Konfiguration der Firewall auf dem Vermittlungsrechner

{ "frames": { "00000000-0000-0000-0000-000000000301": [ { "time": 506, "source": "02:00:00:00:03:11", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, "senderIp": "10.0.0.2", "targetIp": "10.0.0.1" }, { "time": 741, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "arp": 2, "senderIp": "10.0.0.1", "targetIp": "10.0.0.2" }, { "time": 745, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "icmp": 8, "icmpCode": 0, "sourceIp": "10.0.0.2", "destinationIp": "20.0.0.2", "sequence": 1 }, { "time": 3513, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 54970, "destinationPort": 80, "payload": null, "tcpFlags": "S", "sequence": 2000000, "acknowledgement": 0 }, { "time": 3741, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 54970, "payload": null, "tcpFlags": "SA", "sequence": 1000000, "acknowledgement": 2000001 }, { "time": 3741, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 54970, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 2000001, "acknowledgement": 1000001 }, { "time": 3809, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 54970, "destinationPort": 80, "payload": "POST /konfig HTTP/1.1\nHost: 10.0.0.1\n\nfirewallActivate=1&onlySYN=1&btnSave=speichern&defaultPolicy=accept&srcIP=&srcMask=&destIP=&destMask=&protocol=*&port=&action=drop", "tcpFlags": "P", "sequence": 2000001, "acknowledgement": 0 }, { "time": 4033, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 54970, "payload": null, "tcpFlags": "A", "sequence": 1000001, "acknowledgement": 2000169 }, { "time": 4088, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 54970, "payload": "HTTP/1.1 200 OK\nContent-type: text/html\n\n\n \n Konfiguration der Firewall auf dem Vermittlungsrechner\n \n\n \n\n

\n\u0009

Firewall-Konfiguration

\n \n \n\u0009 \n \n \n

\n \n \n \n \n \n \n \n \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 ", "tcpFlags": "", "sequence": 1000001, "acknowledgement": 0 }, { "time": 4089, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 54970, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 2000169, "acknowledgement": 1001461 }, { "time": 4315, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 54970, "payload": " \n\u0009 \n

\n\u0009\u0009\n	Firewall aktivieren
\n\u0009 Erst durch Aktivieren der Firewall werden die Firewall-Regeln angewendet. \n\u0009\u0009Bei deaktivierter Firewall findet keine Filterung statt.\n
\n\u0009\u0009\u0009 \n\u0009	ICMP-Pakete filtern
\n\u0009 Alle ICMP Pakete, z.B. Ping-Anfragen, werden von der Firewall verworfen.\n\u0009
\n\u0009\u0009\u0009\n\u0009	\n\u0009 nur SYN-Pakete verwerfen\n\u0009
\n\u0009 Neue Verbindungsanfragen zu gesperrten Ports werden verworfen.\n\u0009\u0009Der Rückkanal für erlaubte Verbindungsanfragen wird akzeptiert.\n\u0009

\n\n

\n\n \n \n \n \n \n \n \n \n \n \n \n\u0009\n\u0009 \n\u0009\n \n \n \n

Firewall-Regeln:

\n\u0009 Die Regeln werden von oben nach unten geprüft.
\n\u0009 Sobald eine Regel zutrifft, wird die angegebene Aktion ausgeführt.\n

\n\u0009 Falls keine Regel zutrifft, wird folgende Standard-Aktion ausgeführt:
\n\u0009 \n\u0009 \n\u0009

\n\u0009 \n \n \n\u0009\u0009\n \n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n \n \n\n\n\n

lfd. Nr.	Quell-IP	Quell-Subnetzmaske	Ziel-IP	Ziel-Subnetzmaske	Protokoll	Port	Aktion
1	10.0.0.0	255.255.255.0			TCP	80	akzeptieren

\n \n\u0009

\n\u0009 Aktion für ausgewählte Regel:\n\u0009

\n \n \n \n

\n\n

\n\n\n \n \n \n \n \n \n \n \n\u0009\n\u0009\n \n \n \n \n \n \n \n \n \n", "tcpFlags": "", "sequence": 1002921, "acknowledgement": 0 }, { "time": 4539, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 54970, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 2000169, "acknowledgement": 1004381 }, { "time": 4762, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 54970, "payload": " \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n

\n Neue Regel erstellen \n\u0009 Alle Felder sind optional und werden -- falls leer gelassen -- für die Filterung nicht verwendet.\n
Quell-IP:
Quell-Subnetzmaske:
Ziel-IP:
Ziel-Subnetzmaske:
Protokoll:	\n\u0009 \n\u0009
Port:
Aktion:	\n\u0009 \n\u0009
\n \n

