<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;
color:black;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman",serif;
color:black;}
pre
{mso-style-priority:99;
mso-style-link:"HTML - vooraf opgemaakt Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";
color:black;}
span.MsoSubtleEmphasis
{mso-style-name:"Subtiele benadrukking\,command listing";
mso-style-priority:19;
font-family:Consolas;
color:windowtext;
border:solid windowtext 1.0pt;
padding:0cm;
font-weight:normal;
font-style:normal;}
p.Stijl1, li.Stijl1, div.Stijl1
{mso-style-name:Stijl1;
mso-style-link:"Stijl1 Char";
margin:0cm;
margin-bottom:.0001pt;
border:none;
padding:0cm;
font-size:10.0pt;
font-family:Consolas;
color:windowtext;}
span.Stijl1Char
{mso-style-name:"Stijl1 Char";
mso-style-link:Stijl1;
font-family:Consolas;}
span.HTML-voorafopgemaaktChar
{mso-style-name:"HTML - vooraf opgemaakt Char";
mso-style-priority:99;
mso-style-link:"HTML - vooraf opgemaakt";
font-family:Consolas;
color:black;}
span.E-mailStijl23
{mso-style-type:personal-reply;
font-family:"Arial",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body bgcolor="white" lang="NL-BE" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"Arial",sans-serif;color:windowtext;mso-fareast-language:EN-US">hm,<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"Arial",sans-serif;color:windowtext;mso-fareast-language:EN-US">i actually like to have those versions in the output. if something breaks my first reaction tends to be: "what changed?",
and rancid is usually the first place i check.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"Arial",sans-serif;color:windowtext;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"Arial",sans-serif;color:windowtext;mso-fareast-language:EN-US">would it be an option to control this with FILTER_OSC , even though its not quite it's intended application?<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"Arial",sans-serif;color:windowtext;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"Arial",sans-serif;color:windowtext;mso-fareast-language:EN-US">thx<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"Arial",sans-serif;color:windowtext;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"Arial",sans-serif;color:windowtext;mso-fareast-language:EN-US">// nick<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"Arial",sans-serif;color:windowtext;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"Arial",sans-serif;color:windowtext;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="NL" style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:windowtext">From:</span></b><span lang="NL" style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:windowtext"> Rancid-discuss [mailto:rancid-discuss-bounces@shrubbery.net]
<b>On Behalf Of </b>Doug Hughes<br>
<b>Sent:</b> Tuesday, July 31, 2018 23:18<br>
<b>To:</b> rancid-discuss@shrubbery.net<br>
<b>Subject:</b> Re: [rancid] Fortigate additional tweaks and device filters<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">On 7/31/2018 5:14 PM, heasley wrote:<o:p></o:p></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<pre>Fri, Jul 27, 2018 at 08:02:28AM -0500, Chris Wopat:<o:p></o:p></pre>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<pre>Hi Heasley and folks,<o:p></o:p></pre>
<pre><o:p> </o:p></pre>
<pre>Sept 2017 i sent a note in with some proposed tweaks to a Fortigate. to<o:p></o:p></pre>
<pre>filter out some additional chattiness, see:<o:p></o:p></pre>
<pre><o:p> </o:p></pre>
<pre><a href="http://www.shrubbery.net/pipermail/rancid-discuss/2017-September/009871.html">http://www.shrubbery.net/pipermail/rancid-discuss/2017-September/009871.html</a><o:p></o:p></pre>
