Routers and home routers start a web server on port 80 with Java's index, log and routes pages in the project's language (routerPages.ts); the firewall keeps a log per node that outlives a new start; RIP routes carry the telling router's public address. TCP counts sequence numbers and segments in Java's characters, not bytes. RouterWebRun records six stories, with firewalls now built by ScenarioNetwork. Not taken from Java: its router server sometimes never listening (a race in setAktiv), and </titel>. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2502 lines
96 KiB
JSON
2502 lines
96 KiB
JSON
{
|
|
"frames": {
|
|
"00000000-0000-0000-0000-000000000301": [
|
|
{
|
|
"time": 521,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "10.0.0.2",
|
|
"targetIp": "10.0.0.1"
|
|
},
|
|
{
|
|
"time": 757,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"arp": 2,
|
|
"senderIp": "10.0.0.1",
|
|
"targetIp": "10.0.0.2"
|
|
},
|
|
{
|
|
"time": 760,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 60273,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "S",
|
|
"sequence": 2000000,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 989,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 60273,
|
|
"payload": null,
|
|
"tcpFlags": "SA",
|
|
"sequence": 1000000,
|
|
"acknowledgement": 2000001
|
|
},
|
|
{
|
|
"time": 990,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 60273,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000001,
|
|
"acknowledgement": 1000001
|
|
},
|
|
{
|
|
"time": 1046,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 60273,
|
|
"destinationPort": 80,
|
|
"payload": "GET /konfig HTTP/1.1\nHost: 10.0.0.1\n",
|
|
"tcpFlags": "P",
|
|
"sequence": 2000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1269,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 60273,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000001,
|
|
"acknowledgement": 2000037
|
|
},
|
|
{
|
|
"time": 1325,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 60273,
|
|
"payload": "HTTP/1.1 200 OK\nContent-type: text/html\n\n<html>\n <head>\n <title>Konfiguration der Firewall auf dem Vermittlungsrechner</title>\n </head>\n\n <body>\n\n <form action=\"konfig\" method=\"POST\">\n\u0009<center> <table border=\"0\" cellspacing=\"5\" width=\"400\"> <tr><td> <h2>Firewall-Konfiguration </h2> </td></tr><tr><td>\n <table bgcolor=\"#E0E0E0\" border=\"0\" width=\"100%\" cellpadding=\"5\">\n <tr><td align=\"center\">\n <table border=\"0\" cellpadding=\"5\">\n <tr>\n <td width=\"10%\">\n\u0009\u0009<input name=\"firewallActivate\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\n </td>\n <td width=\"90%\">Firewall aktivieren</td>\n </tr>\n <tr>\n <td colspan=\"2\">\n\u0009 Erst durch Aktivieren der Firewall werden die Firewall-Regeln angewendet. \n\u0009\u0009Bei deaktivierter Firewall findet keine Filterung statt.\n </td>\n </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"dropICMP\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\u0009 \n\u0009 </td>\n\u0009 <td>ICMP-Pakete filtern</td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Alle ICMP Pakete, z.B. Ping-Anfragen, werden von der Firewall verworfen.\n\u0009 </td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"onlySYN\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\u0009\n\u0009 </td>\n\u0009 <td>\n\u0009 nur SYN-Pakete verwerfen\n\u0009 </td>\n\u0009 </t",
|
|
"tcpFlags": "",
|
|
"sequence": 1000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1326,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 60273,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000037,
|
|
"acknowledgement": 1001461
|
|
},
|
|
{
|
|
"time": 1549,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 60273,
|
|
"payload": "r>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Neue Verbindungsanfragen zu gesperrten Ports werden verworfen.\n\u0009\u0009Der Rückkanal für erlaubte Verbindungsanfragen wird akzeptiert.\n\u0009 </td>\n\u0009 </tr>\n </table>\n </tr>\n\u0009 <tr>\n <td><input type=\"submit\" name=\"btnSave\" value=\"speichern\"></td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n <!-- Konfiguration der Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td>\n <h3>Firewall-Regeln:</h3><br>\n\u0009 Die Regeln werden von oben nach unten geprüft.<br>\n\u0009 Sobald eine Regel zutrifft, wird die angegebene Aktion ausgeführt.\n </td>\n </tr>\n <tr>\n <td>\n\u0009 Falls keine Regel zutrifft, wird folgende Standard-Aktion ausgeführt:<br>\n\u0009 <select name=\"defaultPolicy\" size=\"1\">\n\u0009 <option value=\"drop\"\n\u0009 \n\u0009 >verwerfen</option>\n\u0009 <option value=\"accept\"\n selected=\"selected\"\u0009 \n\u0009 >akzeptieren</option>\n\u0009 </select>\n\u0009 <input type=\"submit\" name=\"defPolSet\" value=\"speichern\">\n\u0009 </td>\n </tr>\n <tr>\n <td>\n\u0009 <font size=\"-2\">\n <table border=\"1\" width=\"100%\">\n <tr>\n\u0009\u0009<th>lfd. Nr.</th>\n <th>Quell-IP</th>\n\u0009\u0009<th>Quell-Subnetzmaske</th>\n\u0009\u0009<th>Ziel-IP</th>\n\u0009\u0009<th>Ziel-Subnetzmaske</th>\n\u0009\u0009<th>Protokoll</th>\n\u0009\u0009<th>Port</th>\n <th>Aktion</th>\n </tr>\n\n<tr>",
|
|
"tcpFlags": "",
|
|
"sequence": 1001461,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1549,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 60273,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000037,
|
|
"acknowledgement": 1002921
|
|
},
|
|
{
|
|
"time": 1773,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 60273,
|
|
"payload": "<td><input name=\"radioRule\" type=\"radio\" value=\"1\" size=\"10\" maxlength=\"40\" /> 1</td><td>10.0.0.0</td><td>255.255.255.0</td><td></td><td></td><td>TCP</td><td>80</td><td>akzeptieren</td></tr>\n\n </table>\n </font>\n\u0009 </td>\n </tr>\n\u0009<tr>\n\u0009 <td>\n\u0009 Aktion für ausgewählte Regel:\n\u0009 </td>\n\u0009</tr>\n <tr>\n <td>\n <input type=\"submit\" name=\"moveup\" value=\"rauf\">\n <input type=\"submit\" name=\"movedown\" value=\"runter\">\n <input type=\"submit\" name=\"delrule\" value=\"löschen\">\n </td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n\n <!-- Konfiguration neuer Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td colspan=\"2\">\n <h3>Neue Regel erstellen</h3><br>\n\u0009 Alle Felder sind optional und werden <br>-- falls leer gelassen --<br> für die Filterung nicht verwendet.\n </td>\n </tr>\n <tr>\n <td width=\"30%\">Quell-IP: </td>\n <td width=\"70%\"><input name=\"srcIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n\u0009</tr>\n\u0009<tr>\n <td>Quell-Subnetzmaske: </td>\n <td><input name=\"srcMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Ziel-IP: </td>\n <td> <input name=\"destIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Ziel-Su",
|
|
"tcpFlags": "",
|
|
"sequence": 1002921,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1773,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 60273,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000037,
|
|
"acknowledgement": 1004381
|
|
},
|
|
{
|
|
"time": 1996,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 60273,
|
|
"payload": "bnetzmaske: </td>\n <td> <input name=\"destMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Protokoll: </td>\n <td> \n\u0009 <select name=\"protocol\" size=\"1\">\n\u0009 <option value=\"*\" >*</option>\n\u0009 <option value=\"TCP\" >TCP</option>\n\u0009 <option value=\"UDP\" >UDP</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td>Port: </td>\n <td> <input name=\"port\" type=\"text\" size=\"5\" maxlength=\"5\" value=\"\"></td>\n </tr>\n <tr>\n <td>Aktion: </td>\n <td> \n\u0009 <select name=\"action\" size=\"1\">\n\u0009 <option value=\"drop\" >verwerfen</option>\n\u0009 <option value=\"accept\" >akzeptieren</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td colspan=\"2\">\n <input type=\"submit\" name=\"addrule\" value=\"hinzufügen\">\n </td>\n </tr>\n </table>\n </td></tr></table></center>\n </form>\n </body>\n</html>\n",