\n \n\n", "tcpFlags": "P", "sequence": 1004381, "acknowledgement": 0 }, { "time": 4762, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 54970, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 2000169, "acknowledgement": 1005330 }, { "time": 4818, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 54970, "destinationPort": 80, "payload": null, "tcpFlags": "F", "sequence": 2000169, "acknowledgement": 0 }, { "time": 5040, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 54970, "payload": null, "tcpFlags": "A", "sequence": 1005330, "acknowledgement": 2000170 }, { "time": 5096, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 54970, "payload": null, "tcpFlags": "F", "sequence": 1005330, "acknowledgement": 0 }, { "time": 5096, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 54970, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 2000170, "acknowledgement": 1005331 }, { "time": 7001, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "icmp": 8, "icmpCode": 0, "sourceIp": "10.0.0.2", "destinationIp": "20.0.0.2", "sequence": 1 }, { "time": 7446, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "icmp": 0, "icmpCode": 0, "sourceIp": "20.0.0.2", "destinationIp": "10.0.0.2", "sequence": 1 } ], "00000000-0000-0000-0000-000000000302": [ { "time": 628, "source": "02:00:00:00:03:11", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, "senderIp": "10.0.0.2", "targetIp": "10.0.0.1" }, { "time": 630, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "arp": 2, "senderIp": "10.0.0.1", "targetIp": "10.0.0.2" }, { "time": 859, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "icmp": 8, "icmpCode": 0, "sourceIp": "10.0.0.2", "destinationIp": "20.0.0.2", "sequence": 1 }, { "time": 3626, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 54970, "destinationPort": 80, "payload": null, "tcpFlags": "S", "sequence": 2000000, "acknowledgement": 0 }, { "time": 3629, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 54970, "payload": null, "tcpFlags": "SA", "sequence": 1000000, "acknowledgement": 2000001 }, { "time": 3853, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 54970, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 2000001, "acknowledgement": 1000001 }, { "time": 3921, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 54970, "destinationPort": 80, "payload": "POST /konfig HTTP/1.1\nHost: 10.0.0.1\n\nfirewallActivate=1&onlySYN=1&btnSave=speichern&defaultPolicy=accept&srcIP=&srcMask=&destIP=&destMask=&protocol=*&port=&action=drop", "tcpFlags": "P", "sequence": 2000001, "acknowledgement": 0 }, { "time": 3921, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 54970, "payload": null, "tcpFlags": "A", "sequence": 1000001, "acknowledgement": 2000169 }, { "time": 3977, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 54970, "payload": "HTTP/1.1 200 OK\nContent-type: text/html\n\n\n \n Konfiguration der Firewall auf dem Vermittlungsrechner\n \n\n \n\n

\n\u0009

Firewall-Konfiguration

\n \n \n\u0009 \n \n \n

\n \n \n \n \n \n \n \n \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 ", "tcpFlags": "", "sequence": 1000001, "acknowledgement": 0 }, { "time": 4200, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 54970, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 2000169, "acknowledgement": 1001461 }, { "time": 4200, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 54970, "payload": " \n\u0009 \n

\n\u0009\u0009\n	Firewall aktivieren
\n\u0009 Erst durch Aktivieren der Firewall werden die Firewall-Regeln angewendet. \n\u0009\u0009Bei deaktivierter Firewall findet keine Filterung statt.\n
\n\u0009\u0009\u0009 \n\u0009	ICMP-Pakete filtern
\n\u0009 Alle ICMP Pakete, z.B. Ping-Anfragen, werden von der Firewall verworfen.\n\u0009
\n\u0009\u0009\u0009\n\u0009	\n\u0009 nur SYN-Pakete verwerfen\n\u0009
\n\u0009 Neue Verbindungsanfragen zu gesperrten Ports werden verworfen.\n\u0009\u0009Der Rückkanal für erlaubte Verbindungsanfragen wird akzeptiert.\n\u0009

\n\n

\n\n \n \n \n \n \n \n \n \n \n \n \n\u0009\n\u0009 \n\u0009\n \n \n \n

Firewall-Regeln:

\n\u0009 Die Regeln werden von oben nach unten geprüft.
\n\u0009 Sobald eine Regel zutrifft, wird die angegebene Aktion ausgeführt.\n

\n\u0009 Falls keine Regel zutrifft, wird folgende Standard-Aktion ausgeführt:
\n\u0009 \n\u0009 \n\u0009

\n\u0009 \n \n \n\u0009\u0009\n \n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n \n \n\n\n\n

lfd. Nr.	Quell-IP	Quell-Subnetzmaske	Ziel-IP	Ziel-Subnetzmaske	Protokoll	Port	Aktion
1	10.0.0.0	255.255.255.0			TCP	80	akzeptieren

\n \n\u0009

\n\u0009 Aktion für ausgewählte Regel:\n\u0009

\n \n \n \n

\n\n

\n\n\n \n \n \n \n \n \n \n \n\u0009\n\u0009\n \n \n \n \n \n \n \n \n \n", "tcpFlags": "", "sequence": 1002921, "acknowledgement": 0 }, { "time": 4650, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 54970, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 2000169, "acknowledgement": 1004381 }, { "time": 4650, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 54970, "payload": " \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n

\n Neue Regel erstellen \n\u0009 Alle Felder sind optional und werden -- falls leer gelassen -- für die Filterung nicht verwendet.\n
Quell-IP:
Quell-Subnetzmaske:
Ziel-IP:
Ziel-Subnetzmaske:
Protokoll:	\n\u0009 \n\u0009
Port:
Aktion:	\n\u0009 \n\u0009
\n \n

