def rule(event):
    if all(
        [
            event.deep_get("dst_port", default="")
            in [
                8080,
                21,
                80,
                23,
                50000,
                1521,
                27017,
                3306,
                1433,
                11211,
                15672,
                5900,
                5901,
                5902,
                5903,
                5904,
            ],
            any(
                [
                    event.deep_get("action", default="") in ["forward", "accept", 2],
                    event.deep_get("blocked", default="") == "false",
                ]
            ),
        ]
    ):
        return True
    return False
