{ "frames": { "00000000-0000-0000-0000-000000000301": [ { "time": 519, "source": "02:00:00:00:03:11", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, "senderIp": "10.0.0.2", "targetIp": "10.0.0.1" }, { "time": 756, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "arp": 2, "senderIp": "10.0.0.1", "targetIp": "10.0.0.2" }, { "time": 759, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 50999, "destinationPort": 80, "payload": null, "tcpFlags": "S", "sequence": 2000000, "acknowledgement": 0 }, { "time": 988, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 50999, "payload": null, "tcpFlags": "SA", "sequence": 1000000, "acknowledgement": 2000001 }, { "time": 988, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 50999, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 2000001, "acknowledgement": 1000001 }, { "time": 1044, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 50999, "destinationPort": 80, "payload": "POST /konfig HTTP/1.1\nHost: 10.0.0.1\n\nfirewallActivate=1&dropICMP=1&onlySYN=1&defaultPolicy=accept&srcIP=&srcMask=&destIP=&destMask=&protocol=TCP&port=80&action=drop&addrule=hinzuf%C3%BCgen", "tcpFlags": "P", "sequence": 2000001, "acknowledgement": 0 }, { "time": 1267, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 50999, "payload": null, "tcpFlags": "A", "sequence": 1000001, "acknowledgement": 2000190 }, { "time": 1323, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 50999, "payload": "HTTP/1.1 200 OK\nContent-type: text/html\n\n\n \n Konfiguration der Firewall auf dem Vermittlungsrechner\n \n\n \n\n
\n\u0009

Firewall-Konfiguration

\n \n \n\u0009 \n \n \n
\n \n \n \n \n \n \n \n \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n
\n\u0009\u0009\n Firewall aktivieren
\n\u0009 Erst durch Aktivieren der Firewall werden die Firewall-Regeln angewendet. \n\u0009\u0009Bei deaktivierter Firewall findet keine Filterung statt.\n
\n\u0009\u0009\u0009 \n\u0009 ICMP-Pakete filtern
\n\u0009 Alle ICMP Pakete, z.B. Ping-Anfragen, werden von der Firewall verworfen.\n\u0009
\n\u0009\u0009\u0009\n\u0009 \n\u0009 nur SYN-Pakete verwerfen\n\u0009
\n\u0009 Neue Verbindungsanfragen zu gesperrten Ports werden verworfen.\n\u0009\u0009Der Rückkanal für erlaubte Verbindungsanfragen wird akzeptiert.\n\u0009
\n
\n\n
\n\n \n \n \n \n \n \n \n \n \n \n \n\u0009\n\u0009 \n\u0009\n \n \n \n
\n

Firewall-Regeln:


\n\u0009 Die Regeln werden von oben nach unten geprüft.
\n\u0009 Sobald eine Regel zutrifft, wird die angegebene Aktion ausgeführt.\n
\n\u0009 Falls keine Regel zutrifft, wird folgende Standard-Aktion ausgeführt:
\n\u0009 \n\u0009 \n\u0009
\n\u0009 \n \n \n\u0009\u0009\n \n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n \n \n\n", "tcpFlags": "", "sequence": 1001461, "acknowledgement": 0 }, { "time": 1547, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 50999, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 2000190, "acknowledgement": 1002921 }, { "time": 1770, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 50999, "payload": "\n\n
lfd. Nr.Quell-IPQuell-SubnetzmaskeZiel-IPZiel-SubnetzmaskeProtokollPortAktion
 110.0.0.0255.255.255.0TCP80akzeptieren
 2TCP80verwerfen
\n
\n\u0009
\n\u0009 Aktion für ausgewählte Regel:\n\u0009
\n \n \n \n
\n\n
\n\n\n \n \n \n \n \n \n \n \n\u0009\n\u0009\n \n \n \n ", "tcpFlags": "", "sequence": 1002921, "acknowledgement": 0 }, { "time": 1771, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 50999, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 2000190, "acknowledgement": 1004381 }, { "time": 1993, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 50999, "payload": " \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n
\n

Neue Regel erstellen


\n\u0009 Alle Felder sind optional und werden
-- falls leer gelassen --
für die Filterung nicht verwendet.\n
Quell-IP:
Quell-Subnetzmaske:
Ziel-IP:
Ziel-Subnetzmaske:
Protokoll: \n\u0009 \n\u0009
Port:
Aktion: \n\u0009 \n\u0009
\n \n
\n
\n
\n \n\n", "tcpFlags": "P", "sequence": 1004381, "acknowledgement": 0 }, { "time": 1994, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 50999, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 2000190, "acknowledgement": 1005524 }, { "time": 2049, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 50999, "destinationPort": 80, "payload": null, "tcpFlags": "F", "sequence": 2000190, "acknowledgement": 0 }, { "time": 2272, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 50999, "payload": null, "tcpFlags": "A", "sequence": 1005524, "acknowledgement": 2000191 }, { "time": 2328, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 50999, "payload": null, "tcpFlags": "F", "sequence": 1005524, "acknowledgement": 0 }, { "time": 2328, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 50999, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 2000191, "acknowledgement": 1005525 }, { "time": 4001, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 52289, "destinationPort": 80, "payload": null, "tcpFlags": "S", "sequence": 4000000, "acknowledgement": 0 }, { "time": 4224, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 52289, "payload": null, "tcpFlags": "SA", "sequence": 3000000, "acknowledgement": 4000001 }, { "time": 4224, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 52289, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 4000001, "acknowledgement": 3000001 }, { "time": 4301, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 52289, "destinationPort": 80, "payload": "POST /konfig HTTP/1.1\nHost: 10.0.0.1\n\nfirewallActivate=1&dropICMP=1&onlySYN=1&defaultPolicy=accept&radioRule=2&moveup=rauf&srcIP=&srcMask=&destIP=&destMask=&protocol=*&port=&action=drop", "tcpFlags": "P", "sequence": 4000001, "acknowledgement": 0 }, { "time": 4523, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 52289, "payload": null, "tcpFlags": "A", "sequence": 3000001, "acknowledgement": 4000186 }, { "time": 4579, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 52289, "payload": "HTTP/1.1 200 OK\nContent-type: text/html\n\n\n \n Konfiguration der Firewall auf dem Vermittlungsrechner\n \n\n \n\n
\n\u0009

Firewall-Konfiguration

\n \n \n\u0009 \n \n \n
\n \n \n \n \n \n \n \n \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n
\n\u0009\u0009\n Firewall aktivieren
\n\u0009 Erst durch Aktivieren der Firewall werden die Firewall-Regeln angewendet. \n\u0009\u0009Bei deaktivierter Firewall findet keine Filterung statt.\n
\n\u0009\u0009\u0009 \n\u0009 ICMP-Pakete filtern
\n\u0009 Alle ICMP Pakete, z.B. Ping-Anfragen, werden von der Firewall verworfen.\n\u0009
\n\u0009\u0009\u0009\n\u0009 \n\u0009 nur SYN-Pakete verwerfen\n\u0009
\n\u0009 Neue Verbindungsanfragen zu gesperrten Ports werden verworfen.\n\u0009\u0009Der Rückkanal für erlaubte Verbindungsanfragen wird akzeptiert.\n\u0009
\n
\n\n
\n\n \n \n \n \n \n \n \n \n \n \n \n\u0009\n\u0009 \n\u0009\n \n \n \n
\n

Firewall-Regeln:


\n\u0009 Die Regeln werden von oben nach unten geprüft.
\n\u0009 Sobald eine Regel zutrifft, wird die angegebene Aktion ausgeführt.\n
\n\u0009 Falls keine Regel zutrifft, wird folgende Standard-Aktion ausgeführt:
\n\u0009 \n\u0009 \n\u0009
\n\u0009 \n \n \n\u0009\u0009\n \n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n \n \n\n", "tcpFlags": "", "sequence": 3001461, "acknowledgement": 0 }, { "time": 4802, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 52289, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 4000186, "acknowledgement": 3002921 }, { "time": 5024, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 52289, "payload": "\n\n
lfd. Nr.Quell-IPQuell-SubnetzmaskeZiel-IPZiel-SubnetzmaskeProtokollPortAktion
 1TCP80verwerfen
 210.0.0.0255.255.255.0TCP80akzeptieren
\n
\n\u0009
\n\u0009 Aktion für ausgewählte Regel:\n\u0009
\n \n \n \n
\n\n
\n\n\n \n \n \n \n \n \n \n \n\u0009\n\u0009\n \n \n \n ", "tcpFlags": "", "sequence": 3002921, "acknowledgement": 0 }, { "time": 5024, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 52289, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 4000186, "acknowledgement": 3004381 }, { "time": 5247, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 52289, "payload": " \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n
\n

