Testing Regular Expressions

MPF is an awesome piece of technology that really starts showing its power when fed with a regular expression dictionaries. The dictionary below enables the administrator to monitor or control a number of image file types as they pass through the firewall.


!
! Cisco ASA 5500 Series
! Regular Expression Dictionary: Image File types
!
! Matt Dreyer
! July 23, 2007
!
regex _ADRG ".+\.[Aa][Dd][Rr][Gg]"
regex _ADRI ".+\.[Aa][Dd][Rr][Ii]"
regex _AGP ".+\.[Aa][Gg][Pp]"
regex _AI ".+\.[Aa][Ii]"
regex _AI3 ".+\.[Aa][Ii][33]"
regex _AI4 ".+\.[Aa][Ii][44]"
regex _AI5 ".+\.[Aa][Ii][55]"
regex _AI6 ".+\.[Aa][Ii][66]"
regex _AI7 ".+\.[Aa][Ii][77]"
regex _AI8 ".+\.[Aa][Ii][88]"
regex _ART ".+\.[Aa][Rr][Tt]"
regex _BMP ".+\.[Bb][Mm][Pp]"
regex _BW ".+\.[Bb][Ww]"
regex _CADRG ".+\.[Cc][Aa][Dd][Rr][Gg]"
regex _CDR ".+\.[Cc][Dd][Rr]"
regex _CGM ".+\.[Cc][Gg][Mm]"
regex _CIN ".+\.[Cc][Ii][Nn]"
regex _CPI ".+\.[Cc][Pp][Ii]"
regex _CPT ".+\.[Cc][Pp][Tt]"
regex _CRW ".+\.[Cc][Rr][Ww]"
regex _DCR ".+\.[Dd][Cc][Rr]"
regex _DIB ".+\.[Dd][Ii][Bb]"
regex _DPX ".+\.[Dd][Pp][Xx]"
regex _DXF ".+\.[Dd][Xx][Ff]"
regex _EMF ".+\.[Ee][Mm][Ff]"
regex _EPS ".+\.[Ee][Pp][Ss]"
regex _EXR ".+\.[Ee][Xx][Rr]"
regex _FH ".+\.[Ff][Hh]"
regex _FLA ".+\.[Ff][Ll][Aa]"
regex _FLC ".+\.[Ff][Ll][Cc]"
regex _FLI ".+\.[Ff][Ll][Ii]"
regex _FLM ".+\.[Ff][Ll][Mm]"
regex _FPX ".+\.[Ff][Pp][Xx]"
regex _GIF ".+\.[Gg][Ii][Ff]"
regex _ICB ".+\.[Ii][Cc][Bb]"
regex _IFF ".+\.[Ii][Ff][Ff]"
regex _IGS ".+\.[Ii][Gg][Ss]"
regex _ILBM ".+\.[Ii][Ll][Bb][Mm]"
regex _INT ".+\.[Ii][Nn][Tt]"
regex _INTA ".+\.[Ii][Nn][Tt][Aa]"
regex _JP2 ".+\.[Jj][Pp][22]"
regex _JPE ".+\.[Jj][Pp][Ee]"
regex _JPEG ".+\.[Jj][Pp][Ee][Gg]"
regex _JPG ".+\.[Jj][Pp][Gg]"
regex _JPG2 ".+\.[Jj][Pp][Gg][22]"
regex _MNG ".+\.[Mm][Nn][Gg]"
regex _MRW ".+\.[Mm][Rr][Ww]"
regex _MYD ".+\.[Mm][Yy][Dd]"
regex _MYV ".+\.[Mm][Yy][Vv]"
regex _NEF ".+\.[Nn][Ee][Ff]"
regex _ODG ".+\.[Oo][Dd][Gg]"
regex _ORF ".+\.[Oo][Rr][Ff]"
regex _PBM ".+\.[Pp][Bb][Mm]"
regex _PCD ".+\.[Pp][Cc][Dd]"
regex _PCF ".+\.[Pp][Cc][Ff]"
regex _PCT ".+\.[Pp][Cc][Tt]"
regex _PCX ".+\.[Pp][Cc][Xx]"
regex _PDF ".+\.[Pp][Dd][Ff]"
regex _PDP ".+\.[Pp][Dd][Pp]"
regex _PGM ".+\.[Pp][Gg][Mm]"
regex _PIC ".+\.[Pp][Ii][Cc]"
regex _PICT ".+\.[Pp][Ii][Cc][Tt]"
regex _PNG ".+\.[Pp][Nn][Gg]"
regex _PPD ".+\.[Pp][Pp][Dd]"
regex _PPM ".+\.[Pp][Pp][Mm]"
regex _PS ".+\.[Pp][Ss]"
regex _PSD ".+\.[Pp][Ss][Dd]"
regex _PSP ".+\.[Pp][Ss][Pp]"
regex _PX ".+\.[Pp][Xx]"
