> For the complete documentation index, see [llms.txt](https://arraynetworks.gitbook.io/array-xml/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://arraynetworks.gitbook.io/array-xml/docs/blacklist.md). # Block/Detect black list ### Config XML send syslog to log server 192.168.1.12:514 if block/detect happened

<configSet reboot="no">
    <log>
        <syslog>
            <enable>True</enable>
            <port>M0</port>
            <target>
                <enable>True</enable>
                <dip>192.168.1.12</dip>
                <dport>514</dport>
                <interfaces>P6,P7</interfaces>
                <filter></filter>
                <type>matched</type>
                <subtype>
                    <sip>True</sip>
                    <dip>True</dip>
                    <sport>True</sport>
                    <dport>True</dport>
                    <protocol>True</protocol>
                    <find_id>True</find_id>
                    <find_content>True</find_content>
                </subtype>
            </target>
        </syslog>
    </log>
</configSet>

### ARRAY NTB XML (black list sample) ```xml ``` ### ARRAY NTB XML(block sample) ```xml P6 F10000,F10001,F10002,F10003,F10004 0 P7 P7 F10000,F10001,F10002,F10003,F10004 0 P6 ``` ### ARRAY NTB XML(detect sample) ```xml P6 P7 P7 P6 P6,P7 F10000,F10001,F10002,F10003,F10004 0 ```