|
|
"tcpFlags": "P",
|
|
"sequence": 1004381,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1997,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 60273,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000037,
|
|
"acknowledgement": 1005348
|
|
},
|
|
{
|
|
"time": 2052,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 60273,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 2000037,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 2275,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 60273,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1005348,
|
|
"acknowledgement": 2000038
|
|
},
|
|
{
|
|
"time": 2331,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 60273,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 1005348,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 2331,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 60273,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000038,
|
|
"acknowledgement": 1005349
|
|
}
|
|
],
|
|
"00000000-0000-0000-0000-000000000302": [
|
|
{
|
|
"time": 644,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "10.0.0.2",
|
|
"targetIp": "10.0.0.1"
|
|
},
|
|
{
|
|
"time": 646,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"arp": 2,
|
|
"senderIp": "10.0.0.1",
|
|
"targetIp": "10.0.0.2"
|
|
},
|
|
{
|
|
"time": 874,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 60273,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "S",
|
|
"sequence": 2000000,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 878,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 60273,
|
|
"payload": null,
|
|
"tcpFlags": "SA",
|
|
"sequence": 1000000,
|
|
"acknowledgement": 2000001
|
|
},
|
|
{
|
|
"time": 1101,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 60273,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000001,
|
|
"acknowledgement": 1000001
|
|
},
|
|
{
|
|
"time": 1157,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 60273,
|
|
"destinationPort": 80,
|
|
"payload": "GET /konfig HTTP/1.1\nHost: 10.0.0.1\n",
|
|
"tcpFlags": "P",
|
|
"sequence": 2000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1158,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 60273,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000001,
|
|
"acknowledgement": 2000037
|
|
},
|
|
{
|
|
"time": 1213,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 60273,
|
|
"payload": "HTTP/1.1 200 OK\nContent-type: text/html\n\n<html>\n <head>\n <title>Konfiguration der Firewall auf dem Vermittlungsrechner</title>\n </head>\n\n <body>\n\n <form action=\"konfig\" method=\"POST\">\n\u0009<center> <table border=\"0\" cellspacing=\"5\" width=\"400\"> <tr><td> <h2>Firewall-Konfiguration </h2> </td></tr><tr><td>\n <table bgcolor=\"#E0E0E0\" border=\"0\" width=\"100%\" cellpadding=\"5\">\n <tr><td align=\"center\">\n <table border=\"0\" cellpadding=\"5\">\n <tr>\n <td width=\"10%\">\n\u0009\u0009<input name=\"firewallActivate\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\n </td>\n <td width=\"90%\">Firewall aktivieren</td>\n </tr>\n <tr>\n <td colspan=\"2\">\n\u0009 Erst durch Aktivieren der Firewall werden die Firewall-Regeln angewendet. \n\u0009\u0009Bei deaktivierter Firewall findet keine Filterung statt.\n </td>\n </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"dropICMP\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\u0009 \n\u0009 </td>\n\u0009 <td>ICMP-Pakete filtern</td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Alle ICMP Pakete, z.B. Ping-Anfragen, werden von der Firewall verworfen.\n\u0009 </td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"onlySYN\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\u0009\n\u0009 </td>\n\u0009 <td>\n\u0009 nur SYN-Pakete verwerfen\n\u0009 </td>\n\u0009 </t",
|
|
"tcpFlags": "",
|
|
"sequence": 1000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1437,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 60273,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000037,
|
|
"acknowledgement": 1001461
|
|
},
|
|
{
|
|
"time": 1437,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 60273,
|
|
"payload": "r>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Neue Verbindungsanfragen zu gesperrten Ports werden verworfen.\n\u0009\u0009Der Rückkanal für erlaubte Verbindungsanfragen wird akzeptiert.\n\u0009 </td>\n\u0009 </tr>\n </table>\n </tr>\n\u0009 <tr>\n <td><input type=\"submit\" name=\"btnSave\" value=\"speichern\"></td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n <!-- Konfiguration der Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td>\n <h3>Firewall-Regeln:</h3><br>\n\u0009 Die Regeln werden von oben nach unten geprüft.<br>\n\u0009 Sobald eine Regel zutrifft, wird die angegebene Aktion ausgeführt.\n </td>\n </tr>\n <tr>\n <td>\n\u0009 Falls keine Regel zutrifft, wird folgende Standard-Aktion ausgeführt:<br>\n\u0009 <select name=\"defaultPolicy\" size=\"1\">\n\u0009 <option value=\"drop\"\n\u0009 \n\u0009 >verwerfen</option>\n\u0009 <option value=\"accept\"\n selected=\"selected\"\u0009 \n\u0009 >akzeptieren</option>\n\u0009 </select>\n\u0009 <input type=\"submit\" name=\"defPolSet\" value=\"speichern\">\n\u0009 </td>\n </tr>\n <tr>\n <td>\n\u0009 <font size=\"-2\">\n <table border=\"1\" width=\"100%\">\n <tr>\n\u0009\u0009<th>lfd. Nr.</th>\n <th>Quell-IP</th>\n\u0009\u0009<th>Quell-Subnetzmaske</th>\n\u0009\u0009<th>Ziel-IP</th>\n\u0009\u0009<th>Ziel-Subnetzmaske</th>\n\u0009\u0009<th>Protokoll</th>\n\u0009\u0009<th>Port</th>\n <th>Aktion</th>\n </tr>\n\n<tr>",
|
|
"tcpFlags": "",
|
|
"sequence": 1001461,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1661,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 60273,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000037,
|
|
"acknowledgement": 1002921
|
|
},
|
|
{
|
|
"time": 1661,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 60273,
|
|
"payload": "<td><input name=\"radioRule\" type=\"radio\" value=\"1\" size=\"10\" maxlength=\"40\" /> 1</td><td>10.0.0.0</td><td>255.255.255.0</td><td></td><td></td><td>TCP</td><td>80</td><td>akzeptieren</td></tr>\n\n </table>\n </font>\n\u0009 </td>\n </tr>\n\u0009<tr>\n\u0009 <td>\n\u0009 Aktion für ausgewählte Regel:\n\u0009 </td>\n\u0009</tr>\n <tr>\n <td>\n <input type=\"submit\" name=\"moveup\" value=\"rauf\">\n <input type=\"submit\" name=\"movedown\" value=\"runter\">\n <input type=\"submit\" name=\"delrule\" value=\"löschen\">\n </td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n\n <!-- Konfiguration neuer Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td colspan=\"2\">\n <h3>Neue Regel erstellen</h3><br>\n\u0009 Alle Felder sind optional und werden <br>-- falls leer gelassen --<br> für die Filterung nicht verwendet.\n </td>\n </tr>\n <tr>\n <td width=\"30%\">Quell-IP: </td>\n <td width=\"70%\"><input name=\"srcIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n\u0009</tr>\n\u0009<tr>\n <td>Quell-Subnetzmaske: </td>\n <td><input name=\"srcMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Ziel-IP: </td>\n <td> <input name=\"destIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Ziel-Su",
|
|
"tcpFlags": "",
|
|
