UCD-IPFWACC-MIB DEFINITIONS ::= BEGIN

IMPORTS

    OBJECT-TYPE, MODULE-IDENTITY, IpAddress, Integer32, Counter32

	FROM SNMPv2-SMI

    DisplayString

	FROM SNMPv2-TC

    ucdExperimental

	FROM UCD-SNMP-MIB;

ucdIpFwAccMIB MODULE-IDENTITY

    LAST-UPDATED "9912160000Z"

    ORGANIZATION "University of California, Davis"

    CONTACT-INFO    

	"This mib is no longer being maintained by the University of

	 California and is now in life-support-mode and being

	 maintained by the net-snmp project.  The best place to write

	 for public questions about the net-snmp-coders mailing list

	 at net-snmp-coders@lists.sourceforge.net.

         postal:   Wes Hardaker

                   P.O. Box 382

                   Davis CA  95617

         email:    net-snmp-coders@lists.sourceforge.net

        "

    DESCRIPTION

	"This module defines MIB components for reading information

         from the accounting rules IP Firewall. This would typically

         let you read the rules and the counters. I did not include

         some flags and fields that I considered irrelevant for the

         accounting rules. Resetting the counters of the rules by SNMP

         would be simple, but I don't consider it so useful. I gave no

         consideration to implementing write access for allowing

         modification of the accounting rules.

         Cristian.Estan@net.utcluj.ro "

    REVISION	 "9912160000Z"

    DESCRIPTION

	"SMIv2 version converted from an older MIB definition."

    ::= { ucdExperimental 1 }

ipFwAccTable OBJECT-TYPE

    SYNTAX	SEQUENCE OF IpFwAccEntry

    MAX-ACCESS	not-accessible

    STATUS	current

    DESCRIPTION

	"A table with the accounting rules of the IP firewall"

    ::= { ucdIpFwAccMIB 1 }

ipFwAccEntry OBJECT-TYPE

    SYNTAX	IpFwAccEntry

    MAX-ACCESS	not-accessible

    STATUS	current

    DESCRIPTION

	"An accounting rule of the IP firewall"

    INDEX	{ ipFwAccIndex }

    ::= { ipFwAccTable 1 }

IpFwAccEntry ::= SEQUENCE {

    ipFwAccIndex	Integer32,

    ipFwAccSrcAddr	IpAddress,

    ipFwAccSrcNetMask	IpAddress,

    ipFwAccDstAddr	IpAddress,

    ipFwAccDstNetMask	IpAddress,

    ipFwAccViaName	DisplayString,

    ipFwAccViaAddr	IpAddress,

    ipFwAccProto	INTEGER,

    ipFwAccBidir	INTEGER,

    ipFwAccDir		INTEGER,

    ipFwAccBytes	Counter32,

    ipFwAccPackets	Counter32,

    ipFwAccNrSrcPorts	Integer32,

    ipFwAccNrDstPorts	Integer32,

    ipFwAccSrcIsRange	INTEGER,

    ipFwAccDstIsRange	INTEGER,

    ipFwAccPort1	Integer32,

    ipFwAccPort2	Integer32,

    ipFwAccPort3	Integer32,

    ipFwAccPort4	Integer32,

    ipFwAccPort5	Integer32,

    ipFwAccPort6	Integer32,

    ipFwAccPort7	Integer32,

    ipFwAccPort8	Integer32,

    ipFwAccPort9	Integer32,

    ipFwAccPort10	Integer32

}

ipFwAccIndex OBJECT-TYPE

    SYNTAX	Integer32 (0..2147483647)

    MAX-ACCESS	read-only

    STATUS	current

    DESCRIPTION

	"Reference index for each firewall rule."

    ::= { ipFwAccEntry 1 }

ipFwAccSrcAddr OBJECT-TYPE

    SYNTAX	IpAddress

    MAX-ACCESS	read-only

    STATUS	current

    DESCRIPTION

	"The source address in the firewall rule."

    ::= { ipFwAccEntry 2 }

ipFwAccSrcNetMask OBJECT-TYPE

    SYNTAX	IpAddress

    MAX-ACCESS	read-only

    STATUS	current

    DESCRIPTION

	"The netmask of the source address in the firewall rule."

    ::= { ipFwAccEntry 3 }

ipFwAccDstAddr OBJECT-TYPE

    SYNTAX	IpAddress

    MAX-ACCESS	read-only

    STATUS	current

    DESCRIPTION

	"The destination address in the firewall rule."

    ::= { ipFwAccEntry 4 }

ipFwAccDstNetMask OBJECT-TYPE

    SYNTAX	IpAddress

    MAX-ACCESS	read-only

    STATUS	current

    DESCRIPTION

	"The netmask of the destination address in the firewall rule."

    ::= { ipFwAccEntry 5 }

ipFwAccViaName OBJECT-TYPE

    SYNTAX	DisplayString (SIZE(1..64))

    MAX-ACCESS	read-only

    STATUS	current

    DESCRIPTION

	"The name of the interface to which the rule applies. If no

	 interface is associated with the present rule, this should

	 contain a dash (-)."

    ::= { ipFwAccEntry 6 }

ipFwAccViaAddr OBJECT-TYPE

    SYNTAX	IpAddress

    MAX-ACCESS	read-only

    STATUS	current

    DESCRIPTION

	"The address of the interface to which the rule applies.

	 Using this parameter makes sense when multiple addresses are

	 associated to the same physical interface. If not defined

	 for the current rule this should be set to 0."

