recommended-action drop;
severity critical;
time-binding {
    count 1;
}
attack-type {
    signature {
        protocol-binding {
            tcp {
                minimum-port 80;
            }
        }
        context http-header-host;
        pattern .*sex.*;
        direction client-to-server;
    }
}

root@srx-cluster-node0# show security idp idp-policy umk-katowice rulebase-ips
rule 1 {
    match {
        from-zone Piap;
        to-zone Untrust;
        application junos-http;
        attacks {
            custom-attacks [ erotyka-sex erotyka-jebanko erotyka-ruchanie erotyka-jebanie erotyka-geje erotyka-lezb erotyka-cipk erotyka-dupy erotyka-seks erotyka-burdel erotyka-porno erotyka-pupa erotyka-erotyka erotyka-cizie ];
        }
    }
    then {
        action {
            drop-connection;
        }
    }
}