"sequence": 1002921,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1885,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 60273,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000037,
|
|
"acknowledgement": 1004381
|
|
},
|
|
{
|
|
"time": 1885,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 60273,
|
|
"payload": "bnetzmaske: </td>\n <td> <input name=\"destMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Protokoll: </td>\n <td> \n\u0009 <select name=\"protocol\" size=\"1\">\n\u0009 <option value=\"*\" >*</option>\n\u0009 <option value=\"TCP\" >TCP</option>\n\u0009 <option value=\"UDP\" >UDP</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td>Port: </td>\n <td> <input name=\"port\" type=\"text\" size=\"5\" maxlength=\"5\" value=\"\"></td>\n </tr>\n <tr>\n <td>Aktion: </td>\n <td> \n\u0009 <select name=\"action\" size=\"1\">\n\u0009 <option value=\"drop\" >verwerfen</option>\n\u0009 <option value=\"accept\" >akzeptieren</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td colspan=\"2\">\n <input type=\"submit\" name=\"addrule\" value=\"hinzufügen\">\n </td>\n </tr>\n </table>\n </td></tr></table></center>\n </form>\n </body>\n</html>\n",
|
|
"tcpFlags": "P",
|
|
"sequence": 1004381,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 2108,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 60273,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000037,
|
|
"acknowledgement": 1005348
|
|
},
|
|
{
|
|
"time": 2163,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 60273,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 2000037,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 2164,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 60273,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1005348,
|
|
"acknowledgement": 2000038
|
|
},
|
|
{
|
|
"time": 2219,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 60273,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 1005348,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 2442,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 60273,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000038,
|
|
"acknowledgement": 1005349
|
|
}
|
|
],
|
|
"00000000-0000-0000-0000-000000000302#1": [],
|
|
"00000000-0000-0000-0000-000000000303": []
|
|
},
|
|
"rows": {
|
|
"00000000-0000-0000-0000-000000000301": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:03:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"10.0.0.2:60273",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 2.000.000"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:60273",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"10.0.0.2:60273",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001, ACK: 1.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"10.0.0.2:60273",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"10.0.0.2:60273",
|
|
"10.0.0.1:80",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"GET /konfig HTTP/1.1\nHost: 10.0.0.1\n"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:60273",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001, ACK: 2.000.037"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:60273",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001"
|
|
],
|
|
[
|
|
"8",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:60273",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"HTTP/1.1 200 OK\nContent-type: text/html\n\n<html>\n <head>\n <title>Konfiguration der Firewall auf dem Vermittlungsrechner</title>\n </head>\n\n <body>\n\n <form action=\"konfig\" method=\"POST\">\n\u0009<center> <table border=\"0\" cellspacing=\"5\" width=\"400\"> <tr><td> <h2>Firewall-Konfiguration </h2> </td></tr><tr><td>\n <table bgcolor=\"#E0E0E0\" border=\"0\" width=\"100%\" cellpadding=\"5\">\n <tr><td align=\"center\">\n <table border=\"0\" cellpadding=\"5\">\n <tr>\n <td width=\"10%\">\n\u0009\u0009<input name=\"firewallActivate\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\n </td>\n <td width=\"90%\">Firewall aktivieren</td>\n </tr>\n <tr>\n <td colspan=\"2\">\n\u0009 Erst durch Aktivieren der Firewall werden die Firewall-Regeln angewendet. \n\u0009\u0009Bei deaktivierter Firewall findet keine Filterung statt.\n </td>\n </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"dropICMP\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\u0009 \n\u0009 </td>\n\u0009 <td>ICMP-Pakete filtern</td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Alle ICMP Pakete, z.B. Ping-Anfragen, werden von der Firewall verworfen.\n\u0009 </td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"onlySYN\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\u0009\n\u0009 </td>\n\u0009 <td>\n\u0009 nur SYN-Pakete verwerfen\n\u0009 </td>\n\u0009 </t"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"10.0.0.2:60273",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.037, ACK: 1.001.461"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:60273",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.001.461"
|
|
],
|
|
[
|
|
"10",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:60273",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"r>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Neue Verbindungsanfragen zu gesperrten Ports werden verworfen.\n\u0009\u0009Der Rückkanal für erlaubte Verbindungsanfragen wird akzeptiert.\n\u0009 </td>\n\u0009 </tr>\n </table>\n </tr>\n\u0009 <tr>\n <td><input type=\"submit\" name=\"btnSave\" value=\"speichern\"></td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n <!-- Konfiguration der Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td>\n <h3>Firewall-Regeln:</h3><br>\n\u0009 Die Regeln werden von oben nach unten geprüft.<br>\n\u0009 Sobald eine Regel zutrifft, wird die angegebene Aktion ausgeführt.\n </td>\n </tr>\n <tr>\n <td>\n\u0009 Falls keine Regel zutrifft, wird folgende Standard-Aktion ausgeführt:<br>\n\u0009 <select name=\"defaultPolicy\" size=\"1\">\n\u0009 <option value=\"drop\"\n\u0009 \n\u0009 >verwerfen</option>\n\u0009 <option value=\"accept\"\n selected=\"selected\"\u0009 \n\u0009 >akzeptieren</option>\n\u0009 </select>\n\u0009 <input type=\"submit\" name=\"defPolSet\" value=\"speichern\">\n\u0009 </td>\n </tr>\n <tr>\n <td>\n\u0009 <font size=\"-2\">\n <table border=\"1\" width=\"100%\">\n <tr>\n\u0009\u0009<th>lfd. Nr.</th>\n <th>Quell-IP</th>\n\u0009\u0009<th>Quell-Subnetzmaske</th>\n\u0009\u0009<th>Ziel-IP</th>\n\u0009\u0009<th>Ziel-Subnetzmaske</th>\n\u0009\u0009<th>Protokoll</th>\n\u0009\u0009<th>Port</th>\n <th>Aktion</th>\n </tr>\n\n<tr>"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"10.0.0.2:60273",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.037, ACK: 1.002.921"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:60273",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.002.921"
|
|
],
|
|
[
|
|
"12",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:60273",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"<td><input name=\"radioRule\" type=\"radio\" value=\"1\" size=\"10\" maxlength=\"40\" /> 1</td><td>10.0.0.0</td><td>255.255.255.0</td><td></td><td></td><td>TCP</td><td>80</td><td>akzeptieren</td></tr>\n\n </table>\n </font>\n\u0009 </td>\n </tr>\n\u0009<tr>\n\u0009 <td>\n\u0009 Aktion für ausgewählte Regel:\n\u0009 </td>\n\u0009</tr>\n <tr>\n <td>\n <input type=\"submit\" name=\"moveup\" value=\"rauf\">\n <input type=\"submit\" name=\"movedown\" value=\"runter\">\n <input type=\"submit\" name=\"delrule\" value=\"löschen\">\n </td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n\n <!-- Konfiguration neuer Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td colspan=\"2\">\n <h3>Neue Regel erstellen</h3><br>\n\u0009 Alle Felder sind optional und werden <br>-- falls leer gelassen --<br> für die Filterung nicht verwendet.\n </td>\n </tr>\n <tr>\n <td width=\"30%\">Quell-IP: </td>\n <td width=\"70%\"><input name=\"srcIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n\u0009</tr>\n\u0009<tr>\n <td>Quell-Subnetzmaske: </td>\n <td><input name=\"srcMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Ziel-IP: </td>\n <td> <input name=\"destIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Ziel-Su"