<pre><a href="http://www.shrubbery.net/pipermail/rancid-discuss/2017-June/009643.html">http://www.shrubbery.net/pipermail/rancid-discuss/2017-June/009643.html</a><o:p></o:p></pre>
<pre><o:p> </o:p></pre>
<pre>A few people chimed in seeming to be OK with the propsed changes, which are<o:p></o:p></pre>
<pre>to filter these things:<o:p></o:p></pre>
<pre><o:p> </o:p></pre>
<pre>next if (/^\s*IPS-ETDB: .*/);<o:p></o:p></pre>
<pre>next if (/^\s*APP-DB: .*/);<o:p></o:p></pre>
<pre>next if (/^\s*IPS Malicious URL Database: .*/);<o:p></o:p></pre>
<pre>next if (/^\s*Botnet DB: .*/);<o:p></o:p></pre>
<pre><o:p> </o:p></pre>
<pre>Mentioning this as 3.8 came out and i didn't notice any of these included.<o:p></o:p></pre>
<pre><o:p> </o:p></pre>
<pre>We have an additional fortigate tweak we make every time we update too,<o:p></o:p></pre>
<pre>which to change from 'show full-configuration' to just 'show' in<o:p></o:p></pre>
<pre>@commandtable. 'full-configuration' shows default config, just like the<o:p></o:p></pre>
<pre>cisco 'full' command. It's really not necessary IMO.<o:p></o:p></pre>
</blockquote>
<pre><o:p> </o:p></pre>
<pre>This is from:<o:p></o:p></pre>
<pre>r2258 | heas | 2010-10-11 20:49:05 +0000 (Mon, 11 Oct 2010) | 3 lines<o:p></o:p></pre>
<pre><o:p> </o:p></pre>
<pre>fnrancid: update recent fortinet software - Diego Ercolani<o:p></o:p></pre>
<pre>Cleaned-up a little by me.<o:p></o:p></pre>
<pre><o:p> </o:p></pre>
<pre>afaict, the justification for full-configuration was so that VDOMs would<o:p></o:p></pre>
<pre>be included in the output. perhaps this behavior has changed since this<o:p></o:p></pre>
<pre>change?? I have none of these devices.<o:p></o:p></pre>
</blockquote>
<p class="MsoNormal" style="margin-bottom:12.0pt"><br>
I think you are right.. I have a vague recollection of this as well.<o:p></o:p></p>
<div>
<p class="MsoNormal">-- <o:p></o:p></p>
<table class="MsoNormalTable" border="0" cellpadding="0">
<tbody>
<tr>
<td width="90%" style="width:90.0%;padding:.75pt .75pt .75pt 15.0pt">
<p class="MsoNormal">Doug Hughes<br>
Keystone NAP<br>
Fairless Hills, PA<br>
1.844.KEYBLOCK (439.2562)<o:p></o:p></p>
</td>
<td style="padding:.75pt 15.0pt .75pt .75pt;align: right">
<p class="MsoNormal"><img border="0" id="_x0000_i1025" src="http://www.keystonenap.com/wp-content/themes/keystoneNAP/images/keystone-nap-logo.png"><o:p></o:p></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><span style="color:windowtext"><o:p> </o:p></span></p>
</div>
</div>
<br>
<hr color="#00ADEE" size="1" noshade="">
<br>
<font face="Arial" size="1" color="#00ADEE"><i>Volg Aquafin op <a href="https://www.facebook.com/AquafinNV" style="color:#00ADEE">
Facebook</a> | <a href="https://twitter.com/aquafinnv" style="color:#00ADEE">Twitter</a> |
<a href="http://www.youtube.com/channel/UCk_4P5BJ-MtEEDCkCsR_KqQ?feature=mhee" style="color:#00ADEE">
YouTube</a> | <a href="http://www.linkedin.com/company/aquafin/products" style="color:#00ADEE">
LinkedIN</a> </i><br>
<br>
<font color="black">In het kader van de uitoefening van onze taken verzamelen we bij Aquafin persoonsgegevens. Hoe we omgaan met deze gegevens en wat de rechten van de betrokkenen zijn, kan je nalezen in onze
<a href="https://www.aquafin.be/nl-be/privacy-policy" style="color:#00ADEE">privacy policy</a>.
<br>
<br>
<a href="https://www.aquafin.be/" target="_blank"><img src="https://www.aquafin.be/sites/aquafin/files/styles/paragraph_with_caption/public/2018-06/email_banner_web.jpg"></a>
<br>
<font face="Webdings" color="#00CC00" size="2">P</font> Denk aan het milieu. Druk deze mail niet onnodig af.
</font></font>
</body>
</html>