The page konfig changes the firewall at run time (into the snapshot, back into the project through projectWithSimulationChanges). KonfigCases feeds Java's plug-in directly (25 cases, de and en); RouterWebRun plays two stories over the network. Ten Java bugs named, not adopted. The web server answers a method not written GET or POST with 501, as Java does. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
3108 lines
110 KiB
JSON
3108 lines
110 KiB
JSON
{
|
|
"frames": {
|
|
"00000000-0000-0000-0000-000000000301": [
|
|
{
|
|
"time": 506,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "10.0.0.2",
|
|
"targetIp": "10.0.0.1"
|
|
},
|
|
{
|
|
"time": 741,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"arp": 2,
|
|
"senderIp": "10.0.0.1",
|
|
"targetIp": "10.0.0.2"
|
|
},
|
|
{
|
|
"time": 745,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"icmp": 8,
|
|
"icmpCode": 0,
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "20.0.0.2",
|
|
"sequence": 1
|
|
},
|
|
{
|
|
"time": 3513,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 54970,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "S",
|
|
"sequence": 2000000,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3741,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 54970,
|
|
"payload": null,
|
|
"tcpFlags": "SA",
|
|
"sequence": 1000000,
|
|
"acknowledgement": 2000001
|
|
},
|
|
{
|
|
"time": 3741,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 54970,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000001,
|
|
"acknowledgement": 1000001
|
|
},
|
|
{
|
|
"time": 3809,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 54970,
|
|
"destinationPort": 80,
|
|
"payload": "POST /konfig HTTP/1.1\nHost: 10.0.0.1\n\nfirewallActivate=1&onlySYN=1&btnSave=speichern&defaultPolicy=accept&srcIP=&srcMask=&destIP=&destMask=&protocol=*&port=&action=drop",
|
|
"tcpFlags": "P",
|
|
"sequence": 2000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4033,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 54970,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000001,
|
|
"acknowledgement": 2000169
|
|
},
|
|
{
|
|
"time": 4088,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 54970,
|
|
"payload": "HTTP/1.1 200 OK\nContent-type: text/html\n\n<html>\n <head>\n <title>Konfiguration der Firewall auf dem Vermittlungsrechner</title>\n </head>\n\n <body>\n\n <form action=\"konfig\" method=\"POST\">\n\u0009<center> <table border=\"0\" cellspacing=\"5\" width=\"400\"> <tr><td> <h2>Firewall-Konfiguration </h2> </td></tr><tr><td>\n <table bgcolor=\"#E0E0E0\" border=\"0\" width=\"100%\" cellpadding=\"5\">\n <tr><td align=\"center\">\n <table border=\"0\" cellpadding=\"5\">\n <tr>\n <td width=\"10%\">\n\u0009\u0009<input name=\"firewallActivate\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\n </td>\n <td width=\"90%\">Firewall aktivieren</td>\n </tr>\n <tr>\n <td colspan=\"2\">\n\u0009 Erst durch Aktivieren der Firewall werden die Firewall-Regeln angewendet. \n\u0009\u0009Bei deaktivierter Firewall findet keine Filterung statt.\n </td>\n </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"dropICMP\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" />\u0009 \n\u0009 </td>\n\u0009 <td>ICMP-Pakete filtern</td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Alle ICMP Pakete, z.B. Ping-Anfragen, werden von der Firewall verworfen.\n\u0009 </td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"onlySYN\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\u0009\n\u0009 </td>\n\u0009 <td>\n\u0009 nur SYN-Pakete verwerfen\n\u0009 </td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 ",
|
|
"tcpFlags": "",
|
|
"sequence": 1000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4089,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 54970,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000169,
|
|
"acknowledgement": 1001461
|
|
},
|
|
{
|
|
"time": 4315,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 54970,
|
|
"payload": " <td colspan=\"2\">\n\u0009 Neue Verbindungsanfragen zu gesperrten Ports werden verworfen.\n\u0009\u0009Der Rückkanal für erlaubte Verbindungsanfragen wird akzeptiert.\n\u0009 </td>\n\u0009 </tr>\n </table>\n </tr>\n\u0009 <tr>\n <td><input type=\"submit\" name=\"btnSave\" value=\"speichern\"></td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n <!-- Konfiguration der Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td>\n <h3>Firewall-Regeln:</h3><br>\n\u0009 Die Regeln werden von oben nach unten geprüft.<br>\n\u0009 Sobald eine Regel zutrifft, wird die angegebene Aktion ausgeführt.\n </td>\n </tr>\n <tr>\n <td>\n\u0009 Falls keine Regel zutrifft, wird folgende Standard-Aktion ausgeführt:<br>\n\u0009 <select name=\"defaultPolicy\" size=\"1\">\n\u0009 <option value=\"drop\"\n\u0009 \n\u0009 >verwerfen</option>\n\u0009 <option value=\"accept\"\n selected=\"selected\"\u0009 \n\u0009 >akzeptieren</option>\n\u0009 </select>\n\u0009 <input type=\"submit\" name=\"defPolSet\" value=\"speichern\">\n\u0009 </td>\n </tr>\n <tr>\n <td>\n\u0009 <font size=\"-2\">\n <table border=\"1\" width=\"100%\">\n <tr>\n\u0009\u0009<th>lfd. Nr.</th>\n <th>Quell-IP</th>\n\u0009\u0009<th>Quell-Subnetzmaske</th>\n\u0009\u0009<th>Ziel-IP</th>\n\u0009\u0009<th>Ziel-Subnetzmaske</th>\n\u0009\u0009<th>Protokoll</th>\n\u0009\u0009<th>Port</th>\n <th>Aktion</th>\n </tr>\n\n<tr><td><input name=\"r",
|
|
"tcpFlags": "",
|
|
"sequence": 1001461,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4315,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 54970,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000169,
|
|
"acknowledgement": 1002921
|
|
},
|
|
{
|
|
"time": 4538,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 54970,
|
|
"payload": "adioRule\" type=\"radio\" value=\"1\" size=\"10\" maxlength=\"40\" /> 1</td><td>10.0.0.0</td><td>255.255.255.0</td><td></td><td></td><td>TCP</td><td>80</td><td>akzeptieren</td></tr>\n\n </table>\n </font>\n\u0009 </td>\n </tr>\n\u0009<tr>\n\u0009 <td>\n\u0009 Aktion für ausgewählte Regel:\n\u0009 </td>\n\u0009</tr>\n <tr>\n <td>\n <input type=\"submit\" name=\"moveup\" value=\"rauf\">\n <input type=\"submit\" name=\"movedown\" value=\"runter\">\n <input type=\"submit\" name=\"delrule\" value=\"löschen\">\n </td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n\n <!-- Konfiguration neuer Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td colspan=\"2\">\n <h3>Neue Regel erstellen</h3><br>\n\u0009 Alle Felder sind optional und werden <br>-- falls leer gelassen --<br> für die Filterung nicht verwendet.\n </td>\n </tr>\n <tr>\n <td width=\"30%\">Quell-IP: </td>\n <td width=\"70%\"><input name=\"srcIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n\u0009</tr>\n\u0009<tr>\n <td>Quell-Subnetzmaske: </td>\n <td><input name=\"srcMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Ziel-IP: </td>\n <td> <input name=\"destIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Ziel-Subnetzmaske: </td>\n",
|
|
"tcpFlags": "",
|
|
"sequence": 1002921,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4539,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 54970,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000169,
|
|
"acknowledgement": 1004381
|
|
},
|
|
{
|
|
"time": 4762,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 54970,
|
|
"payload": " <td> <input name=\"destMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Protokoll: </td>\n <td> \n\u0009 <select name=\"protocol\" size=\"1\">\n\u0009 <option value=\"*\" >*</option>\n\u0009 <option value=\"TCP\" >TCP</option>\n\u0009 <option value=\"UDP\" >UDP</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td>Port: </td>\n <td> <input name=\"port\" type=\"text\" size=\"5\" maxlength=\"5\" value=\"\"></td>\n </tr>\n <tr>\n <td>Aktion: </td>\n <td> \n\u0009 <select name=\"action\" size=\"1\">\n\u0009 <option value=\"drop\" >verwerfen</option>\n\u0009 <option value=\"accept\" >akzeptieren</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td colspan=\"2\">\n <input type=\"submit\" name=\"addrule\" value=\"hinzufügen\">\n </td>\n </tr>\n </table>\n </td></tr></table></center>\n </form>\n </body>\n</html>\n",
|
|
"tcpFlags": "P",
|
|
"sequence": 1004381,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4762,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 54970,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000169,
|
|
"acknowledgement": 1005330
|
|
},
|
|
{
|
|
"time": 4818,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 54970,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 2000169,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 5040,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 54970,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1005330,
|
|
"acknowledgement": 2000170
|
|
},
|
|
{
|
|
