The page konfig changes the firewall at run time (into the snapshot, back into the project through projectWithSimulationChanges). KonfigCases feeds Java's plug-in directly (25 cases, de and en); RouterWebRun plays two stories over the network. Ten Java bugs named, not adopted. The web server answers a method not written GET or POST with 501, as Java does. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
4934 lines
196 KiB
JSON
4934 lines
196 KiB
JSON
{
|
|
"frames": {
|
|
"00000000-0000-0000-0000-000000000301": [
|
|
{
|
|
"time": 519,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "10.0.0.2",
|
|
"targetIp": "10.0.0.1"
|
|
},
|
|
{
|
|
"time": 756,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"arp": 2,
|
|
"senderIp": "10.0.0.1",
|
|
"targetIp": "10.0.0.2"
|
|
},
|
|
{
|
|
"time": 759,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 50999,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "S",
|
|
"sequence": 2000000,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 988,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 50999,
|
|
"payload": null,
|
|
"tcpFlags": "SA",
|
|
"sequence": 1000000,
|
|
"acknowledgement": 2000001
|
|
},
|
|
{
|
|
"time": 988,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 50999,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000001,
|
|
"acknowledgement": 1000001
|
|
},
|
|
{
|
|
"time": 1044,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 50999,
|
|
"destinationPort": 80,
|
|
"payload": "POST /konfig HTTP/1.1\nHost: 10.0.0.1\n\nfirewallActivate=1&dropICMP=1&onlySYN=1&defaultPolicy=accept&srcIP=&srcMask=&destIP=&destMask=&protocol=TCP&port=80&action=drop&addrule=hinzuf%C3%BCgen",
|
|
"tcpFlags": "P",
|
|
"sequence": 2000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1267,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 50999,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000001,
|
|
"acknowledgement": 2000190
|
|
},
|
|
{
|
|
"time": 1323,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 50999,
|
|
"payload": "HTTP/1.1 200 OK\nContent-type: text/html\n\n<html>\n <head>\n <title>Konfiguration der Firewall auf dem Vermittlungsrechner</title>\n </head>\n\n <body>\n\n <form action=\"konfig\" method=\"POST\">\n\u0009<center> <table border=\"0\" cellspacing=\"5\" width=\"400\"> <tr><td> <h2>Firewall-Konfiguration </h2> </td></tr><tr><td>\n <table bgcolor=\"#E0E0E0\" border=\"0\" width=\"100%\" cellpadding=\"5\">\n <tr><td align=\"center\">\n <table border=\"0\" cellpadding=\"5\">\n <tr>\n <td width=\"10%\">\n\u0009\u0009<input name=\"firewallActivate\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\n </td>\n <td width=\"90%\">Firewall aktivieren</td>\n </tr>\n <tr>\n <td colspan=\"2\">\n\u0009 Erst durch Aktivieren der Firewall werden die Firewall-Regeln angewendet. \n\u0009\u0009Bei deaktivierter Firewall findet keine Filterung statt.\n </td>\n </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"dropICMP\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\u0009 \n\u0009 </td>\n\u0009 <td>ICMP-Pakete filtern</td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Alle ICMP Pakete, z.B. Ping-Anfragen, werden von der Firewall verworfen.\n\u0009 </td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"onlySYN\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\u0009\n\u0009 </td>\n\u0009 <td>\n\u0009 nur SYN-Pakete verwerfen\n\u0009 </td>\n\u0009 </t",
|
|
"tcpFlags": "",
|
|
"sequence": 1000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1324,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 50999,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000190,
|
|
"acknowledgement": 1001461
|
|
},
|
|
{
|
|
"time": 1547,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 50999,
|
|
"payload": "r>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Neue Verbindungsanfragen zu gesperrten Ports werden verworfen.\n\u0009\u0009Der Rückkanal für erlaubte Verbindungsanfragen wird akzeptiert.\n\u0009 </td>\n\u0009 </tr>\n </table>\n </tr>\n\u0009 <tr>\n <td><input type=\"submit\" name=\"btnSave\" value=\"speichern\"></td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n <!-- Konfiguration der Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td>\n <h3>Firewall-Regeln:</h3><br>\n\u0009 Die Regeln werden von oben nach unten geprüft.<br>\n\u0009 Sobald eine Regel zutrifft, wird die angegebene Aktion ausgeführt.\n </td>\n </tr>\n <tr>\n <td>\n\u0009 Falls keine Regel zutrifft, wird folgende Standard-Aktion ausgeführt:<br>\n\u0009 <select name=\"defaultPolicy\" size=\"1\">\n\u0009 <option value=\"drop\"\n\u0009 \n\u0009 >verwerfen</option>\n\u0009 <option value=\"accept\"\n selected=\"selected\"\u0009 \n\u0009 >akzeptieren</option>\n\u0009 </select>\n\u0009 <input type=\"submit\" name=\"defPolSet\" value=\"speichern\">\n\u0009 </td>\n </tr>\n <tr>\n <td>\n\u0009 <font size=\"-2\">\n <table border=\"1\" width=\"100%\">\n <tr>\n\u0009\u0009<th>lfd. Nr.</th>\n <th>Quell-IP</th>\n\u0009\u0009<th>Quell-Subnetzmaske</th>\n\u0009\u0009<th>Ziel-IP</th>\n\u0009\u0009<th>Ziel-Subnetzmaske</th>\n\u0009\u0009<th>Protokoll</th>\n\u0009\u0009<th>Port</th>\n <th>Aktion</th>\n </tr>\n\n<tr>",
