
#-----------------------------------------------------------------------
# DESCRIPTION
#-----------------------------------------------------------------------
#
# Nessus is a network security monitoring tool (http://www.nessus.org)
# It consists of a server (nessusd) performing the actual scan and a
# client program to display the results.
# To enable a user to connect to the nessusd you could use this module.
# NOTE: To actually perform a security sweep with nessus, you'll need
# relaxed mode, or even better, open mode on the interface that will
# be performing the actual scan (this might not be the same as the
# interface you're trying to connect to with the client program).
#
# After installing the module, the user should execute rc.firewall with
# the --update-config parameter. The necessary options will be added to
# the configuration file.
#
#-----------------------------------------------------------------------
# MODULE CONFIGURATION
#-----------------------------------------------------------------------
#
#m# 123
#a# accept
#i# cluster
#n# nessus
#t# clients
#
#   |--------------------------------------------------------------------|
#d# nessus (Port 1241 TCP)
#d# Nessus is a network security monitoring tool (http://www.nessus.org)
#d# It consists of a server (nessusd) performing the actual scan and a
#d# client program to display the results.
#d# To enable a user to connect to the nessusd you could use this module.
#d# NOTE: To actually perform a security sweep with nessus, you'll need
#d# relaxed mode, or even better, open mode on the interface that will
#d# be performing the actual scan (this might not be the same as the
#d# interface you're trying to connect to with the client program).
#d# NOTE: Nessus < 1.0.6 uses port 3001 instead.
#   |--------------------------------------------------------------------|
#
#-----------------------------------------------------------------------
# START OF MODULE CODE
#-----------------------------------------------------------------------
#
#-----------------------------------------------------------------------

module_name="nessus"        # module name used in options
module_type="clients"       # the module type (clients, servers, etc.)
service_name="Nessus"       # displayed on-screen
service_port="1241"         # port number for this service

for host in `Option_Value accept $INTOPT $module_name $module_type`
do
	Accept_Hostports local tcp "$service_name" $host $service_port
done

unset module_name module_type service_name service_port
unset action action_log_msg action_log host