regex _PXR ".+\.[Pp][Xx][Rr]"
regex _RAF ".+\.[Rr][Aa][Ff]"
regex _RAW ".+\.[Rr][Aa][Ww]"
regex _RGB ".+\.[Rr][Gg][Bb]"
regex _RGBA ".+\.[Rr][Gg][Bb][Aa]"
regex _RLE ".+\.[Rr][Ll][Ee]"
regex _SCT ".+\.[Ss][Cc][Tt]"
regex _SGI ".+\.[Ss][Gg][Ii]"
regex _SVG ".+\.[Ss][Vv][Gg]"
regex _SVGZ ".+\.[Ss][Vv][Gg][Zz]"
regex _SWF ".+\.[Ss][Ww][Ff]"
regex _SXD ".+\.[Ss][Xx][Dd]"
regex _TGA ".+\.[Tt][Gg][Aa]"
regex _TIF ".+\.[Tt][Ii][Ff]"
regex _TIFF ".+\.[Tt][Ii][Ff][Ff]"
regex _UFO ".+\.[Uu][Ff][Oo]"
regex _VDA ".+\.[Vv][Dd][Aa]"
regex _VST ".+\.[Vv][Ss][Tt]"
regex _WBM ".+\.[Ww][Bb][Mm]"
regex _WBMP ".+\.[Ww][Bb][Mm][Pp]"
regex _WMF ".+\.[Ww][Mm][Ff]"
regex _XAML ".+\.[Xx][Aa][Mm][Ll]"
regex _XAR ".+\.[Xx][Aa][Rr]"
regex _XBM ".+\.[Xx][Bb][Mm]"
regex _XCF ".+\.[Xx][Cc][Ff]"
regex _XPM ".+\.[Xx][Pp][Mm]"
!
class-map type regex match-any ImageFileTypes
match regex _ADRG
match regex _ADRI
match regex _AGP
match regex _AI
match regex _AI3
match regex _AI4
match regex _AI5
match regex _AI6
match regex _AI7
match regex _AI8
match regex _ART
match regex _BMP
match regex _BW
match regex _CADRG
match regex _CDR
match regex _CGM
match regex _CIN
match regex _CPI
match regex _CPT
match regex _CRW
match regex _DCR
match regex _DIB
match regex _DPX
match regex _DXF
match regex _EMF
match regex _EPS
match regex _EXR
match regex _FH
match regex _FLA
match regex _FLC
match regex _FLI
match regex _FLM
match regex _FPX
match regex _GIF
match regex _ICB
match regex _IFF
match regex _IGS
match regex _ILBM
match regex _INT
match regex _INTA
match regex _JP2
match regex _JPE
match regex _JPEG
match regex _JPG
match regex _JPG2
match regex _MNG
match regex _MRW
match regex _MYD
match regex _MYV
match regex _NEF
match regex _ODG
match regex _ORF
match regex _PBM
match regex _PCD
match regex _PCF
match regex _PCT
match regex _PCX
match regex _PDF
match regex _PDP
match regex _PGM
match regex _PIC
match regex _PICT
match regex _PNG
match regex _PPD
match regex _PPM
match regex _PS
match regex _PSD
match regex _PSP
match regex _PX
match regex _PXR
match regex _RAF
match regex _RAW
match regex _RGB
match regex _RGBA
match regex _RLE
match regex _SCT
match regex _SGI
match regex _SVG
match regex _SVGZ
match regex _SWF
match regex _SXD
match regex _TGA
match regex _TIF
match regex _TIFF
match regex _UFO
match regex _VDA
match regex _VST
match regex _WBM
match regex _WBMP
match regex _WMF
match regex _XAML
match regex _XAR
match regex _XBM
match regex _XCF
match regex _XPM