<form>
    <field>
        <id>rule.enabled</id>
        <label>Enabled</label>
        <type>checkbox</type>
        <help>Enable this fingerprint rule.</help>
    </field>
    <field>
        <id>rule.fingerprint</id>
        <label>SSL/Fingerprint</label>
        <type>text</type>
        <help>The SSL fingerprint, for example "B5:E1:B3:70:5E:7C:FF:EB:92:C4:29:E5:5B:AC:2F:AE:70:17:E9:9E".</help>
    </field>
    <field>
        <id>rule.geoip</id>
        <label>GeoIP/Country</label>
        <type>select_multiple</type>
        <style>tokenize</style>
        <help>Countries to alert or block using GeoIP.</help>
    </field>
    <field>
        <id>rule.geoip_direction</id>
        <label>GeoIP/Direction</label>
        <type>dropdown</type>
        <help>Connections coming from (src) or going to (dst) listed countries, default selects both.</help>
    </field>
    <field>
        <id>rule.action</id>
        <label>Action</label>
        <type>dropdown</type>
        <help>Set action to perform here, only used when in IPS mode.</help>
    </field>
    <field>
        <id>rule.description</id>
        <label>Description</label>
        <type>text</type>
    </field>
</form>