Neue Regel erstellen


\n\u0009 Alle Felder sind optional und werden
-- falls leer gelassen --
für die Filterung nicht verwendet.\n
Quell-IP:
Quell-Subnetzmaske:
Ziel-IP:
Ziel-Subnetzmaske:
Protokoll: \n\u0009 \n\u0009
Port:
Aktion: \n\u0009 \n\u0009
\n \n
\n
\n
\n \n\n", "tcpFlags": "P", "sequence": 3004381, "acknowledgement": 0 }, { "time": 5247, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 52289, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 4000186, "acknowledgement": 3005524 }, { "time": 5303, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 52289, "destinationPort": 80, "payload": null, "tcpFlags": "F", "sequence": 4000186, "acknowledgement": 0 }, { "time": 5525, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 52289, "payload": null, "tcpFlags": "A", "sequence": 3005524, "acknowledgement": 4000187 }, { "time": 5580, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 52289, "payload": null, "tcpFlags": "F", "sequence": 3005524, "acknowledgement": 0 }, { "time": 5581, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 52289, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 4000187, "acknowledgement": 3005525 }, { "time": 8001, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 64828, "destinationPort": 80, "payload": null, "tcpFlags": "S", "sequence": 6000000, "acknowledgement": 0 } ], "00000000-0000-0000-0000-000000000302": [ { "time": 643, "source": "02:00:00:00:03:11", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, "senderIp": "10.0.0.2", "targetIp": "10.0.0.1" }, { "time": 644, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "arp": 2, "senderIp": "10.0.0.1", "targetIp": "10.0.0.2" }, { "time": 873, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 50999, "destinationPort": 80, "payload": null, "tcpFlags": "S", "sequence": 2000000, "acknowledgement": 0 }, { "time": 876, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 50999, "payload": null, "tcpFlags": "SA", "sequence": 1000000, "acknowledgement": 2000001 }, { "time": 1100, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 50999, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 2000001, "acknowledgement": 1000001 }, { "time": 1155, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 50999, "destinationPort": 80, "payload": "POST /konfig HTTP/1.1\nHost: 10.0.0.1\n\nfirewallActivate=1&dropICMP=1&onlySYN=1&defaultPolicy=accept&srcIP=&srcMask=&destIP=&destMask=&protocol=TCP&port=80&action=drop&addrule=hinzuf%C3%BCgen", "tcpFlags": "P", "sequence": 2000001, "acknowledgement": 0 }, { "time": 1156, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 50999, "payload": null, "tcpFlags": "A", "sequence": 1000001, "acknowledgement": 2000190 }, { "time": 1212, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 50999, "payload": "HTTP/1.1 200 OK\nContent-type: text/html\n\n\n \n Konfiguration der Firewall auf dem Vermittlungsrechner\n \n\n \n\n
\n\u0009

Firewall-Konfiguration

\n \n \n\u0009 \n \n \n
\n \n \n \n \n \n \n \n \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n
\n\u0009\u0009\n Firewall aktivieren
\n\u0009 Erst durch Aktivieren der Firewall werden die Firewall-Regeln angewendet. \n\u0009\u0009Bei deaktivierter Firewall findet keine Filterung statt.\n
\n\u0009\u0009\u0009 \n\u0009 ICMP-Pakete filtern
\n\u0009 Alle ICMP Pakete, z.B. Ping-Anfragen, werden von der Firewall verworfen.\n\u0009
\n\u0009\u0009\u0009\n\u0009 \n\u0009 nur SYN-Pakete verwerfen\n\u0009
\n\u0009 Neue Verbindungsanfragen zu gesperrten Ports werden verworfen.\n\u0009\u0009Der Rückkanal für erlaubte Verbindungsanfragen wird akzeptiert.\n\u0009
\n
\n\n
\n\n \n \n \n \n \n \n \n \n \n \n \n\u0009\n\u0009 \n\u0009\n \n \n \n
\n

Firewall-Regeln:


\n\u0009 Die Regeln werden von oben nach unten geprüft.
\n\u0009 Sobald eine Regel zutrifft, wird die angegebene Aktion ausgeführt.\n
\n\u0009 Falls keine Regel zutrifft, wird folgende Standard-Aktion ausgeführt:
\n\u0009 \n\u0009 \n\u0009
\n\u0009 \n \n \n\u0009\u0009\n \n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n \n \n\n", "tcpFlags": "", "sequence": 1001461, "acknowledgement": 0 }, { "time": 1658, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 50999, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 2000190, "acknowledgement": 1002921 }, { "time": 1659, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 50999, "payload": "\n\n
lfd. Nr.Quell-IPQuell-SubnetzmaskeZiel-IPZiel-SubnetzmaskeProtokollPortAktion
 110.0.0.0255.255.255.0TCP80akzeptieren
 2TCP80verwerfen
\n
\n\u0009
\n\u0009 Aktion für ausgewählte Regel:\n\u0009
\n \n \n \n
\n\n
\n\n\n \n \n \n \n \n \n \n \n\u0009\n\u0009\n \n \n \n ", "tcpFlags": "", "sequence": 1002921, "acknowledgement": 0 }, { "time": 1882, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 50999, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 2000190, "acknowledgement": 1004381 }, { "time": 1882, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 50999, "payload": " \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n
\n

Neue Regel erstellen


\n\u0009 Alle Felder sind optional und werden
-- falls leer gelassen --
für die Filterung nicht verwendet.\n
Quell-IP:
Quell-Subnetzmaske:
Ziel-IP:
Ziel-Subnetzmaske:
Protokoll: \n\u0009 \n\u0009
Port:
Aktion: \n\u0009 \n\u0009
\n \n
\n
\n
\n \n\n", "tcpFlags": "P", "sequence": 1004381, "acknowledgement": 0 }, { "time": 2105, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 50999, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 2000190, "acknowledgement": 1005524 }, { "time": 2161, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 50999, "destinationPort": 80, "payload": null, "tcpFlags": "F", "sequence": 2000190, "acknowledgement": 0 }, { "time": 2161, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 50999, "payload": null, "tcpFlags": "A", "sequence": 1005524, "acknowledgement": 2000191 }, { "time": 2216, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 50999, "payload": null, "tcpFlags": "F", "sequence": 1005524, "acknowledgement": 0 }, { "time": 2439, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 50999, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 2000191, "acknowledgement": 1005525 }, { "time": 4112, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 52289, "destinationPort": 80, "payload": null, "tcpFlags": "S", "sequence": 4000000, "acknowledgement": 0 }, { "time": 4112, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 52289, "payload": null, "tcpFlags": "SA", "sequence": 3000000, "acknowledgement": 4000001 }, { "time": 4335, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 52289, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 4000001, "acknowledgement": 3000001 }, { "time": 4412, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 52289, "destinationPort": 80, "payload": "POST /konfig HTTP/1.1\nHost: 10.0.0.1\n\nfirewallActivate=1&dropICMP=1&onlySYN=1&defaultPolicy=accept&radioRule=2&moveup=rauf&srcIP=&srcMask=&destIP=&destMask=&protocol=*&port=&action=drop", "tcpFlags": "P", "sequence": 4000001, "acknowledgement": 0 }, { "time": 4412, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 52289, "payload": null, "tcpFlags": "A", "sequence": 3000001, "acknowledgement": 4000186 }, { "time": 4468, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 52289, "payload": "HTTP/1.1 200 OK\nContent-type: text/html\n\n\n \n Konfiguration der Firewall auf dem Vermittlungsrechner\n \n\n \n\n
\n\u0009

Firewall-Konfiguration

\n \n \n\u0009 \n \n \n
\n \n \n \n \n \n \n \n \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n
\n\u0009\u0009\n Firewall aktivieren
\n\u0009 Erst durch Aktivieren der Firewall werden die Firewall-Regeln angewendet. \n\u0009\u0009Bei deaktivierter Firewall findet keine Filterung statt.\n
\n\u0009\u0009\u0009 \n\u0009 ICMP-Pakete filtern
\n\u0009 Alle ICMP Pakete, z.B. Ping-Anfragen, werden von der Firewall verworfen.\n\u0009
\n\u0009\u0009\u0009\n\u0009 \n\u0009 nur SYN-Pakete verwerfen\n\u0009
\n\u0009 Neue Verbindungsanfragen zu gesperrten Ports werden verworfen.\n\u0009\u0009Der Rückkanal für erlaubte Verbindungsanfragen wird akzeptiert.\n\u0009
\n
\n\n
\n\n \n \n \n \n \n \n \n \n \n \n \n\u0009\n\u0009 \n\u0009\n \n \n \n
\n

Firewall-Regeln:


\n\u0009 Die Regeln werden von oben nach unten geprüft.
\n\u0009 Sobald eine Regel zutrifft, wird die angegebene Aktion ausgeführt.\n
\n\u0009 Falls keine Regel zutrifft, wird folgende Standard-Aktion ausgeführt:
\n\u0009 \n\u0009 \n\u0009
\n\u0009 \n \n \n\u0009\u0009\n \n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n \n \n\n", "tcpFlags": "", "sequence": 3001461, "acknowledgement": 0 }, { "time": 4913, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 52289, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 4000186, "acknowledgement": 3002921 }, { "time": 4913, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 52289, "payload": "\n\n
lfd. Nr.Quell-IPQuell-SubnetzmaskeZiel-IPZiel-SubnetzmaskeProtokollPortAktion
 1TCP80verwerfen
 210.0.0.0255.255.255.0TCP80akzeptieren
\n
\n\u0009
\n\u0009 Aktion für ausgewählte Regel:\n\u0009
\n \n \n \n
\n\n
\n\n\n \n \n \n \n \n \n \n \n\u0009\n\u0009\n \n \n \n ", "tcpFlags": "", "sequence": 3002921, "acknowledgement": 0 }, { "time": 5135, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 52289, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 4000186, "acknowledgement": 3004381 }, { "time": 5136, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 52289, "payload": " \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n
\n