|
|
"tcpFlags": "",
|
|
"sequence": 1001461,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1547,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 50999,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000190,
|
|
"acknowledgement": 1002921
|
|
},
|
|
{
|
|
"time": 1770,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 50999,
|
|
"payload": "<td><input name=\"radioRule\" type=\"radio\" value=\"1\" size=\"10\" maxlength=\"40\" /> 1</td><td>10.0.0.0</td><td>255.255.255.0</td><td></td><td></td><td>TCP</td><td>80</td><td>akzeptieren</td></tr><tr><td><input name=\"radioRule\" type=\"radio\" value=\"2\" size=\"10\" maxlength=\"40\" /> 2</td><td></td><td></td><td></td><td></td><td>TCP</td><td>80</td><td>verwerfen</td></tr>\n\n </table>\n </font>\n\u0009 </td>\n </tr>\n\u0009<tr>\n\u0009 <td>\n\u0009 Aktion für ausgewählte Regel:\n\u0009 </td>\n\u0009</tr>\n <tr>\n <td>\n <input type=\"submit\" name=\"moveup\" value=\"rauf\">\n <input type=\"submit\" name=\"movedown\" value=\"runter\">\n <input type=\"submit\" name=\"delrule\" value=\"löschen\">\n </td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n\n <!-- Konfiguration neuer Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td colspan=\"2\">\n <h3>Neue Regel erstellen</h3><br>\n\u0009 Alle Felder sind optional und werden <br>-- falls leer gelassen --<br> für die Filterung nicht verwendet.\n </td>\n </tr>\n <tr>\n <td width=\"30%\">Quell-IP: </td>\n <td width=\"70%\"><input name=\"srcIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n\u0009</tr>\n\u0009<tr>\n <td>Quell-Subnetzmaske: </td>\n <td><input name=\"srcMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n ",
|
|
"tcpFlags": "",
|
|
"sequence": 1002921,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1771,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 50999,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000190,
|
|
"acknowledgement": 1004381
|
|
},
|
|
{
|
|
"time": 1993,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 50999,
|
|
"payload": " <tr>\n <td>Ziel-IP: </td>\n <td> <input name=\"destIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Ziel-Subnetzmaske: </td>\n <td> <input name=\"destMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Protokoll: </td>\n <td> \n\u0009 <select name=\"protocol\" size=\"1\">\n\u0009 <option value=\"*\" >*</option>\n\u0009 <option value=\"TCP\" >TCP</option>\n\u0009 <option value=\"UDP\" >UDP</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td>Port: </td>\n <td> <input name=\"port\" type=\"text\" size=\"5\" maxlength=\"5\" value=\"\"></td>\n </tr>\n <tr>\n <td>Aktion: </td>\n <td> \n\u0009 <select name=\"action\" size=\"1\">\n\u0009 <option value=\"drop\" >verwerfen</option>\n\u0009 <option value=\"accept\" >akzeptieren</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td colspan=\"2\">\n <input type=\"submit\" name=\"addrule\" value=\"hinzufügen\">\n </td>\n </tr>\n </table>\n </td></tr></table></center>\n </form>\n </body>\n</html>\n",
|
|
"tcpFlags": "P",
|
|
"sequence": 1004381,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1994,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 50999,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000190,
|
|
"acknowledgement": 1005524
|
|
},
|
|
{
|
|
"time": 2049,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 50999,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 2000190,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 2272,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 50999,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1005524,
|
|
"acknowledgement": 2000191
|
|
},
|
|
{
|
|
"time": 2328,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 50999,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 1005524,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 2328,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 50999,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000191,