"time": 5096,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 54970,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 1005330,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 5096,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 54970,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000170,
|
|
"acknowledgement": 1005331
|
|
},
|
|
{
|
|
"time": 7001,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"icmp": 8,
|
|
"icmpCode": 0,
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "20.0.0.2",
|
|
"sequence": 1
|
|
},
|
|
{
|
|
"time": 7446,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"icmp": 0,
|
|
"icmpCode": 0,
|
|
"sourceIp": "20.0.0.2",
|
|
"destinationIp": "10.0.0.2",
|
|
"sequence": 1
|
|
}
|
|
],
|
|
"00000000-0000-0000-0000-000000000302": [
|
|
{
|
|
"time": 628,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "10.0.0.2",
|
|
"targetIp": "10.0.0.1"
|
|
},
|
|
{
|
|
"time": 630,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"arp": 2,
|
|
"senderIp": "10.0.0.1",
|
|
"targetIp": "10.0.0.2"
|
|
},
|
|
{
|
|
"time": 859,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"icmp": 8,
|
|
"icmpCode": 0,
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "20.0.0.2",
|
|
"sequence": 1
|
|
},
|
|
{
|
|
"time": 3626,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 54970,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "S",
|
|
"sequence": 2000000,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3629,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 54970,
|
|
"payload": null,
|
|
"tcpFlags": "SA",
|
|
"sequence": 1000000,
|
|
"acknowledgement": 2000001
|
|
},
|
|
{
|
|
"time": 3853,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 54970,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000001,
|
|
"acknowledgement": 1000001
|
|
},
|
|
{
|
|
"time": 3921,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 54970,
|
|
"destinationPort": 80,
|
|
"payload": "POST /konfig HTTP/1.1\nHost: 10.0.0.1\n\nfirewallActivate=1&onlySYN=1&btnSave=speichern&defaultPolicy=accept&srcIP=&srcMask=&destIP=&destMask=&protocol=*&port=&action=drop",
|
|
"tcpFlags": "P",
|
|
"sequence": 2000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3921,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 54970,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000001,
|
|
"acknowledgement": 2000169
|
|
},
|
|
{
|
|
"time": 3977,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 54970,
|
|
"payload": "HTTP/1.1 200 OK\nContent-type: text/html\n\n<html>\n <head>\n <title>Konfiguration der Firewall auf dem Vermittlungsrechner</title>\n </head>\n\n <body>\n\n <form action=\"konfig\" method=\"POST\">\n\u0009<center> <table border=\"0\" cellspacing=\"5\" width=\"400\"> <tr><td> <h2>Firewall-Konfiguration </h2> </td></tr><tr><td>\n <table bgcolor=\"#E0E0E0\" border=\"0\" width=\"100%\" cellpadding=\"5\">\n <tr><td align=\"center\">\n <table border=\"0\" cellpadding=\"5\">\n <tr>\n <td width=\"10%\">\n\u0009\u0009<input name=\"firewallActivate\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\n </td>\n <td width=\"90%\">Firewall aktivieren</td>\n </tr>\n <tr>\n <td colspan=\"2\">\n\u0009 Erst durch Aktivieren der Firewall werden die Firewall-Regeln angewendet. \n\u0009\u0009Bei deaktivierter Firewall findet keine Filterung statt.\n </td>\n </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"dropICMP\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" />\u0009 \n\u0009 </td>\n\u0009 <td>ICMP-Pakete filtern</td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Alle ICMP Pakete, z.B. Ping-Anfragen, werden von der Firewall verworfen.\n\u0009 </td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"onlySYN\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\u0009\n\u0009 </td>\n\u0009 <td>\n\u0009 nur SYN-Pakete verwerfen\n\u0009 </td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 ",
|
|
"tcpFlags": "",
|
|
"sequence": 1000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4200,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 54970,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000169,
|
|
"acknowledgement": 1001461
|
|
},
|
|
{
|
|
"time": 4200,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 54970,
|
|
"payload": " <td colspan=\"2\">\n\u0009 Neue Verbindungsanfragen zu gesperrten Ports werden verworfen.\n\u0009\u0009Der Rückkanal für erlaubte Verbindungsanfragen wird akzeptiert.\n\u0009 </td>\n\u0009 </tr>\n </table>\n </tr>\n\u0009 <tr>\n <td><input type=\"submit\" name=\"btnSave\" value=\"speichern\"></td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n <!-- Konfiguration der Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td>\n <h3>Firewall-Regeln:</h3><br>\n\u0009 Die Regeln werden von oben nach unten geprüft.<br>\n\u0009 Sobald eine Regel zutrifft, wird die angegebene Aktion ausgeführt.\n </td>\n </tr>\n <tr>\n <td>\n\u0009 Falls keine Regel zutrifft, wird folgende Standard-Aktion ausgeführt:<br>\n\u0009 <select name=\"defaultPolicy\" size=\"1\">\n\u0009 <option value=\"drop\"\n\u0009 \n\u0009 >verwerfen</option>\n\u0009 <option value=\"accept\"\n selected=\"selected\"\u0009 \n\u0009 >akzeptieren</option>\n\u0009 </select>\n\u0009 <input type=\"submit\" name=\"defPolSet\" value=\"speichern\">\n\u0009 </td>\n </tr>\n <tr>\n <td>\n\u0009 <font size=\"-2\">\n <table border=\"1\" width=\"100%\">\n <tr>\n\u0009\u0009<th>lfd. Nr.</th>\n <th>Quell-IP</th>\n\u0009\u0009<th>Quell-Subnetzmaske</th>\n\u0009\u0009<th>Ziel-IP</th>\n\u0009\u0009<th>Ziel-Subnetzmaske</th>\n\u0009\u0009<th>Protokoll</th>\n\u0009\u0009<th>Port</th>\n <th>Aktion</th>\n </tr>\n\n<tr><td><input name=\"r",
|
|
"tcpFlags": "",
|
|
"sequence": 1001461,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4427,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 54970,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000169,
|
|
"acknowledgement": 1002921
|
|
},
|
|
{
|
|
"time": 4427,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 54970,
|
|
"payload": "adioRule\" type=\"radio\" value=\"1\" size=\"10\" maxlength=\"40\" /> 1</td><td>10.0.0.0</td><td>255.255.255.0</td><td></td><td></td><td>TCP</td><td>80</td><td>akzeptieren</td></tr>\n\n </table>\n </font>\n\u0009 </td>\n </tr>\n\u0009<tr>\n\u0009 <td>\n\u0009 Aktion für ausgewählte Regel:\n\u0009 </td>\n\u0009</tr>\n <tr>\n <td>\n <input type=\"submit\" name=\"moveup\" value=\"rauf\">\n <input type=\"submit\" name=\"movedown\" value=\"runter\">\n <input type=\"submit\" name=\"delrule\" value=\"löschen\">\n </td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n\n <!-- Konfiguration neuer Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td colspan=\"2\">\n <h3>Neue Regel erstellen</h3><br>\n\u0009 Alle Felder sind optional und werden <br>-- falls leer gelassen --<br> für die Filterung nicht verwendet.\n </td>\n </tr>\n <tr>\n <td width=\"30%\">Quell-IP: </td>\n <td width=\"70%\"><input name=\"srcIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n\u0009</tr>\n\u0009<tr>\n <td>Quell-Subnetzmaske: </td>\n <td><input name=\"srcMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Ziel-IP: </td>\n <td> <input name=\"destIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Ziel-Subnetzmaske: </td>\n",
|
|
"tcpFlags": "",
|
|
"sequence": 1002921,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4650,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 54970,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000169,
|
|
"acknowledgement": 1004381
|
|
},
|
|
{
|
|
"time": 4650,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 54970,
|
|
"payload": " <td> <input name=\"destMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Protokoll: </td>\n <td> \n\u0009 <select name=\"protocol\" size=\"1\">\n\u0009 <option value=\"*\" >*</option>\n\u0009 <option value=\"TCP\" >TCP</option>\n\u0009 <option value=\"UDP\" >UDP</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td>Port: </td>\n <td> <input name=\"port\" type=\"text\" size=\"5\" maxlength=\"5\" value=\"\"></td>\n </tr>\n <tr>\n <td>Aktion: </td>\n <td> \n\u0009 <select name=\"action\" size=\"1\">\n\u0009 <option value=\"drop\" >verwerfen</option>\n\u0009 <option value=\"accept\" >akzeptieren</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td colspan=\"2\">\n <input type=\"submit\" name=\"addrule\" value=\"hinzufügen\">\n </td>\n </tr>\n </table>\n </td></tr></table></center>\n </form>\n </body>\n</html>\n",
|
|
"tcpFlags": "P",
|
|
"sequence": 1004381,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4873,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 54970,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000169,
|
|
"acknowledgement": 1005330
|
|
},
|
|
{
|
|
"time": 4929,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 54970,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 2000169,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4929,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 54970,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1005330,