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"10.0.0.2:60273",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.037, ACK: 1.004.381"
|
|
],
|
|
[
|
|
"14",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:60273",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.004.381"
|
|
],
|
|
[
|
|
"14",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:60273",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"bnetzmaske: </td>\n <td> <input name=\"destMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Protokoll: </td>\n <td> \n\u0009 <select name=\"protocol\" size=\"1\">\n\u0009 <option value=\"*\" >*</option>\n\u0009 <option value=\"TCP\" >TCP</option>\n\u0009 <option value=\"UDP\" >UDP</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td>Port: </td>\n <td> <input name=\"port\" type=\"text\" size=\"5\" maxlength=\"5\" value=\"\"></td>\n </tr>\n <tr>\n <td>Aktion: </td>\n <td> \n\u0009 <select name=\"action\" size=\"1\">\n\u0009 <option value=\"drop\" >verwerfen</option>\n\u0009 <option value=\"accept\" >akzeptieren</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td colspan=\"2\">\n <input type=\"submit\" name=\"addrule\" value=\"hinzufügen\">\n </td>\n </tr>\n </table>\n </td></tr></table></center>\n </form>\n </body>\n</html>\n"
|
|
],
|
|
[
|
|
"15",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"10.0.0.2:60273",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.037, ACK: 1.005.348"
|
|
],
|
|
[
|
|
"16",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"16",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"16",
|
|
"10.0.0.2:60273",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 2.000.037"
|
|
],
|
|
[
|
|
"17",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"17",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"17",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:60273",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.005.348, ACK: 2.000.038"
|
|
],
|
|
[
|
|
"18",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"18",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"18",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:60273",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 1.005.348"
|
|
],
|
|
[
|
|
"19",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"19",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"19",
|
|
"10.0.0.2:60273",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.038, ACK: 1.005.349"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000302": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:03:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"10.0.0.2:60273",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 2.000.000"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:60273",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"10.0.0.2:60273",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001, ACK: 1.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"10.0.0.2:60273",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"10.0.0.2:60273",
|
|
"10.0.0.1:80",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"GET /konfig HTTP/1.1\nHost: 10.0.0.1\n"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:60273",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001, ACK: 2.000.037"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:60273",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001"
|
|
],
|
|
[
|
|
"8",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:60273",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"HTTP/1.1 200 OK\nContent-type: text/html\n\n<html>\n <head>\n <title>Konfiguration der Firewall auf dem Vermittlungsrechner</title>\n </head>\n\n <body>\n\n <form action=\"konfig\" method=\"POST\">\n\u0009<center> <table border=\"0\" cellspacing=\"5\" width=\"400\"> <tr><td> <h2>Firewall-Konfiguration </h2> </td></tr><tr><td>\n <table bgcolor=\"#E0E0E0\" border=\"0\" width=\"100%\" cellpadding=\"5\">\n <tr><td align=\"center\">\n <table border=\"0\" cellpadding=\"5\">\n <tr>\n <td width=\"10%\">\n\u0009\u0009<input name=\"firewallActivate\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\n </td>\n <td width=\"90%\">Firewall aktivieren</td>\n </tr>\n <tr>\n <td colspan=\"2\">\n\u0009 Erst durch Aktivieren der Firewall werden die Firewall-Regeln angewendet. \n\u0009\u0009Bei deaktivierter Firewall findet keine Filterung statt.\n </td>\n </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"dropICMP\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\u0009 \n\u0009 </td>\n\u0009 <td>ICMP-Pakete filtern</td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Alle ICMP Pakete, z.B. Ping-Anfragen, werden von der Firewall verworfen.\n\u0009 </td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"onlySYN\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\u0009\n\u0009 </td>\n\u0009 <td>\n\u0009 nur SYN-Pakete verwerfen\n\u0009 </td>\n\u0009 </t"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"10.0.0.2:60273",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.037, ACK: 1.001.461"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:60273",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.001.461"
|
|
],
|
|
[
|
|
"10",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:60273",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"r>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Neue Verbindungsanfragen zu gesperrten Ports werden verworfen.\n\u0009\u0009Der Rückkanal für erlaubte Verbindungsanfragen wird akzeptiert.\n\u0009 </td>\n\u0009 </tr>\n </table>\n </tr>\n\u0009 <tr>\n <td><input type=\"submit\" name=\"btnSave\" value=\"speichern\"></td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n <!-- Konfiguration der Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td>\n <h3>Firewall-Regeln:</h3><br>\n\u0009 Die Regeln werden von oben nach unten geprüft.<br>\n\u0009 Sobald eine Regel zutrifft, wird die angegebene Aktion ausgeführt.\n </td>\n </tr>\n <tr>\n <td>\n\u0009 Falls keine Regel zutrifft, wird folgende Standard-Aktion ausgeführt:<br>\n\u0009 <select name=\"defaultPolicy\" size=\"1\">\n\u0009 <option value=\"drop\"\n\u0009 \n\u0009 >verwerfen</option>\n\u0009 <option value=\"accept\"\n selected=\"selected\"\u0009 \n\u0009 >akzeptieren</option>\n\u0009 </select>\n\u0009 <input type=\"submit\" name=\"defPolSet\" value=\"speichern\">\n\u0009 </td>\n </tr>\n <tr>\n <td>\n\u0009 <font size=\"-2\">\n <table border=\"1\" width=\"100%\">\n <tr>\n\u0009\u0009<th>lfd. Nr.</th>\n <th>Quell-IP</th>\n\u0009\u0009<th>Quell-Subnetzmaske</th>\n\u0009\u0009<th>Ziel-IP</th>\n\u0009\u0009<th>Ziel-Subnetzmaske</th>\n\u0009\u0009<th>Protokoll</th>\n\u0009\u0009<th>Port</th>\n <th>Aktion</th>\n </tr>\n\n<tr>"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"10.0.0.2:60273",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.037, ACK: 1.002.921"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:60273",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.002.921"