    ::= { ipFwAccEntry 7 }

ipFwAccProto OBJECT-TYPE

    SYNTAX	INTEGER {

		    other(1),

		    all(2),

		    tcp(3),

		    udp(4),

		    icmp(5)

		}

    MAX-ACCESS	read-only

    STATUS	current

    DESCRIPTION

	"The protocol(s) to which the rule applies."

    ::= { ipFwAccEntry 8 }

ipFwAccBidir OBJECT-TYPE

    SYNTAX	INTEGER {

		    unidirectional(1),

		    bidirectional(2)

		}

    MAX-ACCESS	read-only

    STATUS	current

    DESCRIPTION

	"Whether the rule works in both directions (i.e. with the

	 source and destination parts swapped) or not."

    ::= { ipFwAccEntry 9 }

ipFwAccDir OBJECT-TYPE

    SYNTAX	INTEGER {

		    both(1),

		    in(2),

		    out(3)

		}

    MAX-ACCESS	read-only

    STATUS	current

    DESCRIPTION

	"Whether the rule applies to packets entering or exiting the

	 kernel."

    ::= { ipFwAccEntry 10 }

ipFwAccBytes OBJECT-TYPE

    SYNTAX	Counter32

    MAX-ACCESS	read-only

    STATUS	current

    DESCRIPTION

	"The number of bytes that matched this rule since the last

	 reset of the counters."

    ::= { ipFwAccEntry 11 }

ipFwAccPackets OBJECT-TYPE

    SYNTAX	Counter32

    MAX-ACCESS	read-only

    STATUS	current

    DESCRIPTION

	"The number of packets that matched this rule since the last

	 reset of the counters."

    ::= { ipFwAccEntry 12 }

ipFwAccNrSrcPorts OBJECT-TYPE

    SYNTAX	Integer32

    MAX-ACCESS	read-only

    STATUS	current

    DESCRIPTION

	"The number of ports that refer to the source address."

    ::= { ipFwAccEntry 13 }

ipFwAccNrDstPorts OBJECT-TYPE

    SYNTAX	Integer32 

    MAX-ACCESS	read-only

    STATUS	current

    DESCRIPTION

	"The number of ports that refer to the destination address."

    ::= { ipFwAccEntry 14 }

ipFwAccSrcIsRange OBJECT-TYPE

    SYNTAX	INTEGER {

		    srchasrange(1),

		    srchasnorange(2)

		}

    MAX-ACCESS	read-only

    STATUS	current

    DESCRIPTION

	"Interpret the first two ports of the source part as

	 the upper and lower limit of an interval or not."

    ::= { ipFwAccEntry 15 }

ipFwAccDstIsRange OBJECT-TYPE

    SYNTAX	INTEGER {

		    dsthasrange(1),

		    dsthasnorange(2)

		}

    MAX-ACCESS	read-only

    STATUS	current

    DESCRIPTION

	"Interpret the first two ports of the destination part as

	 the upper and lower limit of an interval or not."

    ::= { ipFwAccEntry 16 }

ipFwAccPort1 OBJECT-TYPE

    SYNTAX	Integer32

    MAX-ACCESS	read-only

    STATUS	current

    DESCRIPTION

	"Port number 1."

    ::= { ipFwAccEntry 17 }

ipFwAccPort2 OBJECT-TYPE

    SYNTAX	Integer32

    MAX-ACCESS	read-only

    STATUS	current

    DESCRIPTION

	"Port number 2."

    ::= { ipFwAccEntry 18 }

ipFwAccPort3 OBJECT-TYPE

    SYNTAX	Integer32

    MAX-ACCESS	read-only

    STATUS	current

    DESCRIPTION

	"Port number 3."

    ::= { ipFwAccEntry 19 }

ipFwAccPort4 OBJECT-TYPE

    SYNTAX	Integer32

    MAX-ACCESS	read-only

    STATUS	current

    DESCRIPTION

	"Port number 4."

    ::= { ipFwAccEntry 20 }

ipFwAccPort5 OBJECT-TYPE

    SYNTAX	Integer32

    MAX-ACCESS	read-only

    STATUS	current

    DESCRIPTION

	"Port number 5."

    ::= { ipFwAccEntry 21 }

ipFwAccPort6 OBJECT-TYPE

    SYNTAX	Integer32 

    MAX-ACCESS	read-only

    STATUS	current

    DESCRIPTION

	"Port number 6."

    ::= { ipFwAccEntry 22 }

ipFwAccPort7 OBJECT-TYPE

    SYNTAX	Integer32

    MAX-ACCESS	read-only

    STATUS	current

    DESCRIPTION

	"Port number 7."

    ::= { ipFwAccEntry 23 }

ipFwAccPort8 OBJECT-TYPE

    SYNTAX	Integer32

    MAX-ACCESS	read-only

    STATUS	current

    DESCRIPTION

	"Port number 8."

    ::= { ipFwAccEntry 24 }

ipFwAccPort9 OBJECT-TYPE

     SYNTAX	Integer32

    MAX-ACCESS	read-only

    STATUS	current

    DESCRIPTION

	"Port number 9."

    ::= { ipFwAccEntry 25 }

ipFwAccPort10 OBJECT-TYPE

    SYNTAX	Integer32

    MAX-ACCESS	read-only

    STATUS	current

    DESCRIPTION

	"Port number 10."

    ::= { ipFwAccEntry 26 }

END