|
|
"acknowledgement": 2000170
|
|
},
|
|
{
|
|
"time": 4985,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 54970,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 1005330,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 5208,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 54970,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000170,
|
|
"acknowledgement": 1005331
|
|
},
|
|
{
|
|
"time": 7112,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"icmp": 8,
|
|
"icmpCode": 0,
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "20.0.0.2",
|
|
"sequence": 1
|
|
},
|
|
{
|
|
"time": 7335,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"icmp": 0,
|
|
"icmpCode": 0,
|
|
"sourceIp": "20.0.0.2",
|
|
"destinationIp": "10.0.0.2",
|
|
"sequence": 1
|
|
}
|
|
],
|
|
"00000000-0000-0000-0000-000000000302#1": [
|
|
{
|
|
"time": 7112,
|
|
"source": "02:00:00:00:03:22",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "20.0.0.1",
|
|
"targetIp": "20.0.0.2"
|
|
},
|
|
{
|
|
"time": 7223,
|
|
"source": "02:00:00:00:03:13",
|
|
"destination": "02:00:00:00:03:22",
|
|
"arp": 2,
|
|
"senderIp": "20.0.0.2",
|
|
"targetIp": "20.0.0.1"
|
|
},
|
|
{
|
|
"time": 7224,
|
|
"source": "02:00:00:00:03:22",
|
|
"destination": "02:00:00:00:03:13",
|
|
"icmp": 8,
|
|
"icmpCode": 0,
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "20.0.0.2",
|
|
"sequence": 1
|
|
},
|
|
{
|
|
"time": 7335,
|
|
"source": "02:00:00:00:03:13",
|
|
"destination": "02:00:00:00:03:22",
|
|
"icmp": 0,
|
|
"icmpCode": 0,
|
|
"sourceIp": "20.0.0.2",
|
|
"destinationIp": "10.0.0.2",
|
|
"sequence": 1
|
|
}
|
|
],
|
|
"00000000-0000-0000-0000-000000000303": [
|
|
{
|
|
"time": 7168,
|
|
"source": "02:00:00:00:03:22",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "20.0.0.1",
|
|
"targetIp": "20.0.0.2"
|
|
},
|
|
{
|
|
"time": 7168,
|
|
"source": "02:00:00:00:03:13",
|
|
"destination": "02:00:00:00:03:22",
|
|
"arp": 2,
|
|
"senderIp": "20.0.0.2",
|
|
"targetIp": "20.0.0.1"
|
|
},
|
|
{
|
|
"time": 7279,
|
|
"source": "02:00:00:00:03:22",
|
|
"destination": "02:00:00:00:03:13",
|
|
"icmp": 8,
|
|
"icmpCode": 0,
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "20.0.0.2",
|
|
"sequence": 1
|
|
},
|
|
{
|
|
"time": 7279,
|
|
"source": "02:00:00:00:03:13",
|
|
"destination": "02:00:00:00:03:22",
|
|
"icmp": 0,
|
|
"icmpCode": 0,
|
|
"sourceIp": "20.0.0.2",
|
|
"destinationIp": "10.0.0.2",
|
|
"sequence": 1
|
|
}
|
|
]
|
|
},
|
|
"rows": {
|
|
"00000000-0000-0000-0000-000000000301": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:03:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"10.0.0.2",
|
|
"20.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"10.0.0.2:54970",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 2.000.000"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:54970",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"10.0.0.2:54970",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001, ACK: 1.000.001"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"10.0.0.2:54970",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001"
|
|
],
|
|
[
|
|
"7",
|
|
"10.0.0.2:54970",
|
|
"10.0.0.1:80",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"POST /konfig HTTP/1.1\nHost: 10.0.0.1\n\nfirewallActivate=1&onlySYN=1&btnSave=speichern&defaultPolicy=accept&srcIP=&srcMask=&destIP=&destMask=&protocol=*&port=&action=drop"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:54970",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001, ACK: 2.000.169"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:54970",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001"
|
|
],
|
|
[
|
|
"9",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:54970",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"HTTP/1.1 200 OK\nContent-type: text/html\n\n<html>\n <head>\n <title>Konfiguration der Firewall auf dem Vermittlungsrechner</title>\n </head>\n\n <body>\n\n <form action=\"konfig\" method=\"POST\">\n\u0009<center> <table border=\"0\" cellspacing=\"5\" width=\"400\"> <tr><td> <h2>Firewall-Konfiguration </h2> </td></tr><tr><td>\n <table bgcolor=\"#E0E0E0\" border=\"0\" width=\"100%\" cellpadding=\"5\">\n <tr><td align=\"center\">\n <table border=\"0\" cellpadding=\"5\">\n <tr>\n <td width=\"10%\">\n\u0009\u0009<input name=\"firewallActivate\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\n </td>\n <td width=\"90%\">Firewall aktivieren</td>\n </tr>\n <tr>\n <td colspan=\"2\">\n\u0009 Erst durch Aktivieren der Firewall werden die Firewall-Regeln angewendet. \n\u0009\u0009Bei deaktivierter Firewall findet keine Filterung statt.\n </td>\n </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"dropICMP\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" />\u0009 \n\u0009 </td>\n\u0009 <td>ICMP-Pakete filtern</td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Alle ICMP Pakete, z.B. Ping-Anfragen, werden von der Firewall verworfen.\n\u0009 </td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"onlySYN\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\u0009\n\u0009 </td>\n\u0009 <td>\n\u0009 nur SYN-Pakete verwerfen\n\u0009 </td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 "
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"10.0.0.2:54970",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.169, ACK: 1.001.461"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:54970",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.001.461"
|
|
],
|
|
[
|
|
"11",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:54970",
|
|
"HTTP",
|
|
"Anwendung",
|
|
" <td colspan=\"2\">\n\u0009 Neue Verbindungsanfragen zu gesperrten Ports werden verworfen.\n\u0009\u0009Der Rückkanal für erlaubte Verbindungsanfragen wird akzeptiert.\n\u0009 </td>\n\u0009 </tr>\n </table>\n </tr>\n\u0009 <tr>\n <td><input type=\"submit\" name=\"btnSave\" value=\"speichern\"></td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n <!-- Konfiguration der Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td>\n <h3>Firewall-Regeln:</h3><br>\n\u0009 Die Regeln werden von oben nach unten geprüft.<br>\n\u0009 Sobald eine Regel zutrifft, wird die angegebene Aktion ausgeführt.\n </td>\n </tr>\n <tr>\n <td>\n\u0009 Falls keine Regel zutrifft, wird folgende Standard-Aktion ausgeführt:<br>\n\u0009 <select name=\"defaultPolicy\" size=\"1\">\n\u0009 <option value=\"drop\"\n\u0009 \n\u0009 >verwerfen</option>\n\u0009 <option value=\"accept\"\n selected=\"selected\"\u0009 \n\u0009 >akzeptieren</option>\n\u0009 </select>\n\u0009 <input type=\"submit\" name=\"defPolSet\" value=\"speichern\">\n\u0009 </td>\n </tr>\n <tr>\n <td>\n\u0009 <font size=\"-2\">\n <table border=\"1\" width=\"100%\">\n <tr>\n\u0009\u0009<th>lfd. Nr.</th>\n <th>Quell-IP</th>\n\u0009\u0009<th>Quell-Subnetzmaske</th>\n\u0009\u0009<th>Ziel-IP</th>\n\u0009\u0009<th>Ziel-Subnetzmaske</th>\n\u0009\u0009<th>Protokoll</th>\n\u0009\u0009<th>Port</th>\n <th>Aktion</th>\n </tr>\n\n<tr><td><input name=\"r"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"10.0.0.2:54970",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.169, ACK: 1.002.921"
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:54970",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.002.921"
|
|
],
|
|
[
|
|
"13",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:54970",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"adioRule\" type=\"radio\" value=\"1\" size=\"10\" maxlength=\"40\" /> 1</td><td>10.0.0.0</td><td>255.255.255.0</td><td></td><td></td><td>TCP</td><td>80</td><td>akzeptieren</td></tr>\n\n </table>\n </font>\n\u0009 </td>\n </tr>\n\u0009<tr>\n\u0009 <td>\n\u0009 Aktion für ausgewählte Regel:\n\u0009 </td>\n\u0009</tr>\n <tr>\n <td>\n <input type=\"submit\" name=\"moveup\" value=\"rauf\">\n <input type=\"submit\" name=\"movedown\" value=\"runter\">\n <input type=\"submit\" name=\"delrule\" value=\"löschen\">\n </td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n\n <!-- Konfiguration neuer Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td colspan=\"2\">\n <h3>Neue Regel erstellen</h3><br>\n\u0009 Alle Felder sind optional und werden <br>-- falls leer gelassen --<br> für die Filterung nicht verwendet.\n </td>\n </tr>\n <tr>\n <td width=\"30%\">Quell-IP: </td>\n <td width=\"70%\"><input name=\"srcIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n\u0009</tr>\n\u0009<tr>\n <td>Quell-Subnetzmaske: </td>\n <td><input name=\"srcMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Ziel-IP: </td>\n <td> <input name=\"destIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Ziel-Subnetzmaske: </td>\n"
|
|
],
|
|
[
|
|
"14",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"10.0.0.2:54970",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.169, ACK: 1.004.381"
|
|
],
|
|
[
|
|
