#
#############################################################################
#
# This file is used by psad to elevate/decrease the danger levels of ip
# addresses (or networks in CIDR notation) so that psad does not have to
# apply the normal signature logic.  This is useful if certain ip addresses
# or networks are known trouble makers and should automatically be assigned
# higher danger levels than would normally be assigned.  Also, psad can be
# made to ignore certain ip addresses or networks if a danger level of "0" is
# specified.  Optionally, danger levels for IPs/networks can be influenced
# based on protocol (tcp, udp, icmp).
#
#############################################################################
#
# $Id: auto_dl,v 1.1 2004/06/09 01:33:05 mbr Exp $
#

#  <ip address>  <danger level>  <optional protocol>;
#
# Examples:
#
#  10.111.21.23    5;          # Very bad ip.
#  127.0.0.1       0;          # Ignore this ip.
#  10.10.1.0/24    0;          # Ignore traffic from this entire class C.
#  192.168.10.4    3    tcp;   # Assign danger level if protocol is tcp.