\n \n\n", "tcpFlags": "P", "sequence": 1004381, "acknowledgement": 0 }, { "time": 4873, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 54970, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 2000169, "acknowledgement": 1005330 }, { "time": 4929, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 54970, "destinationPort": 80, "payload": null, "tcpFlags": "F", "sequence": 2000169, "acknowledgement": 0 }, { "time": 4929, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 54970, "payload": null, "tcpFlags": "A", "sequence": 1005330, "acknowledgement": 2000170 }, { "time": 4985, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 54970, "payload": null, "tcpFlags": "F", "sequence": 1005330, "acknowledgement": 0 }, { "time": 5208, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 54970, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 2000170, "acknowledgement": 1005331 }, { "time": 7112, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "icmp": 8, "icmpCode": 0, "sourceIp": "10.0.0.2", "destinationIp": "20.0.0.2", "sequence": 1 }, { "time": 7335, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "icmp": 0, "icmpCode": 0, "sourceIp": "20.0.0.2", "destinationIp": "10.0.0.2", "sequence": 1 } ], "00000000-0000-0000-0000-000000000302#1": [ { "time": 7112, "source": "02:00:00:00:03:22", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, "senderIp": "20.0.0.1", "targetIp": "20.0.0.2" }, { "time": 7223, "source": "02:00:00:00:03:13", "destination": "02:00:00:00:03:22", "arp": 2, "senderIp": "20.0.0.2", "targetIp": "20.0.0.1" }, { "time": 7224, "source": "02:00:00:00:03:22", "destination": "02:00:00:00:03:13", "icmp": 8, "icmpCode": 0, "sourceIp": "10.0.0.2", "destinationIp": "20.0.0.2", "sequence": 1 }, { "time": 7335, "source": "02:00:00:00:03:13", "destination": "02:00:00:00:03:22", "icmp": 0, "icmpCode": 0, "sourceIp": "20.0.0.2", "destinationIp": "10.0.0.2", "sequence": 1 } ], "00000000-0000-0000-0000-000000000303": [ { "time": 7168, "source": "02:00:00:00:03:22", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, "senderIp": "20.0.0.1", "targetIp": "20.0.0.2" }, { "time": 7168, "source": "02:00:00:00:03:13", "destination": "02:00:00:00:03:22", "arp": 2, "senderIp": "20.0.0.2", "targetIp": "20.0.0.1" }, { "time": 7279, "source": "02:00:00:00:03:22", "destination": "02:00:00:00:03:13", "icmp": 8, "icmpCode": 0, "sourceIp": "10.0.0.2", "destinationIp": "20.0.0.2", "sequence": 1 }, { "time": 7279, "source": "02:00:00:00:03:13", "destination": "02:00:00:00:03:22", "icmp": 0, "icmpCode": 0, "sourceIp": "20.0.0.2", "destinationIp": "10.0.0.2", "sequence": 1 } ] }, "rows": { "00000000-0000-0000-0000-000000000301": [ [ "1", "02:00:00:00:03:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "1", "10.0.0.2", "10.0.0.1", "ARP", "Vermittlung", "Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]" ], [ "2", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x806" ], [ "2", "10.0.0.1", "10.0.0.2", "ARP", "Vermittlung", "MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]" ], [ "3", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "3", "10.0.0.2", "20.0.0.2", "ICMP", "Vermittlung", "ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1" ], [ "4", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "4", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "4", "10.0.0.2:54970", "10.0.0.1:80", "TCP", "Transport", "SYN, SEQ: 2.000.000" ], [ "5", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "5", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "5", "10.0.0.1:80", "10.0.0.2:54970", "TCP", "Transport", "SYN, SEQ: 1.000.000, ACK: 2.000.001" ], [ "6", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "6", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "6", "10.0.0.2:54970", "10.0.0.1:80", "TCP", "Transport", "SEQ: 2.000.001, ACK: 1.000.001" ], [ "7", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "7", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "7", "10.0.0.2:54970", "10.0.0.1:80", "TCP", "Transport", "SEQ: 2.000.001" ], [ "7", "10.0.0.2:54970", "10.0.0.1:80", "HTTP", "Anwendung", "POST /konfig HTTP/1.1\nHost: 10.0.0.1\n\nfirewallActivate=1&onlySYN=1&btnSave=speichern&defaultPolicy=accept&srcIP=&srcMask=&destIP=&destMask=&protocol=*&port=&action=drop" ], [ "8", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "8", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "8", "10.0.0.1:80", "10.0.0.2:54970", "TCP", "Transport", "SEQ: 1.000.001, ACK: 2.000.169" ], [ "9", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "9", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "9", "10.0.0.1:80", "10.0.0.2:54970", "TCP", "Transport", "SEQ: 1.000.001" ], [ "9", "10.0.0.1:80", "10.0.0.2:54970", "HTTP", "Anwendung", "HTTP/1.1 200 OK\nContent-type: text/html\n\n\n \n Konfiguration der Firewall auf dem Vermittlungsrechner\n \n\n \n\n

\n\u0009

Firewall-Konfiguration

\n \n \n\u0009 \n \n \n

\n \n \n \n \n \n \n \n \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 " ], [ "10", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "10", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "10", "10.0.0.2:54970", "10.0.0.1:80", "TCP", "Transport", "SEQ: 2.000.169, ACK: 1.001.461" ], [ "11", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "11", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "11", "10.0.0.1:80", "10.0.0.2:54970", "TCP", "Transport", "SEQ: 1.001.461" ], [ "11", "10.0.0.1:80", "10.0.0.2:54970", "HTTP", "Anwendung", " \n\u0009 \n