"15",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:54970",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.004.381"
|
|
],
|
|
[
|
|
"15",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:54970",
|
|
"HTTP",
|
|
"Anwendung",
|
|
" <td> <input name=\"destMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Protokoll: </td>\n <td> \n\u0009 <select name=\"protocol\" size=\"1\">\n\u0009 <option value=\"*\" >*</option>\n\u0009 <option value=\"TCP\" >TCP</option>\n\u0009 <option value=\"UDP\" >UDP</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td>Port: </td>\n <td> <input name=\"port\" type=\"text\" size=\"5\" maxlength=\"5\" value=\"\"></td>\n </tr>\n <tr>\n <td>Aktion: </td>\n <td> \n\u0009 <select name=\"action\" size=\"1\">\n\u0009 <option value=\"drop\" >verwerfen</option>\n\u0009 <option value=\"accept\" >akzeptieren</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td colspan=\"2\">\n <input type=\"submit\" name=\"addrule\" value=\"hinzufügen\">\n </td>\n </tr>\n </table>\n </td></tr></table></center>\n </form>\n </body>\n</html>\n"
|
|
],
|
|
[
|
|
"16",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"16",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"16",
|
|
"10.0.0.2:54970",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.169, ACK: 1.005.330"
|
|
],
|
|
[
|
|
"17",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"17",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"17",
|
|
"10.0.0.2:54970",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 2.000.169"
|
|
],
|
|
[
|
|
"18",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"18",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"18",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:54970",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.005.330, ACK: 2.000.170"
|
|
],
|
|
[
|
|
"19",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"19",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"19",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:54970",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 1.005.330"
|
|
],
|
|
[
|
|
"20",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"20",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"20",
|
|
"10.0.0.2:54970",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.170, ACK: 1.005.331"
|
|
],
|
|
[
|
|
"21",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"21",
|
|
"10.0.0.2",
|
|
"20.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
|
],
|
|
[
|
|
"22",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"22",
|
|
"20.0.0.2",
|
|
"10.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Reply (pong), TTL: 63, Identifier: 1, Seq.-No.: 1"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000302": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:03:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"10.0.0.2",
|
|
"20.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"10.0.0.2:54970",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 2.000.000"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:54970",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"10.0.0.2:54970",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001, ACK: 1.000.001"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"10.0.0.2:54970",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001"
|
|
],
|
|
[
|
|
"7",
|
|
"10.0.0.2:54970",
|
|
"10.0.0.1:80",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"POST /konfig HTTP/1.1\nHost: 10.0.0.1\n\nfirewallActivate=1&onlySYN=1&btnSave=speichern&defaultPolicy=accept&srcIP=&srcMask=&destIP=&destMask=&protocol=*&port=&action=drop"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:54970",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001, ACK: 2.000.169"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:54970",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001"
|
|
],
|
|
[
|
|
"9",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:54970",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"HTTP/1.1 200 OK\nContent-type: text/html\n\n<html>\n <head>\n <title>Konfiguration der Firewall auf dem Vermittlungsrechner</title>\n </head>\n\n <body>\n\n <form action=\"konfig\" method=\"POST\">\n\u0009<center> <table border=\"0\" cellspacing=\"5\" width=\"400\"> <tr><td> <h2>Firewall-Konfiguration </h2> </td></tr><tr><td>\n <table bgcolor=\"#E0E0E0\" border=\"0\" width=\"100%\" cellpadding=\"5\">\n <tr><td align=\"center\">\n <table border=\"0\" cellpadding=\"5\">\n <tr>\n <td width=\"10%\">\n\u0009\u0009<input name=\"firewallActivate\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\n </td>\n <td width=\"90%\">Firewall aktivieren</td>\n </tr>\n <tr>\n <td colspan=\"2\">\n\u0009 Erst durch Aktivieren der Firewall werden die Firewall-Regeln angewendet. \n\u0009\u0009Bei deaktivierter Firewall findet keine Filterung statt.\n </td>\n </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"dropICMP\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" />\u0009 \n\u0009 </td>\n\u0009 <td>ICMP-Pakete filtern</td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Alle ICMP Pakete, z.B. Ping-Anfragen, werden von der Firewall verworfen.\n\u0009 </td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"onlySYN\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\u0009\n\u0009 </td>\n\u0009 <td>\n\u0009 nur SYN-Pakete verwerfen\n\u0009 </td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 "
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"10.0.0.2:54970",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.169, ACK: 1.001.461"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:54970",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.001.461"
|
|
],
|
|
[
|
|
"11",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:54970",
|
|
"HTTP",
|
|
"Anwendung",
|
|
" <td colspan=\"2\">\n\u0009 Neue Verbindungsanfragen zu gesperrten Ports werden verworfen.\n\u0009\u0009Der Rückkanal für erlaubte Verbindungsanfragen wird akzeptiert.\n\u0009 </td>\n\u0009 </tr>\n </table>\n </tr>\n\u0009 <tr>\n <td><input type=\"submit\" name=\"btnSave\" value=\"speichern\"></td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n <!-- Konfiguration der Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td>\n <h3>Firewall-Regeln:</h3><br>\n\u0009 Die Regeln werden von oben nach unten geprüft.<br>\n\u0009 Sobald eine Regel zutrifft, wird die angegebene Aktion ausgeführt.\n </td>\n </tr>\n <tr>\n <td>\n\u0009 Falls keine Regel zutrifft, wird folgende Standard-Aktion ausgeführt:<br>\n\u0009 <select name=\"defaultPolicy\" size=\"1\">\n\u0009 <option value=\"drop\"\n\u0009 \n\u0009 >verwerfen</option>\n\u0009 <option value=\"accept\"\n selected=\"selected\"\u0009 \n\u0009 >akzeptieren</option>\n\u0009 </select>\n\u0009 <input type=\"submit\" name=\"defPolSet\" value=\"speichern\">\n\u0009 </td>\n </tr>\n <tr>\n <td>\n\u0009 <font size=\"-2\">\n <table border=\"1\" width=\"100%\">\n <tr>\n\u0009\u0009<th>lfd. Nr.</th>\n <th>Quell-IP</th>\n\u0009\u0009<th>Quell-Subnetzmaske</th>\n\u0009\u0009<th>Ziel-IP</th>\n\u0009\u0009<th>Ziel-Subnetzmaske</th>\n\u0009\u0009<th>Protokoll</th>\n\u0009\u0009<th>Port</th>\n <th>Aktion</th>\n </tr>\n\n<tr><td><input name=\"r"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"10.0.0.2:54970",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.169, ACK: 1.002.921"
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:54970",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.002.921"
|
|
],
|
|
[
|
|
"13",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:54970",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"adioRule\" type=\"radio\" value=\"1\" size=\"10\" maxlength=\"40\" /> 1</td><td>10.0.0.0</td><td>255.255.255.0</td><td></td><td></td><td>TCP</td><td>80</td><td>akzeptieren</td></tr>\n\n </table>\n </font>\n\u0009 </td>\n </tr>\n\u0009<tr>\n\u0009 <td>\n\u0009 Aktion für ausgewählte Regel:\n\u0009 </td>\n\u0009</tr>\n <tr>\n <td>\n <input type=\"submit\" name=\"moveup\" value=\"rauf\">\n <input type=\"submit\" name=\"movedown\" value=\"runter\">\n <input type=\"submit\" name=\"delrule\" value=\"löschen\">\n </td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n\n <!-- Konfiguration neuer Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td colspan=\"2\">\n <h3>Neue Regel erstellen</h3><br>\n\u0009 Alle Felder sind optional und werden <br>-- falls leer gelassen --<br> für die Filterung nicht verwendet.\n </td>\n </tr>\n <tr>\n <td width=\"30%\">Quell-IP: </td>\n <td width=\"70%\"><input name=\"srcIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n\u0009</tr>\n\u0009<tr>\n <td>Quell-Subnetzmaske: </td>\n <td><input name=\"srcMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Ziel-IP: </td>\n <td> <input name=\"destIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Ziel-Subnetzmaske: </td>\n"
|
|
],
|
|
[
|
|