|
|
],
|
|
[
|
|
"12",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:60273",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"<td><input name=\"radioRule\" type=\"radio\" value=\"1\" size=\"10\" maxlength=\"40\" /> 1</td><td>10.0.0.0</td><td>255.255.255.0</td><td></td><td></td><td>TCP</td><td>80</td><td>akzeptieren</td></tr>\n\n </table>\n </font>\n\u0009 </td>\n </tr>\n\u0009<tr>\n\u0009 <td>\n\u0009 Aktion für ausgewählte Regel:\n\u0009 </td>\n\u0009</tr>\n <tr>\n <td>\n <input type=\"submit\" name=\"moveup\" value=\"rauf\">\n <input type=\"submit\" name=\"movedown\" value=\"runter\">\n <input type=\"submit\" name=\"delrule\" value=\"löschen\">\n </td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n\n <!-- Konfiguration neuer Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td colspan=\"2\">\n <h3>Neue Regel erstellen</h3><br>\n\u0009 Alle Felder sind optional und werden <br>-- falls leer gelassen --<br> für die Filterung nicht verwendet.\n </td>\n </tr>\n <tr>\n <td width=\"30%\">Quell-IP: </td>\n <td width=\"70%\"><input name=\"srcIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n\u0009</tr>\n\u0009<tr>\n <td>Quell-Subnetzmaske: </td>\n <td><input name=\"srcMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Ziel-IP: </td>\n <td> <input name=\"destIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Ziel-Su"
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"10.0.0.2:60273",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.037, ACK: 1.004.381"
|
|
],
|
|
[
|
|
"14",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:60273",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.004.381"
|
|
],
|
|
[
|
|
"14",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:60273",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"bnetzmaske: </td>\n <td> <input name=\"destMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Protokoll: </td>\n <td> \n\u0009 <select name=\"protocol\" size=\"1\">\n\u0009 <option value=\"*\" >*</option>\n\u0009 <option value=\"TCP\" >TCP</option>\n\u0009 <option value=\"UDP\" >UDP</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td>Port: </td>\n <td> <input name=\"port\" type=\"text\" size=\"5\" maxlength=\"5\" value=\"\"></td>\n </tr>\n <tr>\n <td>Aktion: </td>\n <td> \n\u0009 <select name=\"action\" size=\"1\">\n\u0009 <option value=\"drop\" >verwerfen</option>\n\u0009 <option value=\"accept\" >akzeptieren</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td colspan=\"2\">\n <input type=\"submit\" name=\"addrule\" value=\"hinzufügen\">\n </td>\n </tr>\n </table>\n </td></tr></table></center>\n </form>\n </body>\n</html>\n"
|
|
],
|
|
[
|
|
"15",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"10.0.0.2:60273",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.037, ACK: 1.005.348"
|
|
],
|
|
[
|
|
"16",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"16",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"16",
|
|
"10.0.0.2:60273",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 2.000.037"
|
|
],
|
|
[
|
|
"17",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"17",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"17",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:60273",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.005.348, ACK: 2.000.038"
|
|
],
|
|
[
|
|
"18",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"18",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"18",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:60273",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 1.005.348"
|
|
],
|
|
[
|
|
"19",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"19",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"19",
|
|
"10.0.0.2:60273",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.038, ACK: 1.005.349"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000302#1": [],
|
|
"00000000-0000-0000-0000-000000000303": []
|
|
},
|
|
"layeredRows": {
|
|
"00000000-0000-0000-0000-000000000301": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:03:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"60273",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 2.000.000"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"80",
|
|
"60273",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"60273",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001, ACK: 1.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"60273",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
null,
|
|
null,
|
|
"HTTP",
|
|
"Anwendung",
|
|
"GET /konfig HTTP/1.1\nHost: 10.0.0.1\n"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"80",
|
|
"60273",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001, ACK: 2.000.037"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"80",
|
|
"60273",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001"
|
|
],
|
|
[
|
|
"8",
|
|
null,
|
|
null,
|
|
"HTTP",
|
|
"Anwendung",
|
|
"HTTP/1.1 200 OK\nContent-type: text/html\n\n<html>\n <head>\n <title>Konfiguration der Firewall auf dem Vermittlungsrechner</title>\n </head>\n\n <body>\n\n <form action=\"konfig\" method=\"POST\">\n\u0009<center> <table border=\"0\" cellspacing=\"5\" width=\"400\"> <tr><td> <h2>Firewall-Konfiguration </h2> </td></tr><tr><td>\n <table bgcolor=\"#E0E0E0\" border=\"0\" width=\"100%\" cellpadding=\"5\">\n <tr><td align=\"center\">\n <table border=\"0\" cellpadding=\"5\">\n <tr>\n <td width=\"10%\">\n\u0009\u0009<input name=\"firewallActivate\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\n </td>\n <td width=\"90%\">Firewall aktivieren</td>\n </tr>\n <tr>\n <td colspan=\"2\">\n\u0009 Erst durch Aktivieren der Firewall werden die Firewall-Regeln angewendet. \n\u0009\u0009Bei deaktivierter Firewall findet keine Filterung statt.\n </td>\n </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"dropICMP\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\u0009 \n\u0009 </td>\n\u0009 <td>ICMP-Pakete filtern</td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Alle ICMP Pakete, z.B. Ping-Anfragen, werden von der Firewall verworfen.\n\u0009 </td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"onlySYN\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\u0009\n\u0009 </td>\n\u0009 <td>\n\u0009 nur SYN-Pakete verwerfen\n\u0009 </td>\n\u0009 </t"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"60273",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.037, ACK: 1.001.461"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"80",
|
|
"60273",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.001.461"
|
|
],
|
|
[
|
|
"10",
|
|
null,
|
|
null,
|
|
"HTTP",
|
|
"Anwendung",
|
|
"r>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Neue Verbindungsanfragen zu gesperrten Ports werden verworfen.\n\u0009\u0009Der Rückkanal für erlaubte Verbindungsanfragen wird akzeptiert.\n\u0009 </td>\n\u0009 </tr>\n </table>\n </tr>\n\u0009 <tr>\n <td><input type=\"submit\" name=\"btnSave\" value=\"speichern\"></td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n <!-- Konfiguration der Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td>\n <h3>Firewall-Regeln:</h3><br>\n\u0009 Die Regeln werden von oben nach unten geprüft.<br>\n\u0009 Sobald eine Regel zutrifft, wird die angegebene Aktion ausgeführt.\n </td>\n </tr>\n <tr>\n <td>\n\u0009 Falls keine Regel zutrifft, wird folgende Standard-Aktion ausgeführt:<br>\n\u0009 <select name=\"defaultPolicy\" size=\"1\">\n\u0009 <option value=\"drop\"\n\u0009 \n\u0009 >verwerfen</option>\n\u0009 <option value=\"accept\"\n selected=\"selected\"\u0009 \n\u0009 >akzeptieren</option>\n\u0009 </select>\n\u0009 <input type=\"submit\" name=\"defPolSet\" value=\"speichern\">\n\u0009 </td>\n </tr>\n <tr>\n <td>\n\u0009 <font size=\"-2\">\n <table border=\"1\" width=\"100%\">\n <tr>\n\u0009\u0009<th>lfd. Nr.</th>\n <th>Quell-IP</th>\n\u0009\u0009<th>Quell-Subnetzmaske</th>\n\u0009\u0009<th>Ziel-IP</th>\n\u0009\u0009<th>Ziel-Subnetzmaske</th>\n\u0009\u0009<th>Protokoll</th>\n\u0009\u0009<th>Port</th>\n <th>Aktion</th>\n </tr>\n\n<tr>"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"60273",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.037, ACK: 1.002.921"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"80",
