;COMMENT: Log rejected TCP connections
;DESCRIPTION: Rejected TCP connections are logged in the file 'rejects.log'. Only connections rejected by Firewall components are logged - not connections rejected by the IP stack. Rejected connections are logged in both directions.


Log-Rejected-Firewall	
		Comment = "Log connections rejected by a Firewall rule",
		Rule-Action = Log,
		Log-Control = Enabled,
		Log-Mask = "date time direction resolved_source resolved_dest s_port d_port message packet_feature action_rule",
		Log-File = "firewall/logs/rejects.log",
		Log-Message = "12:Connection rejected",
		Log-Severity = Warning,
		Packet-Feature = Denied,
		Flags = "SYN -FIN -ACK"

Log-Rejected-Other
		Comment = "Log connections -not- rejected by a Firewall rule",
		Rule-Action = Log,
		Log-Control = Enabled,
		Log-Mask = "date time direction resolved_source resolved_dest s_port d_port message packet_feature",
		Log-File = "firewall/logs/rejects.log",
		Log-Message = "12:Connection rejected",
		Log-Severity = Warning,
		Packet-Feature = Dropped-Alternative,
		Flags = "SYN -FIN -ACK"