"14",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"10.0.0.2:54970",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.169, ACK: 1.004.381"
|
|
],
|
|
[
|
|
"15",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:54970",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.004.381"
|
|
],
|
|
[
|
|
"15",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:54970",
|
|
"HTTP",
|
|
"Anwendung",
|
|
" <td> <input name=\"destMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Protokoll: </td>\n <td> \n\u0009 <select name=\"protocol\" size=\"1\">\n\u0009 <option value=\"*\" >*</option>\n\u0009 <option value=\"TCP\" >TCP</option>\n\u0009 <option value=\"UDP\" >UDP</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td>Port: </td>\n <td> <input name=\"port\" type=\"text\" size=\"5\" maxlength=\"5\" value=\"\"></td>\n </tr>\n <tr>\n <td>Aktion: </td>\n <td> \n\u0009 <select name=\"action\" size=\"1\">\n\u0009 <option value=\"drop\" >verwerfen</option>\n\u0009 <option value=\"accept\" >akzeptieren</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td colspan=\"2\">\n <input type=\"submit\" name=\"addrule\" value=\"hinzufügen\">\n </td>\n </tr>\n </table>\n </td></tr></table></center>\n </form>\n </body>\n</html>\n"
|
|
],
|
|
[
|
|
"16",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"16",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"16",
|
|
"10.0.0.2:54970",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.169, ACK: 1.005.330"
|
|
],
|
|
[
|
|
"17",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"17",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"17",
|
|
"10.0.0.2:54970",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 2.000.169"
|
|
],
|
|
[
|
|
"18",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"18",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"18",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:54970",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.005.330, ACK: 2.000.170"
|
|
],
|
|
[
|
|
"19",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"19",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"19",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:54970",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 1.005.330"
|
|
],
|
|
[
|
|
"20",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"20",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"20",
|
|
"10.0.0.2:54970",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.170, ACK: 1.005.331"
|
|
],
|
|
[
|
|
"21",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"21",
|
|
"10.0.0.2",
|
|
"20.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
|
],
|
|
[
|
|
"22",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"22",
|
|
"20.0.0.2",
|
|
"10.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Reply (pong), TTL: 63, Identifier: 1, Seq.-No.: 1"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000302#1": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:03:22",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"20.0.0.1",
|
|
"20.0.0.2",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 20.0.0.2 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.2]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:03:13",
|
|
"02:00:00:00:03:22",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"20.0.0.2",
|
|
"20.0.0.1",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:03:13 [op=REPLY, sender=02:00:00:00:03:13|20.0.0.2, target=02:00:00:00:03:22|20.0.0.1]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:03:22",
|
|
"02:00:00:00:03:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"10.0.0.2",
|
|
"20.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Request (ping), TTL: 63, Identifier: 1, Seq.-No.: 1"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:03:13",
|
|
"02:00:00:00:03:22",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"20.0.0.2",
|
|
"10.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Reply (pong), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000303": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:03:22",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"20.0.0.1",
|
|
"20.0.0.2",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 20.0.0.2 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.2]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:03:13",
|
|
"02:00:00:00:03:22",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"20.0.0.2",
|
|
"20.0.0.1",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:03:13 [op=REPLY, sender=02:00:00:00:03:13|20.0.0.2, target=02:00:00:00:03:22|20.0.0.1]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:03:22",
|
|
"02:00:00:00:03:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"10.0.0.2",
|
|
"20.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Request (ping), TTL: 63, Identifier: 1, Seq.-No.: 1"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:03:13",
|
|
"02:00:00:00:03:22",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"20.0.0.2",
|
|
"10.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Reply (pong), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
|
]
|
|
]
|
|
},
|
|
"layeredRows": {
|
|
"00000000-0000-0000-0000-000000000301": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:03:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"10.0.0.2",
|
|
"20.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"54970",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 2.000.000"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"80",
|
|
"54970",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"54970",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001, ACK: 1.000.001"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"54970",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001"
|
|
],
|
|
[
|
|
"7",
|
|
null,
|
|
null,
|
|
"HTTP",
|
|
"Anwendung",
|
|
"POST /konfig HTTP/1.1\nHost: 10.0.0.1\n\nfirewallActivate=1&onlySYN=1&btnSave=speichern&defaultPolicy=accept&srcIP=&srcMask=&destIP=&destMask=&protocol=*&port=&action=drop"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"80",
|
|
"54970",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001, ACK: 2.000.169"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"80",
|
|
"54970",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001"
|
|
],
|
|
[
|
|
"9",
|
|
null,
|
|
null,
|
|
"HTTP",
|
|
"Anwendung",
|
|
"HTTP/1.1 200 OK\nContent-type: text/html\n\n<html>\n <head>\n <title>Konfiguration der Firewall auf dem Vermittlungsrechner</title>\n </head>\n\n <body>\n\n <form action=\"konfig\" method=\"POST\">\n\u0009<center> <table border=\"0\" cellspacing=\"5\" width=\"400\"> <tr><td> <h2>Firewall-Konfiguration </h2> </td></tr><tr><td>\n <table bgcolor=\"#E0E0E0\" border=\"0\" width=\"100%\" cellpadding=\"5\">\n <tr><td align=\"center\">\n <table border=\"0\" cellpadding=\"5\">\n <tr>\n <td width=\"10%\">\n\u0009\u0009<input name=\"firewallActivate\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\n </td>\n <td width=\"90%\">Firewall aktivieren</td>\n </tr>\n <tr>\n <td colspan=\"2\">\n\u0009 Erst durch Aktivieren der Firewall werden die Firewall-Regeln angewendet. \n\u0009\u0009Bei deaktivierter Firewall findet keine Filterung statt.\n </td>\n </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"dropICMP\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" />\u0009 \n\u0009 </td>\n\u0009 <td>ICMP-Pakete filtern</td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Alle ICMP Pakete, z.B. Ping-Anfragen, werden von der Firewall verworfen.\n\u0009 </td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"onlySYN\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\u0009\n\u0009 </td>\n\u0009 <td>\n\u0009 nur SYN-Pakete verwerfen\n\u0009 </td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 "
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"54970",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.169, ACK: 1.001.461"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"80",
|
|
"54970",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.001.461"
|
|
],
|
|
[
|
|
"11",
|
|
null,
|
|
null,
|
|
"HTTP",
|
|
"Anwendung",
|
|
" <td colspan=\"2\">\n\u0009 Neue Verbindungsanfragen zu gesperrten Ports werden verworfen.\n\u0009\u0009Der Rückkanal für erlaubte Verbindungsanfragen wird akzeptiert.\n\u0009 </td>\n\u0009 </tr>\n </table>\n </tr>\n\u0009 <tr>\n <td><input type=\"submit\" name=\"btnSave\" value=\"speichern\"></td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n <!-- Konfiguration der Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td>\n <h3>Firewall-Regeln:</h3><br>\n\u0009 Die Regeln werden von oben nach unten geprüft.<br>\n\u0009 Sobald eine Regel zutrifft, wird die angegebene Aktion ausgeführt.\n </td>\n </tr>\n <tr>\n <td>\n\u0009 Falls keine Regel zutrifft, wird folgende Standard-Aktion ausgeführt:<br>\n\u0009 <select name=\"defaultPolicy\" size=\"1\">\n\u0009 <option value=\"drop\"\n\u0009 \n\u0009 >verwerfen</option>\n\u0009 <option value=\"accept\"\n selected=\"selected\"\u0009 \n\u0009 >akzeptieren</option>\n\u0009 </select>\n\u0009 <input type=\"submit\" name=\"defPolSet\" value=\"speichern\">\n\u0009 </td>\n </tr>\n <tr>\n <td>\n\u0009 <font size=\"-2\">\n <table border=\"1\" width=\"100%\">\n <tr>\n\u0009\u0009<th>lfd. Nr.</th>\n <th>Quell-IP</th>\n\u0009\u0009<th>Quell-Subnetzmaske</th>\n\u0009\u0009<th>Ziel-IP</th>\n\u0009\u0009<th>Ziel-Subnetzmaske</th>\n\u0009\u0009<th>Protokoll</th>\n\u0009\u0009<th>Port</th>\n <th>Aktion</th>\n </tr>\n\n<tr><td><input name=\"r"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"54970",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.169, ACK: 1.002.921"