\n\u0009\u0009\n	Firewall aktivieren
\n\u0009 Erst durch Aktivieren der Firewall werden die Firewall-Regeln angewendet. \n\u0009\u0009Bei deaktivierter Firewall findet keine Filterung statt.\n
\n\u0009\u0009\u0009 \n\u0009	ICMP-Pakete filtern
\n\u0009 Alle ICMP Pakete, z.B. Ping-Anfragen, werden von der Firewall verworfen.\n\u0009
\n\u0009\u0009\u0009\n\u0009	\n\u0009 nur SYN-Pakete verwerfen\n\u0009
\n\u0009 Neue Verbindungsanfragen zu gesperrten Ports werden verworfen.\n\u0009\u0009Der Rückkanal für erlaubte Verbindungsanfragen wird akzeptiert.\n\u0009

\n\n

\n\n \n \n \n \n \n \n \n \n \n \n \n\u0009\n\u0009 \n\u0009\n \n \n \n

Firewall-Regeln:

\n\u0009 Die Regeln werden von oben nach unten geprüft.
\n\u0009 Sobald eine Regel zutrifft, wird die angegebene Aktion ausgeführt.\n

\n\u0009 Falls keine Regel zutrifft, wird folgende Standard-Aktion ausgeführt:
\n\u0009 \n\u0009 \n\u0009

\n\u0009 \n \n \n\u0009\u0009\n \n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n \n \n\n\n\n

lfd. Nr.	Quell-IP	Quell-Subnetzmaske	Ziel-IP	Ziel-Subnetzmaske	Protokoll	Port	Aktion
1	10.0.0.0	255.255.255.0			TCP	80	akzeptieren

\n \n\u0009

\n\u0009 Aktion für ausgewählte Regel:\n\u0009

\n \n \n \n

\n\n

\n\n\n \n \n \n \n \n \n \n \n\u0009\n\u0009\n \n \n \n \n \n \n \n \n \n" ], [ "14", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "14", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "14", "10.0.0.2:54970", "10.0.0.1:80", "TCP", "Transport", "SEQ: 2.000.169, ACK: 1.004.381" ], [ "15", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "15", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "15", "10.0.0.1:80", "10.0.0.2:54970", "TCP", "Transport", "SEQ: 1.004.381" ], [ "15", "10.0.0.1:80", "10.0.0.2:54970", "HTTP", "Anwendung", " \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n

\n Neue Regel erstellen \n\u0009 Alle Felder sind optional und werden -- falls leer gelassen -- für die Filterung nicht verwendet.\n
Quell-IP:
Quell-Subnetzmaske:
Ziel-IP:
Ziel-Subnetzmaske:
Protokoll:	\n\u0009 \n\u0009
Port:
Aktion:	\n\u0009 \n\u0009
\n \n

\n \n\n" ], [ "16", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "16", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "16", "10.0.0.2:54970", "10.0.0.1:80", "TCP", "Transport", "SEQ: 2.000.169, ACK: 1.005.330" ], [ "17", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "17", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "17", "10.0.0.2:54970", "10.0.0.1:80", "TCP", "Transport", "FIN, SEQ: 2.000.169" ], [ "18", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "18", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "18", "10.0.0.1:80", "10.0.0.2:54970", "TCP", "Transport", "SEQ: 1.005.330, ACK: 2.000.170" ], [ "19", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "19", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "19", "10.0.0.1:80", "10.0.0.2:54970", "TCP", "Transport", "FIN, SEQ: 1.005.330" ], [ "20", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "20", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "20", "10.0.0.2:54970", "10.0.0.1:80", "TCP", "Transport", "SEQ: 2.000.170, ACK: 1.005.331" ], [ "21", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "21", "10.0.0.2", "20.0.0.2", "ICMP", "Vermittlung", "ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1" ], [ "22", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "22", "20.0.0.2", "10.0.0.2", "ICMP", "Vermittlung", "ICMP Echo Reply (pong), TTL: 63, Identifier: 1, Seq.-No.: 1" ] ], "00000000-0000-0000-0000-000000000302": [ [ "1", "02:00:00:00:03:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "1", "10.0.0.2", "10.0.0.1", "ARP", "Vermittlung", "Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]" ], [ "2", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x806" ], [ "2", "10.0.0.1", "10.0.0.2", "ARP", "Vermittlung", "MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]" ], [ "3", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "3", "10.0.0.2", "20.0.0.2", "ICMP", "Vermittlung", "ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1" ], [ "4", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "4", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "4", "10.0.0.2:54970", "10.0.0.1:80", "TCP", "Transport", "SYN, SEQ: 2.000.000" ], [ "5", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "5", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "5", "10.0.0.1:80", "10.0.0.2:54970", "TCP", "Transport", "SYN, SEQ: 1.000.000, ACK: 2.000.001" ], [ "6", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "6", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "6", "10.0.0.2:54970", "10.0.0.1:80", "TCP", "Transport", "SEQ: 2.000.001, ACK: 1.000.001" ], [ "7", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "7", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "7", "10.0.0.2:54970", "10.0.0.1:80", "TCP", "Transport", "SEQ: 2.000.001" ], [ "7", "10.0.0.2:54970", "10.0.0.1:80", "HTTP", "Anwendung", "POST /konfig HTTP/1.1\nHost: 10.0.0.1\n\nfirewallActivate=1&onlySYN=1&btnSave=speichern&defaultPolicy=accept&srcIP=&srcMask=&destIP=&destMask=&protocol=*&port=&action=drop" ], [ "8", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "8", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "8", "10.0.0.1:80", "10.0.0.2:54970", "TCP", "Transport", "SEQ: 1.000.001, ACK: 2.000.169" ], [ "9", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "9", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "9", "10.0.0.1:80", "10.0.0.2:54970", "TCP", "Transport", "SEQ: 1.000.001" ], [ "9", "10.0.0.1:80", "10.0.0.2:54970", "HTTP", "Anwendung", "HTTP/1.1 200 OK\nContent-type: text/html\n\n\n \n Konfiguration der Firewall auf dem Vermittlungsrechner\n \n\n \n\n