Neue Regel erstellen


\n\u0009 Alle Felder sind optional und werden
-- falls leer gelassen --
für die Filterung nicht verwendet.\n
Quell-IP:
Quell-Subnetzmaske:
Ziel-IP:
Ziel-Subnetzmaske:
Protokoll: \n\u0009 \n\u0009
Port:
Aktion: \n\u0009 \n\u0009
\n \n
\n
\n
\n \n\n", "tcpFlags": "P", "sequence": 3004381, "acknowledgement": 0 }, { "time": 5358, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 52289, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 4000186, "acknowledgement": 3005524 }, { "time": 5414, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 52289, "destinationPort": 80, "payload": null, "tcpFlags": "F", "sequence": 4000186, "acknowledgement": 0 }, { "time": 5414, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 52289, "payload": null, "tcpFlags": "A", "sequence": 3005524, "acknowledgement": 4000187 }, { "time": 5469, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 52289, "payload": null, "tcpFlags": "F", "sequence": 3005524, "acknowledgement": 0 }, { "time": 5692, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 52289, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 4000187, "acknowledgement": 3005525 }, { "time": 8112, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 64828, "destinationPort": 80, "payload": null, "tcpFlags": "S", "sequence": 6000000, "acknowledgement": 0 } ], "00000000-0000-0000-0000-000000000302#1": [], "00000000-0000-0000-0000-000000000303": [] }, "rows": { "00000000-0000-0000-0000-000000000301": [ [ "1", "02:00:00:00:03:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "1", "10.0.0.2", "10.0.0.1", "ARP", "Vermittlung", "Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]" ], [ "2", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x806" ], [ "2", "10.0.0.1", "10.0.0.2", "ARP", "Vermittlung", "MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]" ], [ "3", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "3", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "3", "10.0.0.2:50999", "10.0.0.1:80", "TCP", "Transport", "SYN, SEQ: 2.000.000" ], [ "4", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "4", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "4", "10.0.0.1:80", "10.0.0.2:50999", "TCP", "Transport", "SYN, SEQ: 1.000.000, ACK: 2.000.001" ], [ "5", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "5", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "5", "10.0.0.2:50999", "10.0.0.1:80", "TCP", "Transport", "SEQ: 2.000.001, ACK: 1.000.001" ], [ "6", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "6", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "6", "10.0.0.2:50999", "10.0.0.1:80", "TCP", "Transport", "SEQ: 2.000.001" ], [ "6", "10.0.0.2:50999", "10.0.0.1:80", "HTTP", "Anwendung", "POST /konfig HTTP/1.1\nHost: 10.0.0.1\n\nfirewallActivate=1&dropICMP=1&onlySYN=1&defaultPolicy=accept&srcIP=&srcMask=&destIP=&destMask=&protocol=TCP&port=80&action=drop&addrule=hinzuf%C3%BCgen" ], [ "7", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "7", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "7", "10.0.0.1:80", "10.0.0.2:50999", "TCP", "Transport", "SEQ: 1.000.001, ACK: 2.000.190" ], [ "8", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "8", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "8", "10.0.0.1:80", "10.0.0.2:50999", "TCP", "Transport", "SEQ: 1.000.001" ], [ "8", "10.0.0.1:80", "10.0.0.2:50999", "HTTP", "Anwendung", "HTTP/1.1 200 OK\nContent-type: text/html\n\n\n \n Konfiguration der Firewall auf dem Vermittlungsrechner\n \n\n \n\n
\n\u0009

Firewall-Konfiguration

\n \n \n\u0009 \n \n \n
\n \n \n \n \n \n \n \n \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n
\n\u0009\u0009\n Firewall aktivieren
\n\u0009 Erst durch Aktivieren der Firewall werden die Firewall-Regeln angewendet. \n\u0009\u0009Bei deaktivierter Firewall findet keine Filterung statt.\n
\n\u0009\u0009\u0009 \n\u0009 ICMP-Pakete filtern
\n\u0009 Alle ICMP Pakete, z.B. Ping-Anfragen, werden von der Firewall verworfen.\n\u0009
\n\u0009\u0009\u0009\n\u0009 \n\u0009 nur SYN-Pakete verwerfen\n\u0009
\n\u0009 Neue Verbindungsanfragen zu gesperrten Ports werden verworfen.\n\u0009\u0009Der Rückkanal für erlaubte Verbindungsanfragen wird akzeptiert.\n\u0009
\n
\n\n
\n\n \n \n \n \n \n \n \n \n \n \n \n\u0009\n\u0009 \n\u0009\n \n \n \n
\n

Firewall-Regeln:


\n\u0009 Die Regeln werden von oben nach unten geprüft.
\n\u0009 Sobald eine Regel zutrifft, wird die angegebene Aktion ausgeführt.\n
\n\u0009 Falls keine Regel zutrifft, wird folgende Standard-Aktion ausgeführt:
\n\u0009 \n\u0009 \n\u0009
\n\u0009 \n \n \n\u0009\u0009\n \n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n \n \n\n" ], [ "11", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "11", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "11", "10.0.0.2:50999", "10.0.0.1:80", "TCP", "Transport", "SEQ: 2.000.190, ACK: 1.002.921" ], [ "12", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "12", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "12", "10.0.0.1:80", "10.0.0.2:50999", "TCP", "Transport", "SEQ: 1.002.921" ], [ "12", "10.0.0.1:80", "10.0.0.2:50999", "HTTP", "Anwendung", "\n\n
lfd. Nr.Quell-IPQuell-SubnetzmaskeZiel-IPZiel-SubnetzmaskeProtokollPortAktion
 110.0.0.0255.255.255.0TCP80akzeptieren
 2TCP80verwerfen
\n
\n\u0009
\n\u0009 Aktion für ausgewählte Regel:\n\u0009
\n \n \n \n
\n\n
\n\n\n \n \n \n \n \n \n \n \n\u0009\n\u0009\n \n \n \n " ], [ "13", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "13", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "13", "10.0.0.2:50999", "10.0.0.1:80", "TCP", "Transport", "SEQ: 2.000.190, ACK: 1.004.381" ], [ "14", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "14", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "14", "10.0.0.1:80", "10.0.0.2:50999", "TCP", "Transport", "SEQ: 1.004.381" ], [ "14", "10.0.0.1:80", "10.0.0.2:50999", "HTTP", "Anwendung", " \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n
\n

Neue Regel erstellen


\n\u0009 Alle Felder sind optional und werden
-- falls leer gelassen --
für die Filterung nicht verwendet.\n
Quell-IP:
Quell-Subnetzmaske:
Ziel-IP:
Ziel-Subnetzmaske:
Protokoll: \n\u0009 \n\u0009
Port:
Aktion: \n\u0009 \n\u0009
\n \n
\n
\n
\n \n\n" ], [ "15", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "15", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "15", "10.0.0.2:50999", "10.0.0.1:80", "TCP", "Transport", "SEQ: 2.000.190, ACK: 1.005.524" ], [ "16", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "16", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "16", "10.0.0.2:50999", "10.0.0.1:80", "TCP", "Transport", "FIN, SEQ: 2.000.190" ], [ "17", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "17", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "17", "10.0.0.1:80", "10.0.0.2:50999", "TCP", "Transport", "SEQ: 1.005.524, ACK: 2.000.191" ], [ "18", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "18", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "18", "10.0.0.1:80", "10.0.0.2:50999", "TCP", "Transport", "FIN, SEQ: 1.005.524" ], [ "19", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "19", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "19", "10.0.0.2:50999", "10.0.0.1:80", "TCP", "Transport", "SEQ: 2.000.191, ACK: 1.005.525" ], [ "20", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "20", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "20", "10.0.0.2:52289", "10.0.0.1:80", "TCP", "Transport", "SYN, SEQ: 4.000.000" ], [ "21", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "21", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "21", "10.0.0.1:80", "10.0.0.2:52289", "TCP", "Transport", "SYN, SEQ: 3.000.000, ACK: 4.000.001" ], [ "22", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "22", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "22", "10.0.0.2:52289", "10.0.0.1:80", "TCP", "Transport", "SEQ: 4.000.001, ACK: 3.000.001" ], [ "23", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "23", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "23", "10.0.0.2:52289", "10.0.0.1:80", "TCP", "Transport", "SEQ: 4.000.001" ], [ "23", "10.0.0.2:52289", "10.0.0.1:80", "HTTP", "Anwendung", "POST /konfig HTTP/1.1\nHost: 10.0.0.1\n\nfirewallActivate=1&dropICMP=1&onlySYN=1&defaultPolicy=accept&radioRule=2&moveup=rauf&srcIP=&srcMask=&destIP=&destMask=&protocol=*&port=&action=drop" ], [ "24", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "24", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "24", "10.0.0.1:80", "10.0.0.2:52289", "TCP", "Transport", "SEQ: 3.000.001, ACK: 4.000.186" ], [ "25", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "25", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "25", "10.0.0.1:80", "10.0.0.2:52289", "TCP", "Transport", "SEQ: 3.000.001" ], [ "25", "10.0.0.1:80", "10.0.0.2:52289", "HTTP", "Anwendung", "HTTP/1.1 200 OK\nContent-type: text/html\n\n\n \n Konfiguration der Firewall auf dem Vermittlungsrechner\n \n\n \n\n
\n\u0009

Firewall-Konfiguration

\n \n \n\u0009 \n \n \n
\n \n \n \n \n \n \n \n \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n
\n\u0009\u0009\n Firewall aktivieren
\n\u0009 Erst durch Aktivieren der Firewall werden die Firewall-Regeln angewendet. \n\u0009\u0009Bei deaktivierter Firewall findet keine Filterung statt.\n
\n\u0009\u0009\u0009 \n\u0009 ICMP-Pakete filtern
\n\u0009 Alle ICMP Pakete, z.B. Ping-Anfragen, werden von der Firewall verworfen.\n\u0009
\n\u0009\u0009\u0009\n\u0009 \n\u0009 nur SYN-Pakete verwerfen\n\u0009
\n\u0009 Neue Verbindungsanfragen zu gesperrten Ports werden verworfen.\n\u0009\u0009Der Rückkanal für erlaubte Verbindungsanfragen wird akzeptiert.\n\u0009
\n
\n\n
\n\n \n \n \n \n \n \n \n \n \n \n \n\u0009\n\u0009 \n\u0009\n \n \n \n
\n

Firewall-Regeln:


\n\u0009 Die Regeln werden von oben nach unten geprüft.
\n\u0009 Sobald eine Regel zutrifft, wird die angegebene Aktion ausgeführt.\n
\n\u0009 Falls keine Regel zutrifft, wird folgende Standard-Aktion ausgeführt:
\n\u0009 \n\u0009 \n\u0009
\n\u0009 \n \n \n\u0009\u0009\n \n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n \n \n\n" ], [ "28", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "28", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "28", "10.0.0.2:52289", "10.0.0.1:80", "TCP", "Transport", "SEQ: 4.000.186, ACK: 3.002.921" ], [ "29", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "29", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "29", "10.0.0.1:80", "10.0.0.2:52289", "TCP", "Transport", "SEQ: 3.002.921" ], [ "29", "10.0.0.1:80", "10.0.0.2:52289", "HTTP", "Anwendung", "\n\n
lfd. Nr.Quell-IPQuell-SubnetzmaskeZiel-IPZiel-SubnetzmaskeProtokollPortAktion
 1TCP80verwerfen
 210.0.0.0255.255.255.0TCP80akzeptieren
\n
\n\u0009
\n\u0009 Aktion für ausgewählte Regel:\n\u0009
\n \n \n \n
\n\n
\n\n\n \n \n \n \n \n \n \n \n\u0009\n\u0009\n \n \n \n " ], [ "30", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "30", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "30", "10.0.0.2:52289", "10.0.0.1:80", "TCP", "Transport", "SEQ: 4.000.186, ACK: 3.004.381" ], [ "31", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "31", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "31", "10.0.0.1:80", "10.0.0.2:52289", "TCP", "Transport", "SEQ: 3.004.381" ], [ "31", "10.0.0.1:80", "10.0.0.2:52289", "HTTP", "Anwendung", " \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n
\n

Neue Regel erstellen


\n\u0009 Alle Felder sind optional und werden
-- falls leer gelassen --
für die Filterung nicht verwendet.\n
Quell-IP:
Quell-Subnetzmaske:
Ziel-IP:
Ziel-Subnetzmaske:
Protokoll: \n\u0009 \n\u0009
Port:
Aktion: \n\u0009 \n\u0009
\n \n
\n
\n
\n \n\n" ], [ "32", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "32", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "32", "10.0.0.2:52289", "10.0.0.1:80", "TCP", "Transport", "SEQ: 4.000.186, ACK: 3.005.524" ], [ "33", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "33", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "33", "10.0.0.2:52289", "10.0.0.1:80", "TCP", "Transport", "FIN, SEQ: 4.000.186" ], [ "34", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "34", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "34", "10.0.0.1:80", "10.0.0.2:52289", "TCP", "Transport", "SEQ: 3.005.524, ACK: 4.000.187" ], [ "35", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "35", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "35", "10.0.0.1:80", "10.0.0.2:52289", "TCP", "Transport", "FIN, SEQ: 3.005.524" ], [ "36", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "36", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "36", "10.0.0.2:52289", "10.0.0.1:80", "TCP", "Transport", "SEQ: 4.000.187, ACK: 3.005.525" ], [ "37", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "37", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "37", "10.0.0.2:64828", "10.0.0.1:80", "TCP", "Transport", "SYN, SEQ: 6.000.000" ] ], "00000000-0000-0000-0000-000000000302": [ [ "1", "02:00:00:00:03:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "1", "10.0.0.2", "10.0.0.1", "ARP", "Vermittlung", "Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]" ], [ "2", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x806" ], [ "2", "10.0.0.1", "10.0.0.2", "ARP", "Vermittlung", "MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]" ], [ "3", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "3", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "3", "10.0.0.2:50999", "10.0.0.1:80", "TCP", "Transport", "SYN, SEQ: 2.000.000" ], [ "4", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "4", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "4", "10.0.0.1:80", "10.0.0.2:50999", "TCP", "Transport", "SYN, SEQ: 1.000.000, ACK: 2.000.001" ], [ "5", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "5", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "5", "10.0.0.2:50999", "10.0.0.1:80", "TCP", "Transport", "SEQ: 2.000.001, ACK: 1.000.001" ], [ "6", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "6", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "6", "10.0.0.2:50999", "10.0.0.1:80", "TCP", "Transport", "SEQ: 2.000.001" ], [ "6", "10.0.0.2:50999", "10.0.0.1:80", "HTTP", "Anwendung", "POST /konfig HTTP/1.1\nHost: 10.0.0.1\n\nfirewallActivate=1&dropICMP=1&onlySYN=1&defaultPolicy=accept&srcIP=&srcMask=&destIP=&destMask=&protocol=TCP&port=80&action=drop&addrule=hinzuf%C3%BCgen" ], [ "7", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "7", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "7", "10.0.0.1:80", "10.0.0.2:50999", "TCP", "Transport", "SEQ: 1.000.001, ACK: 2.000.190" ], [ "8", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "8", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "8", "10.0.0.1:80", "10.0.0.2:50999", "TCP", "Transport", "SEQ: 1.000.001" ], [ "8", "10.0.0.1:80", "10.0.0.2:50999", "HTTP", "Anwendung", "HTTP/1.1 200 OK\nContent-type: text/html\n\n\n \n Konfiguration der Firewall auf dem Vermittlungsrechner\n \n\n \n\n
\n\u0009

Firewall-Konfiguration

\n \n \n\u0009 \n \n \n
\n \n \n \n \n \n \n \n \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n
\n\u0009\u0009\n Firewall aktivieren
\n\u0009 Erst durch Aktivieren der Firewall werden die Firewall-Regeln angewendet. \n\u0009\u0009Bei deaktivierter Firewall findet keine Filterung statt.\n
\n\u0009\u0009\u0009 \n\u0009 ICMP-Pakete filtern
\n\u0009 Alle ICMP Pakete, z.B. Ping-Anfragen, werden von der Firewall verworfen.\n\u0009
\n\u0009\u0009\u0009\n\u0009 \n\u0009 nur SYN-Pakete verwerfen\n\u0009
\n\u0009 Neue Verbindungsanfragen zu gesperrten Ports werden verworfen.\n\u0009\u0009Der Rückkanal für erlaubte Verbindungsanfragen wird akzeptiert.\n\u0009
\n
\n\n
\n\n \n \n \n \n \n \n \n \n \n \n \n\u0009\n\u0009 \n\u0009\n \n \n \n
\n

Firewall-Regeln:


\n\u0009 Die Regeln werden von oben nach unten geprüft.
\n\u0009 Sobald eine Regel zutrifft, wird die angegebene Aktion ausgeführt.\n
\n\u0009 Falls keine Regel zutrifft, wird folgende Standard-Aktion ausgeführt:
\n\u0009 \n\u0009 \n\u0009
\n\u0009 \n \n \n\u0009\u0009\n \n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n \n \n\n" ], [ "11", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "11", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "11", "10.0.0.2:50999", "10.0.0.1:80", "TCP", "Transport", "SEQ: 2.000.190, ACK: 1.002.921" ], [ "12", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "12", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "12", "10.0.0.1:80", "10.0.0.2:50999", "TCP", "Transport", "SEQ: 1.002.921" ], [ "12", "10.0.0.1:80", "10.0.0.2:50999", "HTTP", "Anwendung", "\n\n
lfd. Nr.Quell-IPQuell-SubnetzmaskeZiel-IPZiel-SubnetzmaskeProtokollPortAktion
 110.0.0.0255.255.255.0TCP80akzeptieren
 2TCP80verwerfen
\n
\n\u0009
\n\u0009 Aktion für ausgewählte Regel:\n\u0009
\n \n \n \n
\n\n
\n\n\n \n \n \n \n \n \n \n \n\u0009\n\u0009\n \n \n \n " ], [ "13", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "13", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "13", "10.0.0.2:50999", "10.0.0.1:80", "TCP", "Transport", "SEQ: 2.000.190, ACK: 1.004.381" ], [ "14", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "14", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "14", "10.0.0.1:80", "10.0.0.2:50999", "TCP", "Transport", "SEQ: 1.004.381" ], [ "14", "10.0.0.1:80", "10.0.0.2:50999", "HTTP", "Anwendung", " \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n
\n

Neue Regel erstellen


\n\u0009 Alle Felder sind optional und werden
-- falls leer gelassen --
für die Filterung nicht verwendet.\n
Quell-IP:
Quell-Subnetzmaske:
Ziel-IP:
Ziel-Subnetzmaske:
Protokoll: \n\u0009 \n\u0009
Port:
Aktion: \n\u0009 \n\u0009
\n \n
\n
\n
\n \n\n" ], [ "15", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "15", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "15", "10.0.0.2:50999", "10.0.0.1:80", "TCP", "Transport", "SEQ: 2.000.190, ACK: 1.005.524" ], [ "16", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "16", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "16", "10.0.0.2:50999", "10.0.0.1:80", "TCP", "Transport", "FIN, SEQ: 2.000.190" ], [ "17", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "17", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "17", "10.0.0.1:80", "10.0.0.2:50999", "TCP", "Transport", "SEQ: 1.005.524, ACK: 2.000.191" ], [ "18", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "18", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "18", "10.0.0.1:80", "10.0.0.2:50999", "TCP", "Transport", "FIN, SEQ: 1.005.524" ], [ "19", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "19", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "19", "10.0.0.2:50999", "10.0.0.1:80", "TCP", "Transport", "SEQ: 2.000.191, ACK: 1.005.525" ], [ "20", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "20", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "20", "10.0.0.2:52289", "10.0.0.1:80", "TCP", "Transport", "SYN, SEQ: 4.000.000" ], [ "21", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "21", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "21", "10.0.0.1:80", "10.0.0.2:52289", "TCP", "Transport", "SYN, SEQ: 3.000.000, ACK: 4.000.001" ], [ "22", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "22", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "22", "10.0.0.2:52289", "10.0.0.1:80", "TCP", "Transport", "SEQ: 4.000.001, ACK: 3.000.001" ], [ "23", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "23", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "23", "10.0.0.2:52289", "10.0.0.1:80", "TCP", "Transport", "SEQ: 4.000.001" ], [ "23", "10.0.0.2:52289", "10.0.0.1:80", "HTTP", "Anwendung", "POST /konfig HTTP/1.1\nHost: 10.0.0.1\n\nfirewallActivate=1&dropICMP=1&onlySYN=1&defaultPolicy=accept&radioRule=2&moveup=rauf&srcIP=&srcMask=&destIP=&destMask=&protocol=*&port=&action=drop" ], [ "24", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "24", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "24", "10.0.0.1:80", "10.0.0.2:52289", "TCP", "Transport", "SEQ: 3.000.001, ACK: 4.000.186" ], [ "25", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "25", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "25", "10.0.0.1:80", "10.0.0.2:52289", "TCP", "Transport", "SEQ: 3.000.001" ], [ "25", "10.0.0.1:80", "10.0.0.2:52289", "HTTP", "Anwendung", "HTTP/1.1 200 OK\nContent-type: text/html\n\n\n \n Konfiguration der Firewall auf dem Vermittlungsrechner\n \n\n \n\n
\n\u0009