|
|
"60273",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.002.921"
|
|
],
|
|
[
|
|
"12",
|
|
null,
|
|
null,
|
|
"HTTP",
|
|
"Anwendung",
|
|
"<td><input name=\"radioRule\" type=\"radio\" value=\"1\" size=\"10\" maxlength=\"40\" /> 1</td><td>10.0.0.0</td><td>255.255.255.0</td><td></td><td></td><td>TCP</td><td>80</td><td>akzeptieren</td></tr>\n\n </table>\n </font>\n\u0009 </td>\n </tr>\n\u0009<tr>\n\u0009 <td>\n\u0009 Aktion für ausgewählte Regel:\n\u0009 </td>\n\u0009</tr>\n <tr>\n <td>\n <input type=\"submit\" name=\"moveup\" value=\"rauf\">\n <input type=\"submit\" name=\"movedown\" value=\"runter\">\n <input type=\"submit\" name=\"delrule\" value=\"löschen\">\n </td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n\n <!-- Konfiguration neuer Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td colspan=\"2\">\n <h3>Neue Regel erstellen</h3><br>\n\u0009 Alle Felder sind optional und werden <br>-- falls leer gelassen --<br> für die Filterung nicht verwendet.\n </td>\n </tr>\n <tr>\n <td width=\"30%\">Quell-IP: </td>\n <td width=\"70%\"><input name=\"srcIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n\u0009</tr>\n\u0009<tr>\n <td>Quell-Subnetzmaske: </td>\n <td><input name=\"srcMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Ziel-IP: </td>\n <td> <input name=\"destIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Ziel-Su"
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"60273",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.037, ACK: 1.004.381"
|
|
],
|
|
[
|
|
"14",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"80",
|
|
"60273",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.004.381"
|
|
],
|
|
[
|
|
"14",
|
|
null,
|
|
null,
|
|
"HTTP",
|
|
"Anwendung",
|
|
"bnetzmaske: </td>\n <td> <input name=\"destMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Protokoll: </td>\n <td> \n\u0009 <select name=\"protocol\" size=\"1\">\n\u0009 <option value=\"*\" >*</option>\n\u0009 <option value=\"TCP\" >TCP</option>\n\u0009 <option value=\"UDP\" >UDP</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td>Port: </td>\n <td> <input name=\"port\" type=\"text\" size=\"5\" maxlength=\"5\" value=\"\"></td>\n </tr>\n <tr>\n <td>Aktion: </td>\n <td> \n\u0009 <select name=\"action\" size=\"1\">\n\u0009 <option value=\"drop\" >verwerfen</option>\n\u0009 <option value=\"accept\" >akzeptieren</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td colspan=\"2\">\n <input type=\"submit\" name=\"addrule\" value=\"hinzufügen\">\n </td>\n </tr>\n </table>\n </td></tr></table></center>\n </form>\n </body>\n</html>\n"
|
|
],
|
|
[
|
|
"15",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"60273",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.037, ACK: 1.005.348"
|
|
],
|
|
[
|
|
"16",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"16",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"16",
|
|
"60273",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 2.000.037"
|
|
],
|
|
[
|
|
"17",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"17",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"17",
|
|
"80",
|
|
"60273",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.005.348, ACK: 2.000.038"
|
|
],
|
|
[
|
|
"18",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"18",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"18",
|
|
"80",
|
|
"60273",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 1.005.348"
|
|
],
|
|
[
|
|
"19",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"19",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"19",
|
|
"60273",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.038, ACK: 1.005.349"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000302": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:03:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"60273",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 2.000.000"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"80",
|
|
"60273",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"60273",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001, ACK: 1.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"60273",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
null,
|
|
null,
|
|
"HTTP",
|
|
"Anwendung",
|
|
"GET /konfig HTTP/1.1\nHost: 10.0.0.1\n"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"80",
|
|
"60273",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001, ACK: 2.000.037"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"80",
|
|
"60273",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001"
|
|
],
|
|
[
|
|
"8",
|
|
null,
|
|
null,
|
|
"HTTP",
|
|
"Anwendung",
|
|
"HTTP/1.1 200 OK\nContent-type: text/html\n\n<html>\n <head>\n <title>Konfiguration der Firewall auf dem Vermittlungsrechner</title>\n </head>\n\n <body>\n\n <form action=\"konfig\" method=\"POST\">\n\u0009<center> <table border=\"0\" cellspacing=\"5\" width=\"400\"> <tr><td> <h2>Firewall-Konfiguration </h2> </td></tr><tr><td>\n <table bgcolor=\"#E0E0E0\" border=\"0\" width=\"100%\" cellpadding=\"5\">\n <tr><td align=\"center\">\n <table border=\"0\" cellpadding=\"5\">\n <tr>\n <td width=\"10%\">\n\u0009\u0009<input name=\"firewallActivate\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\n </td>\n <td width=\"90%\">Firewall aktivieren</td>\n </tr>\n <tr>\n <td colspan=\"2\">\n\u0009 Erst durch Aktivieren der Firewall werden die Firewall-Regeln angewendet. \n\u0009\u0009Bei deaktivierter Firewall findet keine Filterung statt.\n </td>\n </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"dropICMP\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\u0009 \n\u0009 </td>\n\u0009 <td>ICMP-Pakete filtern</td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Alle ICMP Pakete, z.B. Ping-Anfragen, werden von der Firewall verworfen.\n\u0009 </td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"onlySYN\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\u0009\n\u0009 </td>\n\u0009 <td>\n\u0009 nur SYN-Pakete verwerfen\n\u0009 </td>\n\u0009 </t"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"60273",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.037, ACK: 1.001.461"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"80",
|
|
"60273",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.001.461"
|
|
],
|
|
[
|
|
"10",
|
|
null,
|
|
null,
|
|
"HTTP",
|
|
"Anwendung",
|
|
