<form> <field> <id>rule.enabled</id> <label>Enabled</label> <type>checkbox</type> <help>Enable this fingerprint rule.</help> </field> <field> <id>rule.fingerprint</id> <label>SSL/Fingerprint</label> <type>text</type> <help>The SSL fingerprint, for example "B5:E1:B3:70:5E:7C:FF:EB:92:C4:29:E5:5B:AC:2F:AE:70:17:E9:9E".</help> </field> <field> <id>rule.geoip</id> <label>GeoIP/Country</label> <type>select_multiple</type> <style>tokenize</style> <help>Countries to alert or block using GeoIP.</help> </field> <field> <id>rule.geoip_direction</id> <label>GeoIP/Direction</label> <type>dropdown</type> <help>Connections coming from (src) or going to (dst) listed countries, default selects both.</help> </field> <field> <id>rule.action</id> <label>Action</label> <type>dropdown</type> <help>Set action to perform here, only used when in IPS mode.</help> </field> <field> <id>rule.description</id> <label>Description</label> <type>text</type> </field> </form>