\n\u0009

Firewall-Konfiguration

\n \n \n\u0009 \n \n \n

\n\u0009\u0009\n	Firewall aktivieren
\n\u0009 Erst durch Aktivieren der Firewall werden die Firewall-Regeln angewendet. \n\u0009\u0009Bei deaktivierter Firewall findet keine Filterung statt.\n
\n\u0009\u0009\u0009 \n\u0009	ICMP-Pakete filtern
\n\u0009 Alle ICMP Pakete, z.B. Ping-Anfragen, werden von der Firewall verworfen.\n\u0009
\n\u0009\u0009\u0009\n\u0009	\n\u0009 nur SYN-Pakete verwerfen\n\u0009
\n\u0009 Neue Verbindungsanfragen zu gesperrten Ports werden verworfen.\n\u0009\u0009Der Rückkanal für erlaubte Verbindungsanfragen wird akzeptiert.\n\u0009

\n\n

\n\n \n \n \n \n \n \n \n \n \n \n \n\u0009\n\u0009 \n\u0009\n \n \n \n

Firewall-Regeln:

\n\u0009 Die Regeln werden von oben nach unten geprüft.
\n\u0009 Sobald eine Regel zutrifft, wird die angegebene Aktion ausgeführt.\n

\n\u0009 Falls keine Regel zutrifft, wird folgende Standard-Aktion ausgeführt:
\n\u0009 \n\u0009 \n\u0009

\n\u0009 \n \n \n\u0009\u0009\n \n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n \n \n\n\n\n

lfd. Nr.	Quell-IP	Quell-Subnetzmaske	Ziel-IP	Ziel-Subnetzmaske	Protokoll	Port	Aktion
1	10.0.0.0	255.255.255.0			TCP	80	akzeptieren

\n \n\u0009

\n\u0009 Aktion für ausgewählte Regel:\n\u0009

\n \n \n \n

\n\n

\n Neue Regel erstellen \n\u0009 Alle Felder sind optional und werden -- falls leer gelassen -- für die Filterung nicht verwendet.\n
Quell-IP:
Quell-Subnetzmaske:
Ziel-IP:
Ziel-Subnetzmaske:
Protokoll:	\n\u0009 \n\u0009
Port:
Aktion:	\n\u0009 \n\u0009
\n \n