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"80",
|
|
"54970",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.002.921"
|
|
],
|
|
[
|
|
"13",
|
|
null,
|
|
null,
|
|
"HTTP",
|
|
"Anwendung",
|
|
"adioRule\" type=\"radio\" value=\"1\" size=\"10\" maxlength=\"40\" /> 1</td><td>10.0.0.0</td><td>255.255.255.0</td><td></td><td></td><td>TCP</td><td>80</td><td>akzeptieren</td></tr>\n\n </table>\n </font>\n\u0009 </td>\n </tr>\n\u0009<tr>\n\u0009 <td>\n\u0009 Aktion für ausgewählte Regel:\n\u0009 </td>\n\u0009</tr>\n <tr>\n <td>\n <input type=\"submit\" name=\"moveup\" value=\"rauf\">\n <input type=\"submit\" name=\"movedown\" value=\"runter\">\n <input type=\"submit\" name=\"delrule\" value=\"löschen\">\n </td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n\n <!-- Konfiguration neuer Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td colspan=\"2\">\n <h3>Neue Regel erstellen</h3><br>\n\u0009 Alle Felder sind optional und werden <br>-- falls leer gelassen --<br> für die Filterung nicht verwendet.\n </td>\n </tr>\n <tr>\n <td width=\"30%\">Quell-IP: </td>\n <td width=\"70%\"><input name=\"srcIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n\u0009</tr>\n\u0009<tr>\n <td>Quell-Subnetzmaske: </td>\n <td><input name=\"srcMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Ziel-IP: </td>\n <td> <input name=\"destIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Ziel-Subnetzmaske: </td>\n"
|
|
],
|
|
[
|
|
"14",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"54970",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.169, ACK: 1.004.381"
|
|
],
|
|
[
|
|
"15",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"80",
|
|
"54970",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.004.381"
|
|
],
|
|
[
|
|
"15",
|
|
null,
|
|
null,
|
|
"HTTP",
|
|
"Anwendung",
|
|
" <td> <input name=\"destMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Protokoll: </td>\n <td> \n\u0009 <select name=\"protocol\" size=\"1\">\n\u0009 <option value=\"*\" >*</option>\n\u0009 <option value=\"TCP\" >TCP</option>\n\u0009 <option value=\"UDP\" >UDP</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td>Port: </td>\n <td> <input name=\"port\" type=\"text\" size=\"5\" maxlength=\"5\" value=\"\"></td>\n </tr>\n <tr>\n <td>Aktion: </td>\n <td> \n\u0009 <select name=\"action\" size=\"1\">\n\u0009 <option value=\"drop\" >verwerfen</option>\n\u0009 <option value=\"accept\" >akzeptieren</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td colspan=\"2\">\n <input type=\"submit\" name=\"addrule\" value=\"hinzufügen\">\n </td>\n </tr>\n </table>\n </td></tr></table></center>\n </form>\n </body>\n</html>\n"
|
|
],
|
|
[
|
|
"16",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"16",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"16",
|
|
"54970",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.169, ACK: 1.005.330"
|
|
],
|
|
[
|
|
"17",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"17",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"17",
|
|
"54970",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 2.000.169"
|
|
],
|
|
[
|
|
"18",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"18",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"18",
|
|
"80",
|
|
"54970",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.005.330, ACK: 2.000.170"
|
|
],
|
|
[
|
|
"19",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"19",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"19",
|
|
"80",
|
|
"54970",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 1.005.330"
|
|
],
|
|
[
|
|
"20",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"20",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"20",
|
|
"54970",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.170, ACK: 1.005.331"
|
|
],
|
|
[
|
|
"21",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"21",
|
|
"10.0.0.2",
|
|
"20.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
|
],
|
|
[
|
|
"22",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"22",
|
|
"20.0.0.2",
|
|
"10.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Reply (pong), TTL: 63, Identifier: 1, Seq.-No.: 1"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000302": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:03:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"10.0.0.2",
|
|
"20.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"54970",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 2.000.000"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"80",
|
|
"54970",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"54970",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001, ACK: 1.000.001"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"54970",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001"
|
|
],
|
|
[
|
|
"7",
|
|
null,
|
|
null,
|
|
"HTTP",
|
|
"Anwendung",
|
|
"POST /konfig HTTP/1.1\nHost: 10.0.0.1\n\nfirewallActivate=1&onlySYN=1&btnSave=speichern&defaultPolicy=accept&srcIP=&srcMask=&destIP=&destMask=&protocol=*&port=&action=drop"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"80",
|
|
"54970",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001, ACK: 2.000.169"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"80",
|
|
"54970",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001"
|
|
],
|
|
[
|
|
"9",
|
|
null,
|
|
null,
|
|
"HTTP",
|
|
"Anwendung",
|
|
"HTTP/1.1 200 OK\nContent-type: text/html\n\n<html>\n <head>\n <title>Konfiguration der Firewall auf dem Vermittlungsrechner</title>\n </head>\n\n <body>\n\n <form action=\"konfig\" method=\"POST\">\n\u0009<center> <table border=\"0\" cellspacing=\"5\" width=\"400\"> <tr><td> <h2>Firewall-Konfiguration </h2> </td></tr><tr><td>\n <table bgcolor=\"#E0E0E0\" border=\"0\" width=\"100%\" cellpadding=\"5\">\n <tr><td align=\"center\">\n <table border=\"0\" cellpadding=\"5\">\n <tr>\n <td width=\"10%\">\n\u0009\u0009<input name=\"firewallActivate\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\n </td>\n <td width=\"90%\">Firewall aktivieren</td>\n </tr>\n <tr>\n <td colspan=\"2\">\n\u0009 Erst durch Aktivieren der Firewall werden die Firewall-Regeln angewendet. \n\u0009\u0009Bei deaktivierter Firewall findet keine Filterung statt.\n </td>\n </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"dropICMP\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" />\u0009 \n\u0009 </td>\n\u0009 <td>ICMP-Pakete filtern</td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Alle ICMP Pakete, z.B. Ping-Anfragen, werden von der Firewall verworfen.\n\u0009 </td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"onlySYN\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\u0009\n\u0009 </td>\n\u0009 <td>\n\u0009 nur SYN-Pakete verwerfen\n\u0009 </td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 "
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"54970",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.169, ACK: 1.001.461"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"80",
|
|
"54970",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.001.461"
|
|
],
|
|
[
|
|
"11",
|
|
null,
|
|
null,
|
|
"HTTP",
|
|
"Anwendung",
|
|
" <td colspan=\"2\">\n\u0009 Neue Verbindungsanfragen zu gesperrten Ports werden verworfen.\n\u0009\u0009Der Rückkanal für erlaubte Verbindungsanfragen wird akzeptiert.\n\u0009 </td>\n\u0009 </tr>\n </table>\n </tr>\n\u0009 <tr>\n <td><input type=\"submit\" name=\"btnSave\" value=\"speichern\"></td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n <!-- Konfiguration der Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td>\n <h3>Firewall-Regeln:</h3><br>\n\u0009 Die Regeln werden von oben nach unten geprüft.<br>\n\u0009 Sobald eine Regel zutrifft, wird die angegebene Aktion ausgeführt.\n </td>\n </tr>\n <tr>\n <td>\n\u0009 Falls keine Regel zutrifft, wird folgende Standard-Aktion ausgeführt:<br>\n\u0009 <select name=\"defaultPolicy\" size=\"1\">\n\u0009 <option value=\"drop\"\n\u0009 \n\u0009 >verwerfen</option>\n\u0009 <option value=\"accept\"\n selected=\"selected\"\u0009 \n\u0009 >akzeptieren</option>\n\u0009 </select>\n\u0009 <input type=\"submit\" name=\"defPolSet\" value=\"speichern\">\n\u0009 </td>\n </tr>\n <tr>\n <td>\n\u0009 <font size=\"-2\">\n <table border=\"1\" width=\"100%\">\n <tr>\n\u0009\u0009<th>lfd. Nr.</th>\n <th>Quell-IP</th>\n\u0009\u0009<th>Quell-Subnetzmaske</th>\n\u0009\u0009<th>Ziel-IP</th>\n\u0009\u0009<th>Ziel-Subnetzmaske</th>\n\u0009\u0009<th>Protokoll</th>\n\u0009\u0009<th>Port</th>\n <th>Aktion</th>\n </tr>\n\n<tr><td><input name=\"r"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"54970",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.169, ACK: 1.002.921"
