examples/firewall_first_match.json

{
 "model": "jue-latest",
 "state": {
  "chain": "INPUT (iptables, first match wins, default policy DROP)",
  "rules": [
   "1: -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT",
   "2: -A INPUT -p tcp -s 10.20.0.0/16 --dport 22 -j ACCEPT",
   "3: -A INPUT -p tcp --dport 22 -j REJECT --reject-with tcp-reset",
   "4: -A INPUT -p tcp --dport 443 -j ACCEPT"
  ],
  "packet": {
   "proto": "tcp",
   "src": "203.0.113.45",
   "dst_port": 22,
   "state": "NEW"
  }
 },
 "questions": {
  "verdict": {
   "type": "choice",
   "instructions": "What happens to this packet?",
   "criteria": {
    "ACCEPT": "Accepted",
    "DROP": "Silently dropped",
    "REJECT": "Rejected with a TCP reset"
   }
  },
  "matching_rule": {
   "type": "choice",
   "instructions": "Which rule decides it?",
   "criteria": {
    "R1": "Rule 1",
    "R2": "Rule 2",
    "R3": "Rule 3",
    "R4": "Rule 4",
    "POLICY": "Default policy"
   }
  }
 }
}