jue / examples /firewall_first_match.json
Jue1Dev's picture
Jue: open-weight calibrated decision model for cybersecurity
d259245
Raw History Blame Contribute Delete
931 Bytes
{
"model": "jue-latest",
"state": {
"chain": "INPUT (iptables, first match wins, default policy DROP)",
"rules": [
"1: -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT",
"2: -A INPUT -p tcp -s 10.20.0.0/16 --dport 22 -j ACCEPT",
"3: -A INPUT -p tcp --dport 22 -j REJECT --reject-with tcp-reset",
"4: -A INPUT -p tcp --dport 443 -j ACCEPT"
],
"packet": {
"proto": "tcp",
"src": "203.0.113.45",
"dst_port": 22,
"state": "NEW"
}
},
"questions": {
"verdict": {
"type": "choice",
"instructions": "What happens to this packet?",
"criteria": {
"ACCEPT": "Accepted",
"DROP": "Silently dropped",
"REJECT": "Rejected with a TCP reset"
}
},
"matching_rule": {
"type": "choice",
"instructions": "Which rule decides it?",
"criteria": {
"R1": "Rule 1",
"R2": "Rule 2",
"R3": "Rule 3",
"R4": "Rule 4",
"POLICY": "Default policy"
}
}
}
}