\n \n\n" ], [ "16", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "16", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "16", "10.0.0.2:54970", "10.0.0.1:80", "TCP", "Transport", "SEQ: 2.000.169, ACK: 1.005.330" ], [ "17", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "17", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "17", "10.0.0.2:54970", "10.0.0.1:80", "TCP", "Transport", "FIN, SEQ: 2.000.169" ], [ "18", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "18", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "18", "10.0.0.1:80", "10.0.0.2:54970", "TCP", "Transport", "SEQ: 1.005.330, ACK: 2.000.170" ], [ "19", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "19", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "19", "10.0.0.1:80", "10.0.0.2:54970", "TCP", "Transport", "FIN, SEQ: 1.005.330" ], [ "20", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "20", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "20", "10.0.0.2:54970", "10.0.0.1:80", "TCP", "Transport", "SEQ: 2.000.170, ACK: 1.005.331" ], [ "21", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "21", "10.0.0.2", "20.0.0.2", "ICMP", "Vermittlung", "ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1" ], [ "22", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "22", "20.0.0.2", "10.0.0.2", "ICMP", "Vermittlung", "ICMP Echo Reply (pong), TTL: 63, Identifier: 1, Seq.-No.: 1" ] ], "00000000-0000-0000-0000-000000000302#1": [ [ "1", "02:00:00:00:03:22", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "1", "20.0.0.1", "20.0.0.2", "ARP", "Vermittlung", "Suche nach MAC für 20.0.0.2 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.2]" ], [ "2", "02:00:00:00:03:13", "02:00:00:00:03:22", "", "Netzzugang", "0x806" ], [ "2", "20.0.0.2", "20.0.0.1", "ARP", "Vermittlung", "MAC ist 02:00:00:00:03:13 [op=REPLY, sender=02:00:00:00:03:13|20.0.0.2, target=02:00:00:00:03:22|20.0.0.1]" ], [ "3", "02:00:00:00:03:22", "02:00:00:00:03:13", "", "Netzzugang", "0x800" ], [ "3", "10.0.0.2", "20.0.0.2", "ICMP", "Vermittlung", "ICMP Echo Request (ping), TTL: 63, Identifier: 1, Seq.-No.: 1" ], [ "4", "02:00:00:00:03:13", "02:00:00:00:03:22", "", "Netzzugang", "0x800" ], [ "4", "20.0.0.2", "10.0.0.2", "ICMP", "Vermittlung", "ICMP Echo Reply (pong), TTL: 64, Identifier: 1, Seq.-No.: 1" ] ], "00000000-0000-0000-0000-000000000303": [ [ "1", "02:00:00:00:03:22", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "1", "20.0.0.1", "20.0.0.2", "ARP", "Vermittlung", "Suche nach MAC für 20.0.0.2 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.2]" ], [ "2", "02:00:00:00:03:13", "02:00:00:00:03:22", "", "Netzzugang", "0x806" ], [ "2", "20.0.0.2", "20.0.0.1", "ARP", "Vermittlung", "MAC ist 02:00:00:00:03:13 [op=REPLY, sender=02:00:00:00:03:13|20.0.0.2, target=02:00:00:00:03:22|20.0.0.1]" ], [ "3", "02:00:00:00:03:22", "02:00:00:00:03:13", "", "Netzzugang", "0x800" ], [ "3", "10.0.0.2", "20.0.0.2", "ICMP", "Vermittlung", "ICMP Echo Request (ping), TTL: 63, Identifier: 1, Seq.-No.: 1" ], [ "4", "02:00:00:00:03:13", "02:00:00:00:03:22", "", "Netzzugang", "0x800" ], [ "4", "20.0.0.2", "10.0.0.2", "ICMP", "Vermittlung", "ICMP Echo Reply (pong), TTL: 64, Identifier: 1, Seq.-No.: 1" ] ] }, "layeredRows": { "00000000-0000-0000-0000-000000000301": [ [ "1", "02:00:00:00:03:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "1", "10.0.0.2", "10.0.0.1", "ARP", "Vermittlung", "Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]" ], [ "2", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x806" ], [ "2", "10.0.0.1", "10.0.0.2", "ARP", "Vermittlung", "MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]" ], [ "3", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "3", "10.0.0.2", "20.0.0.2", "ICMP", "Vermittlung", "ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1" ], [ "4", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "4", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "4", "54970", "80", "TCP", "Transport", "SYN, SEQ: 2.000.000" ], [ "5", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "5", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "5", "80", "54970", "TCP", "Transport", "SYN, SEQ: 1.000.000, ACK: 2.000.001" ], [ "6", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "6", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "6", "54970", "80", "TCP", "Transport", "SEQ: 2.000.001, ACK: 1.000.001" ], [ "7", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "7", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "7", "54970", "80", "TCP", "Transport", "SEQ: 2.000.001" ], [ "7", null, null, "HTTP", "Anwendung", "POST /konfig HTTP/1.1\nHost: 10.0.0.1\n\nfirewallActivate=1&onlySYN=1&btnSave=speichern&defaultPolicy=accept&srcIP=&srcMask=&destIP=&destMask=&protocol=*&port=&action=drop" ], [ "8", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "8", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "8", "80", "54970", "TCP", "Transport", "SEQ: 1.000.001, ACK: 2.000.169" ], [ "9", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "9", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "9", "80", "54970", "TCP", "Transport", "SEQ: 1.000.001" ], [ "9", null, null, "HTTP", "Anwendung", "HTTP/1.1 200 OK\nContent-type: text/html\n\n\n \n Konfiguration der Firewall auf dem Vermittlungsrechner\n \n\n \n\n

\n\u0009

Firewall-Konfiguration

\n \n \n\u0009 \n \n \n

\n \n \n \n \n \n \n \n \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 " ], [ "10", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "10", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "10", "54970", "80", "TCP", "Transport", "SEQ: 2.000.169, ACK: 1.001.461" ], [ "11", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "11", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "11", "80", "54970", "TCP", "Transport", "SEQ: 1.001.461" ], [ "11", null, null, "HTTP", "Anwendung", " \n\u0009 \n

\n\u0009\u0009\n	Firewall aktivieren
\n\u0009 Erst durch Aktivieren der Firewall werden die Firewall-Regeln angewendet. \n\u0009\u0009Bei deaktivierter Firewall findet keine Filterung statt.\n
\n\u0009\u0009\u0009 \n\u0009	ICMP-Pakete filtern
\n\u0009 Alle ICMP Pakete, z.B. Ping-Anfragen, werden von der Firewall verworfen.\n\u0009
\n\u0009\u0009\u0009\n\u0009	\n\u0009 nur SYN-Pakete verwerfen\n\u0009
\n\u0009 Neue Verbindungsanfragen zu gesperrten Ports werden verworfen.\n\u0009\u0009Der Rückkanal für erlaubte Verbindungsanfragen wird akzeptiert.\n\u0009

\n\n

\n\n \n \n \n \n \n \n \n \n \n \n \n\u0009\n\u0009 \n\u0009\n \n \n \n

Firewall-Regeln:

\n\u0009 Die Regeln werden von oben nach unten geprüft.
\n\u0009 Sobald eine Regel zutrifft, wird die angegebene Aktion ausgeführt.\n

