md5 | chk_dev | chk_ino | chk_mode | chk_nlink | chk_uid | \
                    chk_gid | chk_rdev | chk_size | chk_atime | chk_mtime | chk_ctime | \
                    chk_blksize | chk_blocks | chk_decrease )
  d_recursive     on | off
  d_exclude       text
  d_include       text
  d_du_increase   shortint
  d_du_decrease   shortint
  r_nabourc       t_nabou_config.idx.d_name
</t_nabou_directory>

<t_nabou_define>
  d_name          string
  d_options       ( chk_md5 | chk_dev | chk_ino | chk_mode | chk_nlink | chk_uid | \
                    chk_gid | chk_rdev | chk_size | chk_atime | chk_mtime | chk_ctime | \
                    chk_blksize | chk_blocks | chk_decrease )
  d_recursive     on | off
  d_exclude       text
  d_include       text
  d_du_increase   shortint
  d_du_decrease   shortint
  r_nabourc       t_nabou_config.idx.d_name
</t_nabou_define>

<t_nabou_check>
  r_check   t_nabou_define.idx.d_name
  d_files   text
  r_nabourc t_nabou_config.idx.d_name
</t_nabou_check>

<t_nabou_reports>
  d_ts      string
  d_report  text
  r_nabourc t_nabou_config.idx.d_name
</t_nabou_reports>

<t_nabou_crontab>
  d_min     shortstring
  d_hour    shortstring
  d_day     shortstring
  d_mon     shortstring
  d_weekday shortstring
  r_nabourc t_nabou_config.idx.d_name
</t_nabou_crontab>