"r>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Neue Verbindungsanfragen zu gesperrten Ports werden verworfen.\n\u0009\u0009Der Rückkanal für erlaubte Verbindungsanfragen wird akzeptiert.\n\u0009 </td>\n\u0009 </tr>\n </table>\n </tr>\n\u0009 <tr>\n <td><input type=\"submit\" name=\"btnSave\" value=\"speichern\"></td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n <!-- Konfiguration der Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td>\n <h3>Firewall-Regeln:</h3><br>\n\u0009 Die Regeln werden von oben nach unten geprüft.<br>\n\u0009 Sobald eine Regel zutrifft, wird die angegebene Aktion ausgeführt.\n </td>\n </tr>\n <tr>\n <td>\n\u0009 Falls keine Regel zutrifft, wird folgende Standard-Aktion ausgeführt:<br>\n\u0009 <select name=\"defaultPolicy\" size=\"1\">\n\u0009 <option value=\"drop\"\n\u0009 \n\u0009 >verwerfen</option>\n\u0009 <option value=\"accept\"\n selected=\"selected\"\u0009 \n\u0009 >akzeptieren</option>\n\u0009 </select>\n\u0009 <input type=\"submit\" name=\"defPolSet\" value=\"speichern\">\n\u0009 </td>\n </tr>\n <tr>\n <td>\n\u0009 <font size=\"-2\">\n <table border=\"1\" width=\"100%\">\n <tr>\n\u0009\u0009<th>lfd. Nr.</th>\n <th>Quell-IP</th>\n\u0009\u0009<th>Quell-Subnetzmaske</th>\n\u0009\u0009<th>Ziel-IP</th>\n\u0009\u0009<th>Ziel-Subnetzmaske</th>\n\u0009\u0009<th>Protokoll</th>\n\u0009\u0009<th>Port</th>\n <th>Aktion</th>\n </tr>\n\n<tr>"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"60273",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.037, ACK: 1.002.921"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"80",
|
|
"60273",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.002.921"
|
|
],
|
|
[
|
|
"12",
|
|
null,
|
|
null,
|
|
"HTTP",
|
|
"Anwendung",
|
|
"<td><input name=\"radioRule\" type=\"radio\" value=\"1\" size=\"10\" maxlength=\"40\" /> 1</td><td>10.0.0.0</td><td>255.255.255.0</td><td></td><td></td><td>TCP</td><td>80</td><td>akzeptieren</td></tr>\n\n </table>\n </font>\n\u0009 </td>\n </tr>\n\u0009<tr>\n\u0009 <td>\n\u0009 Aktion für ausgewählte Regel:\n\u0009 </td>\n\u0009</tr>\n <tr>\n <td>\n <input type=\"submit\" name=\"moveup\" value=\"rauf\">\n <input type=\"submit\" name=\"movedown\" value=\"runter\">\n <input type=\"submit\" name=\"delrule\" value=\"löschen\">\n </td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n\n <!-- Konfiguration neuer Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td colspan=\"2\">\n <h3>Neue Regel erstellen</h3><br>\n\u0009 Alle Felder sind optional und werden <br>-- falls leer gelassen --<br> für die Filterung nicht verwendet.\n </td>\n </tr>\n <tr>\n <td width=\"30%\">Quell-IP: </td>\n <td width=\"70%\"><input name=\"srcIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n\u0009</tr>\n\u0009<tr>\n <td>Quell-Subnetzmaske: </td>\n <td><input name=\"srcMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Ziel-IP: </td>\n <td> <input name=\"destIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Ziel-Su"
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"60273",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.037, ACK: 1.004.381"
|
|
],
|
|
[
|
|
"14",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"80",
|
|
"60273",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.004.381"
|
|
],
|
|
[
|
|
"14",
|
|
null,
|
|
null,
|
|
"HTTP",
|
|
"Anwendung",
|
|
"bnetzmaske: </td>\n <td> <input name=\"destMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Protokoll: </td>\n <td> \n\u0009 <select name=\"protocol\" size=\"1\">\n\u0009 <option value=\"*\" >*</option>\n\u0009 <option value=\"TCP\" >TCP</option>\n\u0009 <option value=\"UDP\" >UDP</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td>Port: </td>\n <td> <input name=\"port\" type=\"text\" size=\"5\" maxlength=\"5\" value=\"\"></td>\n </tr>\n <tr>\n <td>Aktion: </td>\n <td> \n\u0009 <select name=\"action\" size=\"1\">\n\u0009 <option value=\"drop\" >verwerfen</option>\n\u0009 <option value=\"accept\" >akzeptieren</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td colspan=\"2\">\n <input type=\"submit\" name=\"addrule\" value=\"hinzufügen\">\n </td>\n </tr>\n </table>\n </td></tr></table></center>\n </form>\n </body>\n</html>\n"
|
|
],
|
|
[
|
|
"15",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"60273",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.037, ACK: 1.005.348"
|
|
],
|
|
[
|
|
"16",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"16",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"16",
|
|
"60273",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 2.000.037"
|
|
],
|
|
[
|
|
"17",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"17",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"17",
|
|
"80",
|
|
"60273",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.005.348, ACK: 2.000.038"
|
|
],
|
|
[
|
|
"18",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"18",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"18",
|
|
"80",
|
|
"60273",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 1.005.348"
|
|
],
|
|
[
|
|
"19",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"19",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"19",
|
|
"60273",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.038, ACK: 1.005.349"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000302#1": [],
|
|
"00000000-0000-0000-0000-000000000303": []
|
|
},
|
|
"events": [
|
|
[
|
|
210,
|
|
"browser",
|
|
"update"
|
|
],
|
|
[
|
|
211,
|
|
"server",
|
|
"null"
|
|
],
|
|
[
|
|
213,
|
|
"server",
|
|
"Annahme von Verbindungsanfragen gestartet"
|
|
],
|
|
[
|
|
500,
|
|
"browser",
|
|
"call holeWebseite 10.0.0.1/konfig"
|
|
],
|
|
[
|
|
1119,
|
|
"server",
|
|
"Verbindung zu 10.0.0.2:60273 hergestellt"
|
|
],
|
|
[
|
|
1157,
|
|
"server",
|
|
">>GET /konfig HTTP/1.1\nHost: 10.0.0.1\n"
|
|
],
|
|
[
|
|
2020,
|
|
"browser",
|
|
"page 200 text/html\n<html>\n <head>\n <title>Konfiguration der Firewall auf dem Vermittlungsrechner</title>\n </head>\n\n <body>\n\n <form action=\"konfig\" method=\"POST\">\n\u0009<center> <table border=\"0\" cellspacing=\"5\" width=\"400\"> <tr><td> <h2>Firewall-Konfiguration </h2> </td></tr><tr><td>\n <table bgcolor=\"#E0E0E0\" border=\"0\" width=\"100%\" cellpadding=\"5\">\n <tr><td align=\"center\">\n <table border=\"0\" cellpadding=\"5\">\n <tr>\n <td width=\"10%\">\n\u0009\u0009<input name=\"firewallActivate\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\n </td>\n <td width=\"90%\">Firewall aktivieren</td>\n </tr>\n <tr>\n <td colspan=\"2\">\n\u0009 Erst durch Aktivieren der Firewall werden die Firewall-Regeln angewendet. \n\u0009\u0009Bei deaktivierter Firewall findet keine Filterung statt.\n </td>\n </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"dropICMP\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\u0009 \n\u0009 </td>\n\u0009 <td>ICMP-Pakete filtern</td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Alle ICMP Pakete, z.B. Ping-Anfragen, werden von der Firewall verworfen.\n\u0009 </td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"onlySYN\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\u0009\n\u0009 </td>\n\u0009 <td>\n\u0009 nur SYN-Pakete verwerfen\n\u0009 </td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Neue Verbindungsanfragen zu gesperrten Ports werden verworfen.\n\u0009\u0009Der Rückkanal für erlaubte Verbindungsanfragen wird akzeptiert.\n\u0009 </td>\n\u0009 </tr>\n </table>\n </tr>\n\u0009 <tr>\n <td><input type=\"submit\" name=\"btnSave\" value=\"speichern\"></td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n <!-- Konfiguration der Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td>\n <h3>Firewall-Regeln:</h3><br>\n\u0009 Die Regeln werden von oben nach unten geprüft.<br>\n\u0009 Sobald eine Regel zutrifft, wird die angegebene Aktion ausgeführt.