/usr/share/doc/audit-2.8.5/rules/ Current File: //usr/share/doc/audit-2.8.5/rules/71-networking.rules

## This is to check if the system is making or recieving connections
## externally
-a always,exit -F arch=b64 -S accept,connect -F key=external-access