Firewall-Konfiguration

\n \n \n\u0009 \n \n \n
\n \n \n \n \n \n \n \n \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n
\n\u0009\u0009\n Firewall aktivieren
\n\u0009 Erst durch Aktivieren der Firewall werden die Firewall-Regeln angewendet. \n\u0009\u0009Bei deaktivierter Firewall findet keine Filterung statt.\n
\n\u0009\u0009\u0009 \n\u0009 ICMP-Pakete filtern
\n\u0009 Alle ICMP Pakete, z.B. Ping-Anfragen, werden von der Firewall verworfen.\n\u0009
\n\u0009\u0009\u0009\n\u0009 \n\u0009 nur SYN-Pakete verwerfen\n\u0009
\n\u0009 Neue Verbindungsanfragen zu gesperrten Ports werden verworfen.\n\u0009\u0009Der Rückkanal für erlaubte Verbindungsanfragen wird akzeptiert.\n\u0009
\n
\n\n
\n\n \n \n \n \n \n \n \n \n \n \n \n\u0009\n\u0009 \n\u0009\n \n \n \n
\n

Firewall-Regeln:


\n\u0009 Die Regeln werden von oben nach unten geprüft.
\n\u0009 Sobald eine Regel zutrifft, wird die angegebene Aktion ausgeführt.\n
\n\u0009 Falls keine Regel zutrifft, wird folgende Standard-Aktion ausgeführt:
\n\u0009 \n\u0009 \n\u0009
\n\u0009 \n \n \n\u0009\u0009\n \n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n \n \n\n" ], [ "28", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "28", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "28", "10.0.0.2:52289", "10.0.0.1:80", "TCP", "Transport", "SEQ: 4.000.186, ACK: 3.002.921" ], [ "29", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "29", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "29", "10.0.0.1:80", "10.0.0.2:52289", "TCP", "Transport", "SEQ: 3.002.921" ], [ "29", "10.0.0.1:80", "10.0.0.2:52289", "HTTP", "Anwendung", "\n\n
lfd. Nr.Quell-IPQuell-SubnetzmaskeZiel-IPZiel-SubnetzmaskeProtokollPortAktion
 1TCP80verwerfen
 210.0.0.0255.255.255.0TCP80akzeptieren
\n
\n\u0009
\n\u0009 Aktion für ausgewählte Regel:\n\u0009
\n \n \n \n
\n\n
\n\n\n \n \n \n \n \n \n \n \n\u0009\n\u0009\n \n \n \n " ], [ "30", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "30", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "30", "10.0.0.2:52289", "10.0.0.1:80", "TCP", "Transport", "SEQ: 4.000.186, ACK: 3.004.381" ], [ "31", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "31", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "31", "10.0.0.1:80", "10.0.0.2:52289", "TCP", "Transport", "SEQ: 3.004.381" ], [ "31", "10.0.0.1:80", "10.0.0.2:52289", "HTTP", "Anwendung", " \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n
\n

Neue Regel erstellen


\n\u0009 Alle Felder sind optional und werden
-- falls leer gelassen --
für die Filterung nicht verwendet.\n
Quell-IP:
Quell-Subnetzmaske:
Ziel-IP:
Ziel-Subnetzmaske:
Protokoll: \n\u0009 \n\u0009
Port:
Aktion: \n\u0009 \n\u0009
\n \n
\n
\n
\n \n\n" ], [ "32", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "32", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "32", "10.0.0.2:52289", "10.0.0.1:80", "TCP", "Transport", "SEQ: 4.000.186, ACK: 3.005.524" ], [ "33", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "33", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "33", "10.0.0.2:52289", "10.0.0.1:80", "TCP", "Transport", "FIN, SEQ: 4.000.186" ], [ "34", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "34", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "34", "10.0.0.1:80", "10.0.0.2:52289", "TCP", "Transport", "SEQ: 3.005.524, ACK: 4.000.187" ], [ "35", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "35", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "35", "10.0.0.1:80", "10.0.0.2:52289", "TCP", "Transport", "FIN, SEQ: 3.005.524" ], [ "36", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "36", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "36", "10.0.0.2:52289", "10.0.0.1:80", "TCP", "Transport", "SEQ: 4.000.187, ACK: 3.005.525" ], [ "37", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "37", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "37", "10.0.0.2:64828", "10.0.0.1:80", "TCP", "Transport", "SYN, SEQ: 6.000.000" ] ], "00000000-0000-0000-0000-000000000302#1": [], "00000000-0000-0000-0000-000000000303": [] }, "layeredRows": { "00000000-0000-0000-0000-000000000301": [ [ "1", "02:00:00:00:03:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "1", "10.0.0.2", "10.0.0.1", "ARP", "Vermittlung", "Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]" ], [ "2", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x806" ], [ "2", "10.0.0.1", "10.0.0.2", "ARP", "Vermittlung", "MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]" ], [ "3", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "3", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "3", "50999", "80", "TCP", "Transport", "SYN, SEQ: 2.000.000" ], [ "4", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "4", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "4", "80", "50999", "TCP", "Transport", "SYN, SEQ: 1.000.000, ACK: 2.000.001" ], [ "5", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "5", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "5", "50999", "80", "TCP", "Transport", "SEQ: 2.000.001, ACK: 1.000.001" ], [ "6", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "6", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "6", "50999", "80", "TCP", "Transport", "SEQ: 2.000.001" ], [ "6", null, null, "HTTP", "Anwendung", "POST /konfig HTTP/1.1\nHost: 10.0.0.1\n\nfirewallActivate=1&dropICMP=1&onlySYN=1&defaultPolicy=accept&srcIP=&srcMask=&destIP=&destMask=&protocol=TCP&port=80&action=drop&addrule=hinzuf%C3%BCgen" ], [ "7", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "7", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "7", "80", "50999", "TCP", "Transport", "SEQ: 1.000.001, ACK: 2.000.190" ], [ "8", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "8", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "8", "80", "50999", "TCP", "Transport", "SEQ: 1.000.001" ], [ "8", null, null, "HTTP", "Anwendung", "HTTP/1.1 200 OK\nContent-type: text/html\n\n\n \n Konfiguration der Firewall auf dem Vermittlungsrechner\n \n\n \n\n
\n\u0009

Firewall-Konfiguration

\n \n \n\u0009 \n \n \n
\n \n \n \n \n \n \n \n \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n
\n\u0009\u0009\n Firewall aktivieren
\n\u0009 Erst durch Aktivieren der Firewall werden die Firewall-Regeln angewendet. \n\u0009\u0009Bei deaktivierter Firewall findet keine Filterung statt.\n
\n\u0009\u0009\u0009 \n\u0009 ICMP-Pakete filtern
\n\u0009 Alle ICMP Pakete, z.B. Ping-Anfragen, werden von der Firewall verworfen.\n\u0009
\n\u0009\u0009\u0009\n\u0009 \n\u0009 nur SYN-Pakete verwerfen\n\u0009
\n\u0009 Neue Verbindungsanfragen zu gesperrten Ports werden verworfen.\n\u0009\u0009Der Rückkanal für erlaubte Verbindungsanfragen wird akzeptiert.\n\u0009
\n
\n\n
\n\n \n \n \n \n \n \n \n \n \n \n \n\u0009\n\u0009 \n\u0009\n \n \n \n
\n

Firewall-Regeln:


\n\u0009 Die Regeln werden von oben nach unten geprüft.
\n\u0009 Sobald eine Regel zutrifft, wird die angegebene Aktion ausgeführt.\n
\n\u0009 Falls keine Regel zutrifft, wird folgende Standard-Aktion ausgeführt:
\n\u0009 \n\u0009 \n\u0009
\n\u0009 \n \n \n\u0009\u0009\n \n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n \n \n\n" ], [ "11", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "11", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "11", "50999", "80", "TCP", "Transport", "SEQ: 2.000.190, ACK: 1.002.921" ], [ "12", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "12", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "12", "80", "50999", "TCP", "Transport", "SEQ: 1.002.921" ], [ "12", null, null, "HTTP", "Anwendung", "\n\n
lfd. Nr.Quell-IPQuell-SubnetzmaskeZiel-IPZiel-SubnetzmaskeProtokollPortAktion
 110.0.0.0255.255.255.0TCP80akzeptieren
 2TCP80verwerfen
\n
\n\u0009
\n\u0009 Aktion für ausgewählte Regel:\n\u0009
\n \n \n \n
\n\n
\n\n\n \n \n \n \n \n \n \n \n\u0009\n\u0009\n \n \n \n " ], [ "13", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "13", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "13", "50999", "80", "TCP", "Transport", "SEQ: 2.000.190, ACK: 1.004.381" ], [ "14", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "14", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "14", "80", "50999", "TCP", "Transport", "SEQ: 1.004.381" ], [ "14", null, null, "HTTP", "Anwendung", " \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n
\n