\n </td>\n </tr>\n <tr>\n <td>\n\u0009 Falls keine Regel zutrifft, wird folgende Standard-Aktion ausgeführt:<br>\n\u0009 <select name=\"defaultPolicy\" size=\"1\">\n\u0009 <option value=\"drop\"\n\u0009 \n\u0009 >verwerfen</option>\n\u0009 <option value=\"accept\"\n selected=\"selected\"\u0009 \n\u0009 >akzeptieren</option>\n\u0009 </select>\n\u0009 <input type=\"submit\" name=\"defPolSet\" value=\"speichern\">\n\u0009 </td>\n </tr>\n <tr>\n <td>\n\u0009 <font size=\"-2\">\n <table border=\"1\" width=\"100%\">\n <tr>\n\u0009\u0009<th>lfd. Nr.</th>\n <th>Quell-IP</th>\n\u0009\u0009<th>Quell-Subnetzmaske</th>\n\u0009\u0009<th>Ziel-IP</th>\n\u0009\u0009<th>Ziel-Subnetzmaske</th>\n\u0009\u0009<th>Protokoll</th>\n\u0009\u0009<th>Port</th>\n <th>Aktion</th>\n </tr>\n\n<tr><td><input name=\"radioRule\" type=\"radio\" value=\"1\" size=\"10\" maxlength=\"40\" /> 1</td><td>10.0.0.0</td><td>255.255.255.0</td><td></td><td></td><td>TCP</td><td>80</td><td>akzeptieren</td></tr>\n\n </table>\n </font>\n\u0009 </td>\n </tr>\n\u0009<tr>\n\u0009 <td>\n\u0009 Aktion für ausgewählte Regel:\n\u0009 </td>\n\u0009</tr>\n <tr>\n <td>\n <input type=\"submit\" name=\"moveup\" value=\"rauf\">\n <input type=\"submit\" name=\"movedown\" value=\"runter\">\n <input type=\"submit\" name=\"delrule\" value=\"löschen\">\n </td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n\n <!-- Konfiguration neuer Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td colspan=\"2\">\n <h3>Neue Regel erstellen</h3><br>\n\u0009 Alle Felder sind optional und werden <br>-- falls leer gelassen --<br> für die Filterung nicht verwendet.\n </td>\n </tr>\n <tr>\n <td width=\"30%\">Quell-IP: </td>\n <td width=\"70%\"><input name=\"srcIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n\u0009</tr>\n\u0009<tr>\n <td>Quell-Subnetzmaske: </td>\n <td><input name=\"srcMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Ziel-IP: </td>\n <td> <input name=\"destIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Ziel-Subnetzmaske: </td>\n <td> <input name=\"destMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Protokoll: </td>\n <td> \n\u0009 <select name=\"protocol\" size=\"1\">\n\u0009 <option value=\"*\" >*</option>\n\u0009 <option value=\"TCP\" >TCP</option>\n\u0009 <option value=\"UDP\" >UDP</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td>Port: </td>\n <td> <input name=\"port\" type=\"text\" size=\"5\" maxlength=\"5\" value=\"\"></td>\n </tr>\n <tr>\n <td>Aktion: </td>\n <td> \n\u0009 <select name=\"action\" size=\"1\">\n\u0009 <option value=\"drop\" >verwerfen</option>\n\u0009 <option value=\"accept\" >akzeptieren</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td colspan=\"2\">\n <input type=\"submit\" name=\"addrule\" value=\"hinzufügen\">\n </td>\n </tr>\n </table>\n </td></tr></table></center>\n </form>\n </body>\n</html>"
|
|
],
|
|
[
|
|
2108,
|
|
"server",
|
|
"<<HTTP/1.1 200 OK\nContent-type: text/html\n\n<html>\n <head>\n <title>Konfiguration der Firewall auf dem Vermittlungsrechner</title>\n </head>\n\n <body>\n\n <form action=\"konfig\" method=\"POST\">\n\u0009<center> <table border=\"0\" cellspacing=\"5\" width=\"400\"> <tr><td> <h2>Firewall-Konfiguration </h2> </td></tr><tr><td>\n <table bgcolor=\"#E0E0E0\" border=\"0\" width=\"100%\" cellpadding=\"5\">\n <tr><td align=\"center\">\n <table border=\"0\" cellpadding=\"5\">\n <tr>\n <td width=\"10%\">\n\u0009\u0009<input name=\"firewallActivate\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\n </td>\n <td width=\"90%\">Firewall aktivieren</td>\n </tr>\n <tr>\n <td colspan=\"2\">\n\u0009 Erst durch Aktivieren der Firewall werden die Firewall-Regeln angewendet. \n\u0009\u0009Bei deaktivierter Firewall findet keine Filterung statt.\n </td>\n </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"dropICMP\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\u0009 \n\u0009 </td>\n\u0009 <td>ICMP-Pakete filtern</td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Alle ICMP Pakete, z.B. Ping-Anfragen, werden von der Firewall verworfen.\n\u0009 </td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"onlySYN\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\u0009\n\u0009 </td>\n\u0009 <td>\n\u0009 nur SYN-Pakete verwerfen\n\u0009 </td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Neue Verbindungsanfragen zu gesperrten Ports werden verworfen.\n\u0009\u0009Der Rückkanal für erlaubte Verbindungsanfragen wird akzeptiert.\n\u0009 </td>\n\u0009 </tr>\n </table>\n </tr>\n\u0009 <tr>\n <td><input type=\"submit\" name=\"btnSave\" value=\"speichern\"></td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n <!-- Konfiguration der Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td>\n <h3>Firewall-Regeln:</h3><br>\n\u0009 Die Regeln werden von oben nach unten geprüft.<br>\n\u0009 Sobald eine Regel zutrifft, wird die angegebene Aktion ausgeführt.\n </td>\n </tr>\n <tr>\n <td>\n\u0009 Falls keine Regel zutrifft, wird folgende Standard-Aktion ausgeführt:<br>\n\u0009 <select name=\"defaultPolicy\" size=\"1\">\n\u0009 <option value=\"drop\"\n\u0009 \n\u0009 >verwerfen</option>\n\u0009 <option value=\"accept\"\n selected=\"selected\"\u0009 \n\u0009 >akzeptieren</option>\n\u0009 </select>\n\u0009 <input type=\"submit\" name=\"defPolSet\" value=\"speichern\">\n\u0009 </td>\n </tr>\n <tr>\n <td>\n\u0009 <font size=\"-2\">\n <table border=\"1\" width=\"100%\">\n <tr>\n\u0009\u0009<th>lfd. Nr.</th>\n <th>Quell-IP</th>\n\u0009\u0009<th>Quell-Subnetzmaske</th>\n\u0009\u0009<th>Ziel-IP</th>\n\u0009\u0009<th>Ziel-Subnetzmaske</th>\n\u0009\u0009<th>Protokoll</th>\n\u0009\u0009<th>Port</th>\n <th>Aktion</th>\n </tr>\n\n<tr><td><input name=\"radioRule\" type=\"radio\" value=\"1\" size=\"10\" maxlength=\"40\" /> 1</td><td>10.0.0.0</td><td>255.255.255.0</td><td></td><td></td><td>TCP</td><td>80</td><td>akzeptieren</td></tr>\n\n </table>\n </font>\n\u0009 </td>\n </tr>\n\u0009<tr>\n\u0009 <td>\n\u0009 Aktion für ausgewählte Regel:\n\u0009 </td>\n\u0009</tr>\n <tr>\n <td>\n <input type=\"submit\" name=\"moveup\" value=\"rauf\">\n <input type=\"submit\" name=\"movedown\" value=\"runter\">\n <input type=\"submit\" name=\"delrule\" value=\"löschen\">\n </td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n\n <!-- Konfiguration neuer Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td colspan=\"2\">\n <h3>Neue Regel erstellen</h3><br>\n\u0009 Alle Felder sind optional und werden <br>-- falls leer gelassen --<br> für die Filterung nicht verwendet.\n </td>\n </tr>\n <tr>\n <td width=\"30%\">Quell-IP: </td>\n <td width=\"70%\"><input name=\"srcIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n\u0009</tr>\n\u0009<tr>\n <td>Quell-Subnetzmaske: </td>\n <td><input name=\"srcMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Ziel-IP: </td>\n <td> <input name=\"destIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Ziel-Subnetzmaske: </td>\n <td> <input name=\"destMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Protokoll: </td>\n <td> \n\u0009 <select name=\"protocol\" size=\"1\">\n\u0009 <option value=\"*\" >*</option>\n\u0009 <option value=\"TCP\" >TCP</option>\n\u0009 <option value=\"UDP\" >UDP</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td>Port: </td>\n <td> <input name=\"port\" type=\"text\" size=\"5\" maxlength=\"5\" value=\"\"></td>\n </tr>\n <tr>\n <td>Aktion: </td>\n <td> \n\u0009 <select name=\"action\" size=\"1\">\n\u0009 <option value=\"drop\" >verwerfen</option>\n\u0009 <option value=\"accept\" >akzeptieren</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td colspan=\"2\">\n <input type=\"submit\" name=\"addrule\" value=\"hinzufügen\">\n </td>\n </tr>\n </table>\n </td></tr></table></center>\n </form>\n </body>\n</html>\n"
|
|
],
|
|
[
|
|
2164,
|
|
"server",
|
|
"Socket zu 10.0.0.2:60273 geschlossen"
|
|
]
|
|
]
|
|
}
|