##
##
## gofirewall.schema - Used to store some firewalling data
##
##
## Version 030403
##
##
## Maintainer:	Cajus Pollmeier	(pollmeier@GONICUS.de)
##		Lars Scheiter	(scheiter@GONICUS.de)
##
##


# Attributes for FireWall Configs
attributetype ( 1.3.6.1.4.1.10098.1.1.4.1 NAME 'FWdevice'
	DESC 'Firewall definitions'
	EQUALITY caseIgnoreIA5Match
	SUBSTR caseExactIA5SubstringsMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26)
	
attributetype ( 1.3.6.1.4.1.10098.1.1.4.2 NAME 'FWtype'
	DESC 'Firewall definitions'
	EQUALITY caseIgnoreIA5Match
	SUBSTR caseExactIA5SubstringsMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
	SINGLE-VALUE)
	
attributetype ( 1.3.6.1.4.1.10098.1.1.4.3 NAME 'FWaction'
	DESC 'Firewall definitions'
	EQUALITY caseIgnoreIA5Match
	SUBSTR caseExactIA5SubstringsMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
	SINGLE-VALUE)
	
attributetype ( 1.3.6.1.4.1.10098.1.1.4.4 NAME 'FWtable'
	DESC 'Firewall definitions'
	EQUALITY caseIgnoreIA5Match
	SUBSTR caseExactIA5SubstringsMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26)

attributetype ( 1.3.6.1.4.1.10098.1.1.4.5 NAME 'FWsource'
	DESC 'Firewall definitions'
	EQUALITY caseIgnoreIA5Match
	SUBSTR caseExactIA5SubstringsMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26)

attributetype ( 1.3.6.1.4.1.10098.1.1.4.6 NAME 'FWdest'
	DESC 'Firewall definitions'
	EQUALITY caseIgnoreIA5Match
	SUBSTR caseExactIA5SubstringsMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26)

attributetype ( 1.3.6.1.4.1.10098.1.1.4.7 NAME 'FWservice'
	DESC 'Firewall definitions'
	EQUALITY caseIgnoreIA5Match
	SUBSTR caseExactIA5SubstringsMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26)

attributetype ( 1.3.6.1.4.1.10098.1.1.4.8 NAME 'FWprotocol'
	DESC 'Firewall definitions'
	EQUALITY caseIgnoreIA5Match
	SUBSTR caseExactIA5SubstringsMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26)

attributetype ( 1.3.6.1.4.1.10098.1.1.4.10 NAME 'FWlog'
	DESC 'Firewall definitions'
	EQUALITY caseIgnoreIA5Match
	SUBSTR caseExactIA5SubstringsMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26)

attributetype ( 1.3.6.1.4.1.10098.1.1.4.11 NAME 'FWnetwork'
	DESC 'Firewall definitions'
	EQUALITY caseIgnoreIA5Match
	SUBSTR caseExactIA5SubstringsMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26)

attributetype ( 1.3.6.1.4.1.10098.1.1.4.12 NAME 'FWhost'
	DESC 'Firewall definitions'
	EQUALITY caseIgnoreIA5Match
	SUBSTR caseExactIA5SubstringsMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26)

attributetype ( 1.3.6.1.4.1.10098.1.1.4.14 NAME 'FWproto'
	DESC 'Firewall definitions'
	EQUALITY caseIgnoreIA5Match
	SUBSTR caseExactIA5SubstringsMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26)

attributetype ( 1.3.6.1.4.1.10098.1.1.4.15 NAME 'FWlist'
	DESC 'Firewall definitions'
	EQUALITY caseIgnoreIA5Match
	SUBSTR caseExactIA5SubstringsMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26)

attributetype ( 1.3.6.1.4.1.10098.1.1.4.16 NAME 'FWdisabled'
	DESC 'Firewall definitions'
	EQUALITY caseIgnoreIA5Match
	SUBSTR caseExactIA5SubstringsMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26)

attributetype ( 1.3.6.1.4.1.10098.1.1.4.17 NAME 'FWid'
	DESC 'Firewall definitions'
	EQUALITY caseIgnoreIA5Match
	SUBSTR caseExactIA5SubstringsMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26)

##
##	Objectclasses
##

# ObjectClasses for Firewall Setups
objectclass (1.3.6.1.4.1.10098.1.2.1.6 NAME 'FWRule'
	DESC 'Firewall rule definition' SUP top AUXILIARY
	MUST ( cn $ FWtype )
	MAY ( FWdevice $ FWaction $ FWtable $ FWsource $ FWdest $ FWservice $ FWprotocol $
		FWtable $ FWlog $ FWid )) 

objectclass (1.3.6.1.4.1.10098.1.2.1.7 NAME 'FWGroup'
	DESC 'Firewall group definition' SUP top AUXILIARY
	MUST ( cn )
	MAY ( FWnetwork $ FWhost $ FWservice $ FWproto $ FWid))

objectclass (1.3.6.1.4.1.10098.1.2.1.8 NAME 'FWRuleSet'
	DESC 'Firewall ruleset definition' SUP top AUXILIARY
	MUST ( cn )
	MAY ( FWlist $ FWdisabled $ FWid))