mudmaker/classes.html at main · iot-onboarding/mudmaker · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
<!DOCTYPE html><!--	Prism by TEMPLATED	templated.co @templatedco	Released for free under the Creative Commons Attribution 3.0 license (templated.co/license)--><html>  <head>    <meta http-equiv="content-type" content="text/html; charset=utf-8">    <title>MUD Access Lists and Classes</title>    <meta name="viewport" content="width=device-width, initial-scale=1">    <!--[if lte IE 8]><script src="assets/js/ie/html5shiv.js"></script><![endif]-->    <link rel="stylesheet" href="assets/css/main.css">    <!--[if lte IE 9]><link rel="stylesheet" href="assets/css/ie9.css" /><![endif]-->  </head>  <body>    <!-- Banner -->    <section id="banner">      <div class="inner split">        <section>          <h2>Building out MUD files: Access Lists and Classes</h2>        </section>        <section>          <p>A tool to build your own MUD files</p>          <ul class="actions">            <li><a href="mudmaker.html" class="button special">Go Right to MUD                Maker</a></li>          </ul>          <ul class="actions">            <li><a href="index.html" class="button special">Back to the Intro</a></li>          </ul>        </section>      </div>    </section>    <section id="two" class="wrapper style2 alt">      <div class="inner">        <div class="content">          <h3> Which classes are appropriate for my device? </h3>          <p>MUD files consist of one or more access control entries.&nbsp; You            can have as many as you want.&nbsp; Each entry contains one of the            classes below.</p>          <table style="width: auto;" border="1">            <tbody>              <tr>                <td><strong>Domain names</strong></td>                <td>Use domain names when your devices want to access                  cloud-based services.</td>              </tr>              <tr>                <td><strong>Controller</strong></td>                <td>You can name a URI with "controller", and the local                  deployment will bind that to an IP address.&nbsp; The name                  need not exist in DNS, but should be for a domain you                  own.&nbsp; For example, if you are a printer manufacturer                  "example.com", you might name a print server class                  "http://example.com/printserver".</td>              </tr>              <tr>                <td><strong>my-controller</strong></td>                <td>my-controller is just like controller, except you don't name                  a class.&nbsp; This is fine to use when you have a single or                  small number of types of devices all talking to the same                  controller.</td>              </tr>              <tr>                <td><strong>local-networks</strong></td>                <td>Use local-networks when you want to permit a certain port                  access to local networks.</td>              </tr>              <tr>                <td><strong>same-manufacturer</strong></td>                <td>Use same-manufacturer when you&nbsp; want your device to                  talk to devices that have the same domain name in their MUD                  URL (e.g., devices you manufacture).</td>              </tr>              <tr>                <td><strong>manufacturer</strong></td>                <td>Use manufacturer when you want your devices to be able to                  talk to devices that have MUD URLs with a domain name of some                  other manufacturer. (e.g, you didn't build it).</td>              </tr>            </tbody>          </table>          <h3>Example</h3>          <p>A printer might need access to several internal and external            services, as follows:</p>          <table style="width: 100%" border="1">            <tbody>              <tr>                <td>Outbound font server access<br>                </td>                <td>Internet domain name<br>                </td>                <td>font.example.com<br>                </td>              </tr>              <tr>                <td>Inbound or outbound access to a print server<br>                </td>                <td>controller<br>                </td>                <td>http://example.com/controller<br>                  (note this is a URI, not an accessible URL)<br>                </td>              </tr>              <tr>                <td>Local service of printing on TCP &amp; UDP ports 515, and                  ports 80 and 443<br>                </td>                <td>local-networks<br>                </td>                <td>Just indicate local ports 515, 80, and 443 if those are                  incoming services.<br>                </td>              </tr>            </tbody>          </table>          <p><br>          </p>          <h3>Got All that? </h3>          <ul class="actions">            <li><a href="mudmaker.html" class="button alt">Build a mud file</a>              <a href="index.html" class="button alt">Back</a></li>          </ul>        </div>      </div>    </section>    <!-- Footer -->    <footer id="footer">      <div class="copyright"> © Untitled. All rights reserved. Images: <a href="http://unsplash.com">Unsplash</a>.        Design: <a href="http://templated.co">TEMPLATED</a>. </div>    </footer>    <!-- Scripts -->    <script src="assets/js/jquery.min.js"></script>    <script src="assets/js/skel.min.js"></script>    <script src="assets/js/util.js"></script>    <!--[if lte IE 8]><script src="assets/js/ie/respond.min.js"></script><![endif]-->    <script src="assets/js/main.js"></script>  </body></html>
<!--
 Copyright 2017-2025 Eliot Lear

 Licensed under the Apache License, Version 2.0 (the "License");
 you may not use this file except in compliance with the License.
 You may obtain a copy of the License at

     http://www.apache.org/licenses/LICENSE-2.0

 Unless required by applicable law or agreed to in writing, software
 distributed under the License is distributed on an "AS IS" BASIS,
 WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 See the License for the specific language governing permissions and
 limitations under the License.

 SPDX-License-Identifier: Apache-2.0
-->