Neue Regel erstellen


\n\u0009 Alle Felder sind optional und werden
-- falls leer gelassen --
für die Filterung nicht verwendet.\n
Quell-IP:
Quell-Subnetzmaske:
Ziel-IP:
Ziel-Subnetzmaske:
Protokoll: \n\u0009 \n\u0009
Port:
Aktion: \n\u0009 \n\u0009
\n \n
\n
\n
\n \n\n" ], [ "15", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "15", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "15", "50999", "80", "TCP", "Transport", "SEQ: 2.000.190, ACK: 1.005.524" ], [ "16", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "16", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "16", "50999", "80", "TCP", "Transport", "FIN, SEQ: 2.000.190" ], [ "17", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "17", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "17", "80", "50999", "TCP", "Transport", "SEQ: 1.005.524, ACK: 2.000.191" ], [ "18", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "18", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "18", "80", "50999", "TCP", "Transport", "FIN, SEQ: 1.005.524" ], [ "19", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "19", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "19", "50999", "80", "TCP", "Transport", "SEQ: 2.000.191, ACK: 1.005.525" ], [ "20", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "20", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "20", "52289", "80", "TCP", "Transport", "SYN, SEQ: 4.000.000" ], [ "21", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "21", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "21", "80", "52289", "TCP", "Transport", "SYN, SEQ: 3.000.000, ACK: 4.000.001" ], [ "22", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "22", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "22", "52289", "80", "TCP", "Transport", "SEQ: 4.000.001, ACK: 3.000.001" ], [ "23", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "23", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "23", "52289", "80", "TCP", "Transport", "SEQ: 4.000.001" ], [ "23", null, null, "HTTP", "Anwendung", "POST /konfig HTTP/1.1\nHost: 10.0.0.1\n\nfirewallActivate=1&dropICMP=1&onlySYN=1&defaultPolicy=accept&radioRule=2&moveup=rauf&srcIP=&srcMask=&destIP=&destMask=&protocol=*&port=&action=drop" ], [ "24", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "24", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "24", "80", "52289", "TCP", "Transport", "SEQ: 3.000.001, ACK: 4.000.186" ], [ "25", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "25", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "25", "80", "52289", "TCP", "Transport", "SEQ: 3.000.001" ], [ "25", null, null, "HTTP", "Anwendung", "HTTP/1.1 200 OK\nContent-type: text/html\n\n\n \n Konfiguration der Firewall auf dem Vermittlungsrechner\n \n\n \n\n
\n\u0009

Firewall-Konfiguration

\n \n \n\u0009 \n \n \n
\n \n \n \n \n \n \n \n \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n
\n\u0009\u0009\n Firewall aktivieren
\n\u0009 Erst durch Aktivieren der Firewall werden die Firewall-Regeln angewendet. \n\u0009\u0009Bei deaktivierter Firewall findet keine Filterung statt.\n
\n\u0009\u0009\u0009 \n\u0009 ICMP-Pakete filtern
\n\u0009 Alle ICMP Pakete, z.B. Ping-Anfragen, werden von der Firewall verworfen.\n\u0009
\n\u0009\u0009\u0009\n\u0009 \n\u0009 nur SYN-Pakete verwerfen\n\u0009
\n\u0009 Neue Verbindungsanfragen zu gesperrten Ports werden verworfen.\n\u0009\u0009Der Rückkanal für erlaubte Verbindungsanfragen wird akzeptiert.\n\u0009
\n
\n\n
\n\n \n \n \n \n \n \n \n \n \n \n \n\u0009\n\u0009 \n\u0009\n \n \n \n
\n

Firewall-Regeln:


\n\u0009 Die Regeln werden von oben nach unten geprüft.
\n\u0009 Sobald eine Regel zutrifft, wird die angegebene Aktion ausgeführt.\n
\n\u0009 Falls keine Regel zutrifft, wird folgende Standard-Aktion ausgeführt:
\n\u0009 \n\u0009 \n\u0009
\n\u0009 \n \n \n\u0009\u0009\n \n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n \n \n\n" ], [ "28", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "28", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "28", "52289", "80", "TCP", "Transport", "SEQ: 4.000.186, ACK: 3.002.921" ], [ "29", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "29", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "29", "80", "52289", "TCP", "Transport", "SEQ: 3.002.921" ], [ "29", null, null, "HTTP", "Anwendung", "\n\n
lfd. Nr.Quell-IPQuell-SubnetzmaskeZiel-IPZiel-SubnetzmaskeProtokollPortAktion
 1TCP80verwerfen
 210.0.0.0255.255.255.0TCP80akzeptieren
\n
\n\u0009
\n\u0009 Aktion für ausgewählte Regel:\n\u0009
\n \n \n \n
\n\n
\n\n\n \n \n \n \n \n \n \n \n\u0009\n\u0009\n \n \n \n " ], [ "30", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "30", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "30", "52289", "80", "TCP", "Transport", "SEQ: 4.000.186, ACK: 3.004.381" ], [ "31", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "31", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "31", "80", "52289", "TCP", "Transport", "SEQ: 3.004.381" ], [ "31", null, null, "HTTP", "Anwendung", " \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n
\n

Neue Regel erstellen


\n\u0009 Alle Felder sind optional und werden
-- falls leer gelassen --
für die Filterung nicht verwendet.\n
Quell-IP:
Quell-Subnetzmaske:
Ziel-IP:
Ziel-Subnetzmaske:
Protokoll: \n\u0009 \n\u0009
Port:
Aktion: \n\u0009 \n\u0009
\n \n
\n
\n
\n \n\n" ], [ "32", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "32", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "32", "52289", "80", "TCP", "Transport", "SEQ: 4.000.186, ACK: 3.005.524" ], [ "33", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "33", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "33", "52289", "80", "TCP", "Transport", "FIN, SEQ: 4.000.186" ], [ "34", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "34", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "34", "80", "52289", "TCP", "Transport", "SEQ: 3.005.524, ACK: 4.000.187" ], [ "35", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "35", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "35", "80", "52289", "TCP", "Transport", "FIN, SEQ: 3.005.524" ], [ "36", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "36", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "36", "52289", "80", "TCP", "Transport", "SEQ: 4.000.187, ACK: 3.005.525" ], [ "37", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "37", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "37", "64828", "80", "TCP", "Transport", "SYN, SEQ: 6.000.000" ] ], "00000000-0000-0000-0000-000000000302": [ [ "1", "02:00:00:00:03:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "1", "10.0.0.2", "10.0.0.1", "ARP", "Vermittlung", "Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]" ], [ "2", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x806" ], [ "2", "10.0.0.1", "10.0.0.2", "ARP", "Vermittlung", "MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]" ], [ "3", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "3", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "3", "50999", "80", "TCP", "Transport", "SYN, SEQ: 2.000.000" ], [ "4", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "4", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "4", "80", "50999", "TCP", "Transport", "SYN, SEQ: 1.000.000, ACK: 2.000.001" ], [ "5", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "5", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "5", "50999", "80", "TCP", "Transport", "SEQ: 2.000.001, ACK: 1.000.001" ], [ "6", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "6", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "6", "50999", "80", "TCP", "Transport", "SEQ: 2.000.001" ], [ "6", null, null, "HTTP", "Anwendung", "POST /konfig HTTP/1.1\nHost: 10.0.0.1\n\nfirewallActivate=1&dropICMP=1&onlySYN=1&defaultPolicy=accept&srcIP=&srcMask=&destIP=&destMask=&protocol=TCP&port=80&action=drop&addrule=hinzuf%C3%BCgen" ], [ "7", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "7", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "7", "80", "50999", "TCP", "Transport", "SEQ: 1.000.001, ACK: 2.000.190" ], [ "8", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "8", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "8", "80", "50999", "TCP", "Transport", "SEQ: 1.000.001" ], [ "8", null, null, "HTTP", "Anwendung", "HTTP/1.1 200 OK\nContent-type: text/html\n\n\n \n Konfiguration der Firewall auf dem Vermittlungsrechner\n \n\n \n\n
\n\u0009

Firewall-Konfiguration

\n \n \n\u0009 \n \n \n
\n \n \n \n \n \n \n \n \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n
\n\u0009\u0009\n Firewall aktivieren
\n\u0009 Erst durch Aktivieren der Firewall werden die Firewall-Regeln angewendet. \n\u0009\u0009Bei deaktivierter Firewall findet keine Filterung statt.\n
\n\u0009\u0009\u0009 \n\u0009 ICMP-Pakete filtern
\n\u0009 Alle ICMP Pakete, z.B. Ping-Anfragen, werden von der Firewall verworfen.\n\u0009
\n\u0009\u0009\u0009\n\u0009 \n\u0009 nur SYN-Pakete verwerfen\n\u0009
\n\u0009 Neue Verbindungsanfragen zu gesperrten Ports werden verworfen.\n\u0009\u0009Der Rückkanal für erlaubte Verbindungsanfragen wird akzeptiert.\n\u0009
\n
\n\n
\n\n \n \n \n \n \n \n \n \n \n \n \n\u0009\n\u0009 \n\u0009\n \n \n \n
\n

Firewall-Regeln:


\n\u0009 Die Regeln werden von oben nach unten geprüft.
\n\u0009 Sobald eine Regel zutrifft, wird die angegebene Aktion ausgeführt.\n
\n\u0009 Falls keine Regel zutrifft, wird folgende Standard-Aktion ausgeführt:
\n\u0009 \n\u0009 \n\u0009
\n\u0009 \n \n \n\u0009\u0009\n \n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n \n \n\n" ], [ "11", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "11", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "11", "50999", "80", "TCP", "Transport", "SEQ: 2.000.190, ACK: 1.002.921" ], [ "12", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "12", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "12", "80", "50999", "TCP", "Transport", "SEQ: 1.002.921" ], [ "12", null, null, "HTTP", "Anwendung", "\n\n
lfd. Nr.Quell-IPQuell-SubnetzmaskeZiel-IPZiel-SubnetzmaskeProtokollPortAktion
 110.0.0.0255.255.255.0TCP80akzeptieren
 2TCP80verwerfen
\n
\n\u0009
\n\u0009 Aktion für ausgewählte Regel:\n\u0009
\n \n \n \n
\n\n
\n\n\n \n \n \n \n \n \n \n \n\u0009\n\u0009\n \n \n \n " ], [ "13", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "13", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "13", "50999", "80", "TCP", "Transport", "SEQ: 2.000.190, ACK: 1.004.381" ], [ "14", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "14", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "14", "80", "50999", "TCP", "Transport", "SEQ: 1.004.381" ], [ "14", null, null, "HTTP", "Anwendung", " \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n
\n

Neue Regel erstellen


\n\u0009 Alle Felder sind optional und werden
-- falls leer gelassen --
für die Filterung nicht verwendet.\n
Quell-IP:
Quell-Subnetzmaske:
Ziel-IP:
Ziel-Subnetzmaske:
Protokoll: \n\u0009 \n\u0009
Port:
Aktion: \n\u0009 \n\u0009
\n \n
\n
\n
\n \n\n" ], [ "15", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "15", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "15", "50999", "80", "TCP", "Transport", "SEQ: 2.000.190, ACK: 1.005.524" ], [ "16", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "16", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "16", "50999", "80", "TCP", "Transport", "FIN, SEQ: 2.000.190" ], [ "17", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "17", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "17", "80", "50999", "TCP", "Transport", "SEQ: 1.005.524, ACK: 2.000.191" ], [ "18", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "18", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "18", "80", "50999", "TCP", "Transport", "FIN, SEQ: 1.005.524" ], [ "19", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "19", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "19", "50999", "80", "TCP", "Transport", "SEQ: 2.000.191, ACK: 1.005.525" ], [ "20", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "20", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "20", "52289", "80", "TCP", "Transport", "SYN, SEQ: 4.000.000" ], [ "21", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "21", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "21", "80", "52289", "TCP", "Transport", "SYN, SEQ: 3.000.000, ACK: 4.000.001" ], [ "22", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "22", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "22", "52289", "80", "TCP", "Transport", "SEQ: 4.000.001, ACK: 3.000.001" ], [ "23", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "23", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "23", "52289", "80", "TCP", "Transport", "SEQ: 4.000.001" ], [ "23", null, null, "HTTP", "Anwendung", "POST /konfig HTTP/1.1\nHost: 10.0.0.1\n\nfirewallActivate=1&dropICMP=1&onlySYN=1&defaultPolicy=accept&radioRule=2&moveup=rauf&srcIP=&srcMask=&destIP=&destMask=&protocol=*&port=&action=drop" ], [ "24", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "24", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "24", "80", "52289", "TCP", "Transport", "SEQ: 3.000.001, ACK: 4.000.186" ], [ "25", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "25", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "25", "80", "52289", "TCP", "Transport", "SEQ: 3.000.001" ], [ "25", null, null, "HTTP", "Anwendung", "HTTP/1.1 200 OK\nContent-type: text/html\n\n\n \n Konfiguration der Firewall auf dem Vermittlungsrechner\n \n\n \n\n
\n\u0009

Firewall-Konfiguration

\n \n \n\u0009 \n \n \n
\n \n \n \n \n \n \n \n \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n
\n\u0009\u0009\n Firewall aktivieren
\n\u0009 Erst durch Aktivieren der Firewall werden die Firewall-Regeln angewendet. \n\u0009\u0009Bei deaktivierter Firewall findet keine Filterung statt.\n
\n\u0009\u0009\u0009 \n\u0009 ICMP-Pakete filtern
\n\u0009 Alle ICMP Pakete, z.B. Ping-Anfragen, werden von der Firewall verworfen.\n\u0009
\n\u0009\u0009\u0009\n\u0009 \n\u0009 nur SYN-Pakete verwerfen\n\u0009
\n\u0009 Neue Verbindungsanfragen zu gesperrten Ports werden verworfen.\n\u0009\u0009Der Rückkanal für erlaubte Verbindungsanfragen wird akzeptiert.\n\u0009
\n
\n\n
\n\n \n \n \n \n \n \n \n \n \n \n \n\u0009\n\u0009 \n\u0009\n \n \n \n
\n

Firewall-Regeln:


\n\u0009 Die Regeln werden von oben nach unten geprüft.
\n\u0009 Sobald eine Regel zutrifft, wird die angegebene Aktion ausgeführt.\n
\n\u0009 Falls keine Regel zutrifft, wird folgende Standard-Aktion ausgeführt:
\n\u0009 \n\u0009 \n\u0009
\n\u0009 \n \n \n\u0009\u0009\n \n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n \n \n\n" ], [ "28", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "28", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "28", "52289", "80", "TCP", "Transport", "SEQ: 4.000.186, ACK: 3.002.921" ], [ "29", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "29", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "29", "80", "52289", "TCP", "Transport", "SEQ: 3.002.921" ], [ "29", null, null, "HTTP", "Anwendung", "\n\n
lfd. Nr.Quell-IPQuell-SubnetzmaskeZiel-IPZiel-SubnetzmaskeProtokollPortAktion
 1TCP80verwerfen
 210.0.0.0255.255.255.0TCP80akzeptieren
\n
\n\u0009
\n\u0009 Aktion für ausgewählte Regel:\n\u0009
\n \n \n \n
\n\n
\n\n\n \n \n \n \n \n \n \n \n\u0009\n\u0009\n \n \n \n " ], [ "30", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "30", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "30", "52289", "80", "TCP", "Transport", "SEQ: 4.000.186, ACK: 3.004.381" ], [ "31", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "31", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "31", "80", "52289", "TCP", "Transport", "SEQ: 3.004.381" ], [ "31", null, null, "HTTP", "Anwendung", " \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n
\n

Neue Regel erstellen


\n\u0009 Alle Felder sind optional und werden
-- falls leer gelassen --
für die Filterung nicht verwendet.\n
Quell-IP:
Quell-Subnetzmaske:
Ziel-IP:
Ziel-Subnetzmaske:
Protokoll: \n\u0009 \n\u0009
Port:
Aktion: \n\u0009 \n\u0009
\n \n
\n
\n
\n \n\n" ], [ "32", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "32", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "32", "52289", "80", "TCP", "Transport", "SEQ: 4.000.186, ACK: 3.005.524" ], [ "33", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "33", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "33", "52289", "80", "TCP", "Transport", "FIN, SEQ: 4.000.186" ], [ "34", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "34", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "34", "80", "52289", "TCP", "Transport", "SEQ: 3.005.524, ACK: 4.000.187" ], [ "35", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "35", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "35", "80", "52289", "TCP", "Transport", "FIN, SEQ: 3.005.524" ], [ "36", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "36", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "36", "52289", "80", "TCP", "Transport", "SEQ: 4.000.187, ACK: 3.005.525" ], [ "37", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "37", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "37", "64828", "80", "TCP", "Transport", "SYN, SEQ: 6.000.000" ] ], "00000000-0000-0000-0000-000000000302#1": [], "00000000-0000-0000-0000-000000000303": [] }, "events": [ [ 208, "browser", "update" ], [ 209, "server", "null" ], [ 211, "server", "Annahme von Verbindungsanfragen gestartet" ], [ 500, "browser", "call holeWebseite 10.0.0.1/konfig firewallActivate=1&dropICMP=1&onlySYN=1&defaultPolicy=accept&srcIP=&srcMask=&destIP=&destMask=&protocol=TCP&port=80&action=drop&addrule=hinzuf%C3%BCgen" ], [ 1117, "server", "Verbindung zu 10.0.0.2:50999 hergestellt" ], [ 1156, "server", ">>POST /konfig HTTP/1.1\nHost: 10.0.0.1\n\nfirewallActivate=1&dropICMP=1&onlySYN=1&defaultPolicy=accept&srcIP=&srcMask=&destIP=&destMask=&protocol=TCP&port=80&action=drop&addrule=hinzuf%C3%BCgen" ], [ 2017, "browser", "page 200 text/html\n\n \n Konfiguration der Firewall auf dem Vermittlungsrechner\n \n\n \n\n
\n\u0009

Firewall-Konfiguration

\n \n \n\u0009 \n \n \n
\n \n \n \n \n \n \n \n \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n
\n\u0009\u0009\n Firewall aktivieren
\n\u0009 Erst durch Aktivieren der Firewall werden die Firewall-Regeln angewendet. \n\u0009\u0009Bei deaktivierter Firewall findet keine Filterung statt.\n
\n\u0009\u0009\u0009 \n\u0009 ICMP-Pakete filtern
\n\u0009 Alle ICMP Pakete, z.B. Ping-Anfragen, werden von der Firewall verworfen.\n\u0009
\n\u0009\u0009\u0009\n\u0009 \n\u0009 nur SYN-Pakete verwerfen\n\u0009
\n\u0009 Neue Verbindungsanfragen zu gesperrten Ports werden verworfen.\n\u0009\u0009Der Rückkanal für erlaubte Verbindungsanfragen wird akzeptiert.\n\u0009
\n
\n\n
\n\n \n \n \n \n \n \n \n \n \n \n \n\u0009\n\u0009 \n\u0009\n \n \n \n
\n

Firewall-Regeln:


\n\u0009 Die Regeln werden von oben nach unten geprüft.
\n\u0009 Sobald eine Regel zutrifft, wird die angegebene Aktion ausgeführt.\n
\n\u0009 Falls keine Regel zutrifft, wird folgende Standard-Aktion ausgeführt:
\n\u0009 \n\u0009 \n\u0009
\n\u0009 \n \n \n\u0009\u0009\n \n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n \n \n\n\n\n
lfd. Nr.Quell-IPQuell-SubnetzmaskeZiel-IPZiel-SubnetzmaskeProtokollPortAktion
 110.0.0.0255.255.255.0TCP80akzeptieren
 2TCP80verwerfen
\n
\n\u0009
\n\u0009 Aktion für ausgewählte Regel:\n\u0009
\n \n \n \n
\n\n
\n\n\n \n \n \n \n \n \n \n \n\u0009\n\u0009\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n
\n

Neue Regel erstellen


\n\u0009 Alle Felder sind optional und werden
-- falls leer gelassen --
für die Filterung nicht verwendet.\n
Quell-IP:
Quell-Subnetzmaske:
Ziel-IP:
Ziel-Subnetzmaske:
Protokoll: \n\u0009 \n\u0009
Port:
Aktion: \n\u0009 \n\u0009
\n \n
\n
\n
\n \n" ], [ 2105, "server", "<\n \n Konfiguration der Firewall auf dem Vermittlungsrechner\n \n\n \n\n
\n\u0009

Firewall-Konfiguration

\n \n \n\u0009 \n \n \n
\n \n \n \n \n \n \n \n \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n
\n\u0009\u0009\n Firewall aktivieren
\n\u0009 Erst durch Aktivieren der Firewall werden die Firewall-Regeln angewendet. \n\u0009\u0009Bei deaktivierter Firewall findet keine Filterung statt.\n
\n\u0009\u0009\u0009 \n\u0009 ICMP-Pakete filtern
\n\u0009 Alle ICMP Pakete, z.B. Ping-Anfragen, werden von der Firewall verworfen.\n\u0009
\n\u0009\u0009\u0009\n\u0009 \n\u0009 nur SYN-Pakete verwerfen\n\u0009
\n\u0009 Neue Verbindungsanfragen zu gesperrten Ports werden verworfen.\n\u0009\u0009Der Rückkanal für erlaubte Verbindungsanfragen wird akzeptiert.\n\u0009
\n
\n\n
\n\n \n \n \n \n \n \n \n \n \n \n \n\u0009\n\u0009 \n\u0009\n \n \n \n
\n

Firewall-Regeln:


\n\u0009 Die Regeln werden von oben nach unten geprüft.
\n\u0009 Sobald eine Regel zutrifft, wird die angegebene Aktion ausgeführt.\n
\n\u0009 Falls keine Regel zutrifft, wird folgende Standard-Aktion ausgeführt:
\n\u0009 \n\u0009 \n\u0009
\n\u0009 \n \n \n\u0009\u0009\n \n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n \n \n\n\n\n
lfd. Nr.Quell-IPQuell-SubnetzmaskeZiel-IPZiel-SubnetzmaskeProtokollPortAktion
 110.0.0.0255.255.255.0TCP80akzeptieren
 2TCP80verwerfen
\n
\n\u0009
\n\u0009 Aktion für ausgewählte Regel:\n\u0009
\n \n \n \n
\n\n
\n\n\n \n \n \n \n \n \n \n \n\u0009\n\u0009\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n
\n

Neue Regel erstellen


\n\u0009 Alle Felder sind optional und werden
-- falls leer gelassen --
für die Filterung nicht verwendet.\n
Quell-IP:
Quell-Subnetzmaske:
Ziel-IP:
Ziel-Subnetzmaske:
Protokoll: \n\u0009 \n\u0009
Port:
Aktion: \n\u0009 \n\u0009
\n \n
\n
\n
\n \n\n" ], [ 2161, "server", "Socket zu 10.0.0.2:50999 geschlossen" ], [ 4000, "browser", "call holeWebseite 10.0.0.1/konfig firewallActivate=1&dropICMP=1&onlySYN=1&defaultPolicy=accept&radioRule=2&moveup=rauf&srcIP=&srcMask=&destIP=&destMask=&protocol=*&port=&action=drop" ], [ 4420, "server", "Verbindung zu 10.0.0.2:52289 hergestellt" ], [ 4420, "server", ">>POST /konfig HTTP/1.1\nHost: 10.0.0.1\n\nfirewallActivate=1&dropICMP=1&onlySYN=1&defaultPolicy=accept&radioRule=2&moveup=rauf&srcIP=&srcMask=&destIP=&destMask=&protocol=*&port=&action=drop" ], [ 5250, "browser", "page 200 text/html\n\n \n Konfiguration der Firewall auf dem Vermittlungsrechner\n \n\n \n\n
\n\u0009

Firewall-Konfiguration

\n \n \n\u0009 \n \n \n
\n \n \n \n \n \n \n \n \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n
\n\u0009\u0009\n Firewall aktivieren
\n\u0009 Erst durch Aktivieren der Firewall werden die Firewall-Regeln angewendet. \n\u0009\u0009Bei deaktivierter Firewall findet keine Filterung statt.\n
\n\u0009\u0009\u0009 \n\u0009 ICMP-Pakete filtern
\n\u0009 Alle ICMP Pakete, z.B. Ping-Anfragen, werden von der Firewall verworfen.\n\u0009
\n\u0009\u0009\u0009\n\u0009 \n\u0009 nur SYN-Pakete verwerfen\n\u0009
\n\u0009 Neue Verbindungsanfragen zu gesperrten Ports werden verworfen.\n\u0009\u0009Der Rückkanal für erlaubte Verbindungsanfragen wird akzeptiert.\n\u0009
\n
\n\n
\n\n \n \n \n \n \n \n \n \n \n \n \n\u0009\n\u0009 \n\u0009\n \n \n \n
\n

Firewall-Regeln:


\n\u0009 Die Regeln werden von oben nach unten geprüft.
\n\u0009 Sobald eine Regel zutrifft, wird die angegebene Aktion ausgeführt.\n
\n\u0009 Falls keine Regel zutrifft, wird folgende Standard-Aktion ausgeführt:
\n\u0009 \n\u0009 \n\u0009
\n\u0009 \n \n \n\u0009\u0009\n \n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n \n \n\n\n\n
lfd. Nr.Quell-IPQuell-SubnetzmaskeZiel-IPZiel-SubnetzmaskeProtokollPortAktion
 1TCP80verwerfen
 210.0.0.0255.255.255.0TCP80akzeptieren
\n
\n\u0009
\n\u0009 Aktion für ausgewählte Regel:\n\u0009
\n \n \n \n
\n\n
\n\n\n \n \n \n \n \n \n \n \n\u0009\n\u0009\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n
\n

Neue Regel erstellen


\n\u0009 Alle Felder sind optional und werden
-- falls leer gelassen --
für die Filterung nicht verwendet.\n
Quell-IP:
Quell-Subnetzmaske:
Ziel-IP:
Ziel-Subnetzmaske:
Protokoll: \n\u0009 \n\u0009
Port:
Aktion: \n\u0009 \n\u0009
\n \n
\n
\n
\n \n" ], [ 5358, "server", "<\n \n Konfiguration der Firewall auf dem Vermittlungsrechner\n \n\n \n\n
\n\u0009

Firewall-Konfiguration

\n \n \n\u0009 \n \n \n
\n \n \n \n \n \n \n \n \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n\u0009 \n
\n\u0009\u0009\n Firewall aktivieren
\n\u0009 Erst durch Aktivieren der Firewall werden die Firewall-Regeln angewendet. \n\u0009\u0009Bei deaktivierter Firewall findet keine Filterung statt.\n
\n\u0009\u0009\u0009 \n\u0009 ICMP-Pakete filtern
\n\u0009 Alle ICMP Pakete, z.B. Ping-Anfragen, werden von der Firewall verworfen.\n\u0009
\n\u0009\u0009\u0009\n\u0009 \n\u0009 nur SYN-Pakete verwerfen\n\u0009
\n\u0009 Neue Verbindungsanfragen zu gesperrten Ports werden verworfen.\n\u0009\u0009Der Rückkanal für erlaubte Verbindungsanfragen wird akzeptiert.\n\u0009
\n
\n\n
\n\n \n \n \n \n \n \n \n \n \n \n \n\u0009\n\u0009 \n\u0009\n \n \n \n
\n

Firewall-Regeln:


\n\u0009 Die Regeln werden von oben nach unten geprüft.
\n\u0009 Sobald eine Regel zutrifft, wird die angegebene Aktion ausgeführt.\n
\n\u0009 Falls keine Regel zutrifft, wird folgende Standard-Aktion ausgeführt:
\n\u0009 \n\u0009 \n\u0009
\n\u0009 \n \n \n\u0009\u0009\n \n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n\u0009\u0009\n \n \n\n\n\n
lfd. Nr.Quell-IPQuell-SubnetzmaskeZiel-IPZiel-SubnetzmaskeProtokollPortAktion
 1TCP80verwerfen
 210.0.0.0255.255.255.0TCP80akzeptieren
\n
\n\u0009
\n\u0009 Aktion für ausgewählte Regel:\n\u0009
\n \n \n \n
\n\n
\n\n\n \n \n \n \n \n \n \n \n\u0009\n\u0009\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n
\n

Neue Regel erstellen


\n\u0009 Alle Felder sind optional und werden
-- falls leer gelassen --
für die Filterung nicht verwendet.\n
Quell-IP:
Quell-Subnetzmaske:
Ziel-IP:
Ziel-Subnetzmaske:
Protokoll: \n\u0009 \n\u0009
Port:
Aktion: \n\u0009 \n\u0009
\n \n
\n
\n
\n \n\n" ], [ 5414, "server", "Socket zu 10.0.0.2:52289 geschlossen" ], [ 8000, "browser", "call holeWebseite 10.0.0.1" ], [ 16307, "browser", "page 0 null\nFehler

Server konnte nicht erreicht werden!

" ] ] }