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"80",
|
|
"54970",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.002.921"
|
|
],
|
|
[
|
|
"13",
|
|
null,
|
|
null,
|
|
"HTTP",
|
|
"Anwendung",
|
|
"adioRule\" type=\"radio\" value=\"1\" size=\"10\" maxlength=\"40\" /> 1</td><td>10.0.0.0</td><td>255.255.255.0</td><td></td><td></td><td>TCP</td><td>80</td><td>akzeptieren</td></tr>\n\n </table>\n </font>\n\u0009 </td>\n </tr>\n\u0009<tr>\n\u0009 <td>\n\u0009 Aktion für ausgewählte Regel:\n\u0009 </td>\n\u0009</tr>\n <tr>\n <td>\n <input type=\"submit\" name=\"moveup\" value=\"rauf\">\n <input type=\"submit\" name=\"movedown\" value=\"runter\">\n <input type=\"submit\" name=\"delrule\" value=\"löschen\">\n </td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n\n <!-- Konfiguration neuer Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td colspan=\"2\">\n <h3>Neue Regel erstellen</h3><br>\n\u0009 Alle Felder sind optional und werden <br>-- falls leer gelassen --<br> für die Filterung nicht verwendet.\n </td>\n </tr>\n <tr>\n <td width=\"30%\">Quell-IP: </td>\n <td width=\"70%\"><input name=\"srcIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n\u0009</tr>\n\u0009<tr>\n <td>Quell-Subnetzmaske: </td>\n <td><input name=\"srcMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Ziel-IP: </td>\n <td> <input name=\"destIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Ziel-Subnetzmaske: </td>\n"
|
|
],
|
|
[
|
|
"14",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"54970",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.169, ACK: 1.004.381"
|
|
],
|
|
[
|
|
"15",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"80",
|
|
"54970",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.004.381"
|
|
],
|
|
[
|
|
"15",
|
|
null,
|
|
null,
|
|
"HTTP",
|
|
"Anwendung",
|
|
" <td> <input name=\"destMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Protokoll: </td>\n <td> \n\u0009 <select name=\"protocol\" size=\"1\">\n\u0009 <option value=\"*\" >*</option>\n\u0009 <option value=\"TCP\" >TCP</option>\n\u0009 <option value=\"UDP\" >UDP</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td>Port: </td>\n <td> <input name=\"port\" type=\"text\" size=\"5\" maxlength=\"5\" value=\"\"></td>\n </tr>\n <tr>\n <td>Aktion: </td>\n <td> \n\u0009 <select name=\"action\" size=\"1\">\n\u0009 <option value=\"drop\" >verwerfen</option>\n\u0009 <option value=\"accept\" >akzeptieren</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td colspan=\"2\">\n <input type=\"submit\" name=\"addrule\" value=\"hinzufügen\">\n </td>\n </tr>\n </table>\n </td></tr></table></center>\n </form>\n </body>\n</html>\n"
|
|
],
|
|
[
|
|
"16",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"16",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"16",
|
|
"54970",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.169, ACK: 1.005.330"
|
|
],
|
|
[
|
|
"17",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"17",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"17",
|
|
"54970",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 2.000.169"
|
|
],
|
|
[
|
|
"18",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"18",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"18",
|
|
"80",
|
|
"54970",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.005.330, ACK: 2.000.170"
|
|
],
|
|
[
|
|
"19",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"19",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"19",
|
|
"80",
|
|
"54970",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 1.005.330"
|
|
],
|
|
[
|
|
"20",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"20",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"20",
|
|
"54970",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.170, ACK: 1.005.331"
|
|
],
|
|
[
|
|
"21",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"21",
|
|
"10.0.0.2",
|
|
"20.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
|
],
|
|
[
|
|
"22",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"22",
|
|
"20.0.0.2",
|
|
"10.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Reply (pong), TTL: 63, Identifier: 1, Seq.-No.: 1"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000302#1": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:03:22",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"20.0.0.1",
|
|
"20.0.0.2",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 20.0.0.2 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.2]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:03:13",
|
|
"02:00:00:00:03:22",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"20.0.0.2",
|
|
"20.0.0.1",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:03:13 [op=REPLY, sender=02:00:00:00:03:13|20.0.0.2, target=02:00:00:00:03:22|20.0.0.1]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:03:22",
|
|
"02:00:00:00:03:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"10.0.0.2",
|
|
"20.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Request (ping), TTL: 63, Identifier: 1, Seq.-No.: 1"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:03:13",
|
|
"02:00:00:00:03:22",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"20.0.0.2",
|
|
"10.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Reply (pong), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000303": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:03:22",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"20.0.0.1",
|
|
"20.0.0.2",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 20.0.0.2 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.2]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:03:13",
|
|
"02:00:00:00:03:22",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"20.0.0.2",
|
|
"20.0.0.1",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:03:13 [op=REPLY, sender=02:00:00:00:03:13|20.0.0.2, target=02:00:00:00:03:22|20.0.0.1]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:03:22",
|
|
"02:00:00:00:03:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"10.0.0.2",
|
|
"20.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Request (ping), TTL: 63, Identifier: 1, Seq.-No.: 1"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:03:13",
|
|
"02:00:00:00:03:22",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"20.0.0.2",
|
|
"10.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Reply (pong), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
|
]
|
|
]
|
|
},
|
|
"events": [
|
|
[
|
|
208,
|
|
"browser",
|
|
"update"
|
|
],
|
|
[
|
|
209,
|
|
"server",
|
|
"null"
|
|
],
|
|
[
|
|
210,
|
|
"server",
|
|
"Annahme von Verbindungsanfragen gestartet"
|
|
],
|
|
[
|
|
501,
|
|
"ping",
|
|
"call sendProbe 20.0.0.2"
|
|
],
|
|
[
|
|
3496,
|
|
"ping",
|
|
"returned null"
|
|
],
|
|
[
|
|
3500,
|
|
"browser",
|
|
"call holeWebseite 10.0.0.1/konfig firewallActivate=1&onlySYN=1&btnSave=speichern&defaultPolicy=accept&srcIP=&srcMask=&destIP=&destMask=&protocol=*&port=&action=drop"
|
|
],
|
|
[
|
|
3920,
|
|
"server",
|
|
"Verbindung zu 10.0.0.2:54970 hergestellt"
|
|
],
|
|
[
|
|
3921,
|
|
"server",
|
|
">>POST /konfig HTTP/1.1\nHost: 10.0.0.1\n\nfirewallActivate=1&onlySYN=1&btnSave=speichern&defaultPolicy=accept&srcIP=&srcMask=&destIP=&destMask=&protocol=*&port=&action=drop"
|
|
],
|
|
[
|
|
4783,
|
|
"browser",
|
|
