Skip to content

Commit 4c8b93b

Browse files
Merge pull request #1591 from sim-random/wiki
Add missing documentation for `operator.sensitive`
2 parents 438552d + c66cac2 commit 4c8b93b

1 file changed

Lines changed: 2 additions & 1 deletion

File tree

wiki/Rules.md

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -34,7 +34,7 @@ Rules are stored as JSON files inside the `-rule-path` directory (by default `/e
3434
| update | UTC date and time of the last update. |
3535
| name | The name of the rule. |
3636
| enabled | Enable or disable the rule. |
37-
| precedence | true or false. Sets if a rule take precedence over the rest (>= v1.2.0). If a connection matches this rule, no other rules will be evaluated.|
37+
| precedence | `true` or `false`. Sets if a rule take precedence over the rest (>= v1.2.0). If a connection matches this rule, no other rules will be evaluated.|
3838
| action | Can be `deny`, `reject` or `allow`. `reject` kills the socket, terminating the connection immediately. `deny` drops/ignores the packet. |
3939
| duration | The duration of the rule in [Duration format](https://pkg.go.dev/time#ParseDuration). `always` is always used when the rule is written to disk. The rest of the options are temporary, until they reach the deadline: `12h`, `5h`, `1h`, `30s`, or `once` to only run the rule one time. |
4040
| operator.type | `simple`, `regexp`, `network`, `lists`, `list`, `range`.|
@@ -45,6 +45,7 @@ Rules are stored as JSON files inside the `-rule-path` directory (by default `/e
4545
|| `range` (v1.9.0) will check if an Operand (`dest.port` or `source.port`) is within the given range.|
4646
|| `list`, a combination of all of the previous types.|
4747
| operator.data | The data of the rule against which an outbound connection will be compared: an IP, a destination port, a command line, etc. |
48+
| operator.sensitive | If `true`, the property-data comparison is case sensitive. Defaults to `false`. |
4849
| operator.operand | Property of the connection against which the rule will be compared: |
4950
| | `true` - will always match |
5051
| | `process.path` - the absolute path of the executable |

0 commit comments

Comments
 (0)