\n\u0009 Falls keine Regel zutrifft, wird folgende Standard-Aktion ausgeführt:
\n\u0009 \n\u0009 \n\u0009

\n\u0009 \n \n \n\u0009\u0009\n \n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n \n \n\n\n\n

lfd. Nr.	Quell-IP	Quell-Subnetzmaske	Ziel-IP	Ziel-Subnetzmaske	Protokoll	Port	Aktion
1	10.0.0.0	255.255.255.0			TCP	80	akzeptieren

\n \n\u0009

\n\u0009 Aktion für ausgewählte Regel:\n\u0009

\n \n \n \n

\n\n

\n\n\n \n \n \n \n \n \n \n \n\u0009\n\u0009\n \n \n \n \n \n \n \n \n \n" ], [ "14", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "14", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "14", "54970", "80", "TCP", "Transport", "SEQ: 2.000.169, ACK: 1.004.381" ], [ "15", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "15", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "15", "80", "54970", "TCP", "Transport", "SEQ: 1.004.381" ], [ "15", null, null, "HTTP", "Anwendung", " \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n

\n Neue Regel erstellen \n\u0009 Alle Felder sind optional und werden -- falls leer gelassen -- für die Filterung nicht verwendet.\n
Quell-IP:
Quell-Subnetzmaske:
Ziel-IP:
Ziel-Subnetzmaske:
Protokoll:	\n\u0009 \n\u0009
Port:
Aktion:	\n\u0009 \n\u0009
\n \n

\n\u0009

Firewall-Konfiguration

\n \n \n\u0009 \n \n \n

\n \n \n \n \n \n \n \n \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 " ], [ "10", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "10", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "10", "54970", "80", "TCP", "Transport", "SEQ: 2.000.169, ACK: 1.001.461" ], [ "11", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "11", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "11", "80", "54970", "TCP", "Transport", "SEQ: 1.001.461" ], [ "11", null, null, "HTTP", "Anwendung", " \n\u0009 \n

\n\u0009\u0009\n	Firewall aktivieren
\n\u0009 Erst durch Aktivieren der Firewall werden die Firewall-Regeln angewendet. \n\u0009\u0009Bei deaktivierter Firewall findet keine Filterung statt.\n
\n\u0009\u0009\u0009 \n\u0009	ICMP-Pakete filtern
\n\u0009 Alle ICMP Pakete, z.B. Ping-Anfragen, werden von der Firewall verworfen.\n\u0009
\n\u0009\u0009\u0009\n\u0009	\n\u0009 nur SYN-Pakete verwerfen\n\u0009
\n\u0009 Neue Verbindungsanfragen zu gesperrten Ports werden verworfen.\n\u0009\u0009Der Rückkanal für erlaubte Verbindungsanfragen wird akzeptiert.\n\u0009

\n\n

\n\n \n \n \n \n \n \n \n \n \n \n \n\u0009\n\u0009 \n\u0009\n \n \n \n

Firewall-Regeln:

\n\u0009 Die Regeln werden von oben nach unten geprüft.
\n\u0009 Sobald eine Regel zutrifft, wird die angegebene Aktion ausgeführt.\n

\n\u0009 Falls keine Regel zutrifft, wird folgende Standard-Aktion ausgeführt:
\n\u0009 \n\u0009 \n\u0009

\n\u0009 \n \n \n\u0009\u0009\n \n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n \n \n\n\n\n

lfd. Nr.	Quell-IP	Quell-Subnetzmaske	Ziel-IP	Ziel-Subnetzmaske	Protokoll	Port	Aktion
1	10.0.0.0	255.255.255.0			TCP	80	akzeptieren

\n \n\u0009

\n\u0009 Aktion für ausgewählte Regel:\n\u0009

\n \n \n \n

\n\n

\n\n\n \n \n \n \n \n \n \n \n\u0009\n\u0009\n \n \n \n \n \n \n \n \n \n" ], [ "14", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "14", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "14", "54970", "80", "TCP", "Transport", "SEQ: 2.000.169, ACK: 1.004.381" ], [ "15", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "15", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "15", "80", "54970", "TCP", "Transport", "SEQ: 1.004.381" ], [ "15", null, null, "HTTP", "Anwendung", " \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n

\n Neue Regel erstellen \n\u0009 Alle Felder sind optional und werden -- falls leer gelassen -- für die Filterung nicht verwendet.\n
Quell-IP:
Quell-Subnetzmaske:
Ziel-IP:
Ziel-Subnetzmaske:
Protokoll:	\n\u0009 \n\u0009
Port:
Aktion:	\n\u0009 \n\u0009
\n \n

\n\u0009

Firewall-Konfiguration

\n \n \n\u0009 \n \n \n

\n \n \n \n \n \n \n \n \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n

\n\u0009\u0009\n	Firewall aktivieren
\n\u0009 Erst durch Aktivieren der Firewall werden die Firewall-Regeln angewendet. \n\u0009\u0009Bei deaktivierter Firewall findet keine Filterung statt.\n
\n\u0009\u0009\u0009 \n\u0009	ICMP-Pakete filtern
\n\u0009 Alle ICMP Pakete, z.B. Ping-Anfragen, werden von der Firewall verworfen.\n\u0009
\n\u0009\u0009\u0009\n\u0009	\n\u0009 nur SYN-Pakete verwerfen\n\u0009
\n\u0009 Neue Verbindungsanfragen zu gesperrten Ports werden verworfen.\n\u0009\u0009Der Rückkanal für erlaubte Verbindungsanfragen wird akzeptiert.\n\u0009