"page 200 text/html\n<html>\n <head>\n <title>Konfiguration der Firewall auf dem Vermittlungsrechner</title>\n </head>\n\n <body>\n\n <form action=\"konfig\" method=\"POST\">\n\u0009<center> <table border=\"0\" cellspacing=\"5\" width=\"400\"> <tr><td> <h2>Firewall-Konfiguration </h2> </td></tr><tr><td>\n <table bgcolor=\"#E0E0E0\" border=\"0\" width=\"100%\" cellpadding=\"5\">\n <tr><td align=\"center\">\n <table border=\"0\" cellpadding=\"5\">\n <tr>\n <td width=\"10%\">\n\u0009\u0009<input name=\"firewallActivate\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\n </td>\n <td width=\"90%\">Firewall aktivieren</td>\n </tr>\n <tr>\n <td colspan=\"2\">\n\u0009 Erst durch Aktivieren der Firewall werden die Firewall-Regeln angewendet. \n\u0009\u0009Bei deaktivierter Firewall findet keine Filterung statt.\n </td>\n </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"dropICMP\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" />\u0009 \n\u0009 </td>\n\u0009 <td>ICMP-Pakete filtern</td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Alle ICMP Pakete, z.B. Ping-Anfragen, werden von der Firewall verworfen.\n\u0009 </td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"onlySYN\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\u0009\n\u0009 </td>\n\u0009 <td>\n\u0009 nur SYN-Pakete verwerfen\n\u0009 </td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Neue Verbindungsanfragen zu gesperrten Ports werden verworfen.\n\u0009\u0009Der Rückkanal für erlaubte Verbindungsanfragen wird akzeptiert.\n\u0009 </td>\n\u0009 </tr>\n </table>\n </tr>\n\u0009 <tr>\n <td><input type=\"submit\" name=\"btnSave\" value=\"speichern\"></td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n <!-- Konfiguration der Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td>\n <h3>Firewall-Regeln:</h3><br>\n\u0009 Die Regeln werden von oben nach unten geprüft.<br>\n\u0009 Sobald eine Regel zutrifft, wird die angegebene Aktion ausgeführt.\n </td>\n </tr>\n <tr>\n <td>\n\u0009 Falls keine Regel zutrifft, wird folgende Standard-Aktion ausgeführt:<br>\n\u0009 <select name=\"defaultPolicy\" size=\"1\">\n\u0009 <option value=\"drop\"\n\u0009 \n\u0009 >verwerfen</option>\n\u0009 <option value=\"accept\"\n selected=\"selected\"\u0009 \n\u0009 >akzeptieren</option>\n\u0009 </select>\n\u0009 <input type=\"submit\" name=\"defPolSet\" value=\"speichern\">\n\u0009 </td>\n </tr>\n <tr>\n <td>\n\u0009 <font size=\"-2\">\n <table border=\"1\" width=\"100%\">\n <tr>\n\u0009\u0009<th>lfd. Nr.</th>\n <th>Quell-IP</th>\n\u0009\u0009<th>Quell-Subnetzmaske</th>\n\u0009\u0009<th>Ziel-IP</th>\n\u0009\u0009<th>Ziel-Subnetzmaske</th>\n\u0009\u0009<th>Protokoll</th>\n\u0009\u0009<th>Port</th>\n <th>Aktion</th>\n </tr>\n\n<tr><td><input name=\"radioRule\" type=\"radio\" value=\"1\" size=\"10\" maxlength=\"40\" /> 1</td><td>10.0.0.0</td><td>255.255.255.0</td><td></td><td></td><td>TCP</td><td>80</td><td>akzeptieren</td></tr>\n\n </table>\n </font>\n\u0009 </td>\n </tr>\n\u0009<tr>\n\u0009 <td>\n\u0009 Aktion für ausgewählte Regel:\n\u0009 </td>\n\u0009</tr>\n <tr>\n <td>\n <input type=\"submit\" name=\"moveup\" value=\"rauf\">\n <input type=\"submit\" name=\"movedown\" value=\"runter\">\n <input type=\"submit\" name=\"delrule\" value=\"löschen\">\n </td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n\n <!-- Konfiguration neuer Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td colspan=\"2\">\n <h3>Neue Regel erstellen</h3><br>\n\u0009 Alle Felder sind optional und werden <br>-- falls leer gelassen --<br> für die Filterung nicht verwendet.\n </td>\n </tr>\n <tr>\n <td width=\"30%\">Quell-IP: </td>\n <td width=\"70%\"><input name=\"srcIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n\u0009</tr>\n\u0009<tr>\n <td>Quell-Subnetzmaske: </td>\n <td><input name=\"srcMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Ziel-IP: </td>\n <td> <input name=\"destIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Ziel-Subnetzmaske: </td>\n <td> <input name=\"destMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Protokoll: </td>\n <td> \n\u0009 <select name=\"protocol\" size=\"1\">\n\u0009 <option value=\"*\" >*</option>\n\u0009 <option value=\"TCP\" >TCP</option>\n\u0009 <option value=\"UDP\" >UDP</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td>Port: </td>\n <td> <input name=\"port\" type=\"text\" size=\"5\" maxlength=\"5\" value=\"\"></td>\n </tr>\n <tr>\n <td>Aktion: </td>\n <td> \n\u0009 <select name=\"action\" size=\"1\">\n\u0009 <option value=\"drop\" >verwerfen</option>\n\u0009 <option value=\"accept\" >akzeptieren</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td colspan=\"2\">\n <input type=\"submit\" name=\"addrule\" value=\"hinzufügen\">\n </td>\n </tr>\n </table>\n </td></tr></table></center>\n </form>\n </body>\n</html>"
|
|
],
|
|
[
|
|
4873,
|
|
"server",
|
|
"<<HTTP/1.1 200 OK\nContent-type: text/html\n\n<html>\n <head>\n <title>Konfiguration der Firewall auf dem Vermittlungsrechner</title>\n </head>\n\n <body>\n\n <form action=\"konfig\" method=\"POST\">\n\u0009<center> <table border=\"0\" cellspacing=\"5\" width=\"400\"> <tr><td> <h2>Firewall-Konfiguration </h2> </td></tr><tr><td>\n <table bgcolor=\"#E0E0E0\" border=\"0\" width=\"100%\" cellpadding=\"5\">\n <tr><td align=\"center\">\n <table border=\"0\" cellpadding=\"5\">\n <tr>\n <td width=\"10%\">\n\u0009\u0009<input name=\"firewallActivate\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\n </td>\n <td width=\"90%\">Firewall aktivieren</td>\n </tr>\n <tr>\n <td colspan=\"2\">\n\u0009 Erst durch Aktivieren der Firewall werden die Firewall-Regeln angewendet. \n\u0009\u0009Bei deaktivierter Firewall findet keine Filterung statt.\n </td>\n </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"dropICMP\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" />\u0009 \n\u0009 </td>\n\u0009 <td>ICMP-Pakete filtern</td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Alle ICMP Pakete, z.B. Ping-Anfragen, werden von der Firewall verworfen.\n\u0009 </td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"onlySYN\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\u0009\n\u0009 </td>\n\u0009 <td>\n\u0009 nur SYN-Pakete verwerfen\n\u0009 </td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Neue Verbindungsanfragen zu gesperrten Ports werden verworfen.\n\u0009\u0009Der Rückkanal für erlaubte Verbindungsanfragen wird akzeptiert.\n\u0009 </td>\n\u0009 </tr>\n </table>\n </tr>\n\u0009 <tr>\n <td><input type=\"submit\" name=\"btnSave\" value=\"speichern\"></td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n <!-- Konfiguration der Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td>\n <h3>Firewall-Regeln:</h3><br>\n\u0009 Die Regeln werden von oben nach unten geprüft.<br>\n\u0009 Sobald eine Regel zutrifft, wird die angegebene Aktion ausgeführt.\n </td>\n </tr>\n <tr>\n <td>\n\u0009 Falls keine Regel zutrifft, wird folgende Standard-Aktion ausgeführt:<br>\n\u0009 <select name=\"defaultPolicy\" size=\"1\">\n\u0009 <option value=\"drop\"\n\u0009 \n\u0009 >verwerfen</option>\n\u0009 <option value=\"accept\"\n selected=\"selected\"\u0009 \n\u0009 >akzeptieren</option>\n\u0009 </select>\n\u0009 <input type=\"submit\" name=\"defPolSet\" value=\"speichern\">\n\u0009 </td>\n </tr>\n <tr>\n <td>\n\u0009 <font size=\"-2\">\n <table border=\"1\" width=\"100%\">\n <tr>\n\u0009\u0009<th>lfd. Nr.</th>\n <th>Quell-IP</th>\n\u0009\u0009<th>Quell-Subnetzmaske</th>\n\u0009\u0009<th>Ziel-IP</th>\n\u0009\u0009<th>Ziel-Subnetzmaske</th>\n\u0009\u0009<th>Protokoll</th>\n\u0009\u0009<th>Port</th>\n <th>Aktion</th>\n </tr>\n\n<tr><td><input name=\"radioRule\" type=\"radio\" value=\"1\" size=\"10\" maxlength=\"40\" /> 1</td><td>10.0.0.0</td><td>255.255.255.0</td><td></td><td></td><td>TCP</td><td>80</td><td>akzeptieren</td></tr>\n\n </table>\n </font>\n\u0009 </td>\n </tr>\n\u0009<tr>\n\u0009 <td>\n\u0009 Aktion für ausgewählte Regel:\n\u0009 </td>\n\u0009</tr>\n <tr>\n <td>\n <input type=\"submit\" name=\"moveup\" value=\"rauf\">\n <input type=\"submit\" name=\"movedown\" value=\"runter\">\n <input type=\"submit\" name=\"delrule\" value=\"löschen\">\n </td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n\n <!-- Konfiguration neuer Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td colspan=\"2\">\n <h3>Neue Regel erstellen</h3><br>\n\u0009 Alle Felder sind optional und werden <br>-- falls leer gelassen --<br> für die Filterung nicht verwendet.\n </td>\n </tr>\n <tr>\n <td width=\"30%\">Quell-IP: </td>\n <td width=\"70%\"><input name=\"srcIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n\u0009</tr>\n\u0009<tr>\n <td>Quell-Subnetzmaske: </td>\n <td><input name=\"srcMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Ziel-IP: </td>\n <td> <input name=\"destIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Ziel-Subnetzmaske: </td>\n <td> <input name=\"destMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Protokoll: </td>\n <td> \n\u0009 <select name=\"protocol\" size=\"1\">\n\u0009 <option value=\"*\" >*</option>\n\u0009 <option value=\"TCP\" >TCP</option>\n\u0009 <option value=\"UDP\" >UDP</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td>Port: </td>\n <td> <input name=\"port\" type=\"text\" size=\"5\" maxlength=\"5\" value=\"\"></td>\n </tr>\n <tr>\n <td>Aktion: </td>\n <td> \n\u0009 <select name=\"action\" size=\"1\">\n\u0009 <option value=\"drop\" >verwerfen</option>\n\u0009 <option value=\"accept\" >akzeptieren</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td colspan=\"2\">\n <input type=\"submit\" name=\"addrule\" value=\"hinzufügen\">\n </td>\n </tr>\n </table>\n </td></tr></table></center>\n </form>\n </body>\n</html>\n"
|
|
],
|
|
[
|
|
4929,
|
|
"server",
|
|
"Socket zu 10.0.0.2:54970 geschlossen"
|
|
],
|
|
[
|
|
7001,
|
|
"ping",
|
|
"call sendProbe 20.0.0.2"
|
|
],
|
|
[
|
|
7446,
|
|
"ping",
|
|
"returned answer"
|
|
]
|
|
]
|
|
}
|