\n\n

\n\n \n \n \n \n \n \n \n \n \n \n \n\u0009\n\u0009 \n\u0009\n \n \n \n

Firewall-Regeln:

\n\u0009 Die Regeln werden von oben nach unten geprüft.
\n\u0009 Sobald eine Regel zutrifft, wird die angegebene Aktion ausgeführt.\n

\n\u0009 Falls keine Regel zutrifft, wird folgende Standard-Aktion ausgeführt:
\n\u0009 \n\u0009 \n\u0009

\n\u0009 \n \n \n\u0009\u0009\n \n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n \n \n\n\n\n

lfd. Nr.	Quell-IP	Quell-Subnetzmaske	Ziel-IP	Ziel-Subnetzmaske	Protokoll	Port	Aktion
1	10.0.0.0	255.255.255.0			TCP	80	akzeptieren

\n \n\u0009

\n\u0009 Aktion für ausgewählte Regel:\n\u0009

\n \n \n \n

\n\n

\n\n\n \n \n \n \n \n \n \n \n\u0009\n\u0009\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n

\n Neue Regel erstellen \n\u0009 Alle Felder sind optional und werden -- falls leer gelassen -- für die Filterung nicht verwendet.\n
Quell-IP:
Quell-Subnetzmaske:
Ziel-IP:
Ziel-Subnetzmaske:
Protokoll:	\n\u0009 \n\u0009
Port:
Aktion:	\n\u0009 \n\u0009
\n \n

\n \n" ], [ 4873, "server", "<\n \n Konfiguration der Firewall auf dem Vermittlungsrechner\n \n\n \n\n

\n\u0009

Firewall-Konfiguration

\n \n \n\u0009 \n \n \n

\n \n \n \n \n \n \n \n \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n

\n\u0009\u0009\n	Firewall aktivieren
\n\u0009 Erst durch Aktivieren der Firewall werden die Firewall-Regeln angewendet. \n\u0009\u0009Bei deaktivierter Firewall findet keine Filterung statt.\n
\n\u0009\u0009\u0009 \n\u0009	ICMP-Pakete filtern
\n\u0009 Alle ICMP Pakete, z.B. Ping-Anfragen, werden von der Firewall verworfen.\n\u0009
\n\u0009\u0009\u0009\n\u0009	\n\u0009 nur SYN-Pakete verwerfen\n\u0009
\n\u0009 Neue Verbindungsanfragen zu gesperrten Ports werden verworfen.\n\u0009\u0009Der Rückkanal für erlaubte Verbindungsanfragen wird akzeptiert.\n\u0009

\n\n

\n\n \n \n \n \n \n \n \n \n \n \n \n\u0009\n\u0009 \n\u0009\n \n \n \n

Firewall-Regeln:

\n\u0009 Die Regeln werden von oben nach unten geprüft.
\n\u0009 Sobald eine Regel zutrifft, wird die angegebene Aktion ausgeführt.\n

\n\u0009 Falls keine Regel zutrifft, wird folgende Standard-Aktion ausgeführt:
\n\u0009 \n\u0009 \n\u0009

\n\u0009 \n \n \n\u0009\u0009\n \n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n \n \n\n\n\n

lfd. Nr.	Quell-IP	Quell-Subnetzmaske	Ziel-IP	Ziel-Subnetzmaske	Protokoll	Port	Aktion
1	10.0.0.0	255.255.255.0			TCP	80	akzeptieren

\n \n\u0009

\n\u0009 Aktion für ausgewählte Regel:\n\u0009

\n \n \n \n

\n\n

\n\n\n \n \n \n \n \n \n \n \n\u0009\n\u0009\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n

\n Neue Regel erstellen \n\u0009 Alle Felder sind optional und werden -- falls leer gelassen -- für die Filterung nicht verwendet.\n
Quell-IP:
Quell-Subnetzmaske:
Ziel-IP:
Ziel-Subnetzmaske:
Protokoll:	\n\u0009 \n\u0009
Port:
Aktion:	\n\u0009 \n\u0009
\n \n

\n \n\n" ], [ 4929, "server", "Socket zu 10.0.0.2:54970 geschlossen" ], [ 7001, "ping", "call sendProbe 20.0.0.2" ], [ 7446, "ping", "returned answer" ] ] }

Firewall-Konfiguration

Firewall-Regeln:

Neue Regel erstellen

Firewall-Konfiguration

Firewall-Regeln:

Neue Regel erstellen

Firewall-Konfiguration

Firewall-Regeln:

Neue Regel erstellen

Firewall-Konfiguration

Firewall-Regeln:

Neue Regel erstellen

Firewall-Konfiguration

Firewall-Regeln:

Neue Regel erstellen

Firewall-Konfiguration

Firewall-Regeln:

Neue Regel erstellen

Firewall-Konfiguration

Firewall-Regeln:

Neue Regel erstellen

Firewall-Konfiguration

Firewall-Regeln:

Neue Regel erstellen