|
|
"acknowledgement": 1005525
|
|
},
|
|
{
|
|
"time": 4001,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 52289,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "S",
|
|
"sequence": 4000000,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4224,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 52289,
|
|
"payload": null,
|
|
"tcpFlags": "SA",
|
|
"sequence": 3000000,
|
|
"acknowledgement": 4000001
|
|
},
|
|
{
|
|
"time": 4224,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 52289,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000001,
|
|
"acknowledgement": 3000001
|
|
},
|
|
{
|
|
"time": 4301,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 52289,
|
|
"destinationPort": 80,
|
|
"payload": "POST /konfig HTTP/1.1\nHost: 10.0.0.1\n\nfirewallActivate=1&dropICMP=1&onlySYN=1&defaultPolicy=accept&radioRule=2&moveup=rauf&srcIP=&srcMask=&destIP=&destMask=&protocol=*&port=&action=drop",
|
|
"tcpFlags": "P",
|
|
"sequence": 4000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4523,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 52289,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000001,
|
|
"acknowledgement": 4000186
|
|
},
|
|
{
|
|
"time": 4579,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 52289,
|
|
"payload": "HTTP/1.1 200 OK\nContent-type: text/html\n\n<html>\n <head>\n <title>Konfiguration der Firewall auf dem Vermittlungsrechner</title>\n </head>\n\n <body>\n\n <form action=\"konfig\" method=\"POST\">\n\u0009<center> <table border=\"0\" cellspacing=\"5\" width=\"400\"> <tr><td> <h2>Firewall-Konfiguration </h2> </td></tr><tr><td>\n <table bgcolor=\"#E0E0E0\" border=\"0\" width=\"100%\" cellpadding=\"5\">\n <tr><td align=\"center\">\n <table border=\"0\" cellpadding=\"5\">\n <tr>\n <td width=\"10%\">\n\u0009\u0009<input name=\"firewallActivate\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\n </td>\n <td width=\"90%\">Firewall aktivieren</td>\n </tr>\n <tr>\n <td colspan=\"2\">\n\u0009 Erst durch Aktivieren der Firewall werden die Firewall-Regeln angewendet. \n\u0009\u0009Bei deaktivierter Firewall findet keine Filterung statt.\n </td>\n </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"dropICMP\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\u0009 \n\u0009 </td>\n\u0009 <td>ICMP-Pakete filtern</td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Alle ICMP Pakete, z.B. Ping-Anfragen, werden von der Firewall verworfen.\n\u0009 </td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"onlySYN\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\u0009\n\u0009 </td>\n\u0009 <td>\n\u0009 nur SYN-Pakete verwerfen\n\u0009 </td>\n\u0009 </t",
|
|
"tcpFlags": "",
|
|
"sequence": 3000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4579,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 52289,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000186,
|
|
"acknowledgement": 3001461
|
|
},
|
|
{
|
|
"time": 4801,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 52289,
|
|
"payload": "r>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Neue Verbindungsanfragen zu gesperrten Ports werden verworfen.\n\u0009\u0009Der Rückkanal für erlaubte Verbindungsanfragen wird akzeptiert.\n\u0009 </td>\n\u0009 </tr>\n </table>\n </tr>\n\u0009 <tr>\n <td><input type=\"submit\" name=\"btnSave\" value=\"speichern\"></td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n <!-- Konfiguration der Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td>\n <h3>Firewall-Regeln:</h3><br>\n\u0009 Die Regeln werden von oben nach unten geprüft.<br>\n\u0009 Sobald eine Regel zutrifft, wird die angegebene Aktion ausgeführt.\n </td>\n </tr>\n <tr>\n <td>\n\u0009 Falls keine Regel zutrifft, wird folgende Standard-Aktion ausgeführt:<br>\n\u0009 <select name=\"defaultPolicy\" size=\"1\">\n\u0009 <option value=\"drop\"\n\u0009 \n\u0009 >verwerfen</option>\n\u0009 <option value=\"accept\"\n selected=\"selected\"\u0009 \n\u0009 >akzeptieren</option>\n\u0009 </select>\n\u0009 <input type=\"submit\" name=\"defPolSet\" value=\"speichern\">\n\u0009 </td>\n </tr>\n <tr>\n <td>\n\u0009 <font size=\"-2\">\n <table border=\"1\" width=\"100%\">\n <tr>\n\u0009\u0009<th>lfd. Nr.</th>\n <th>Quell-IP</th>\n\u0009\u0009<th>Quell-Subnetzmaske</th>\n\u0009\u0009<th>Ziel-IP</th>\n\u0009\u0009<th>Ziel-Subnetzmaske</th>\n\u0009\u0009<th>Protokoll</th>\n\u0009\u0009<th>Port</th>\n <th>Aktion</th>\n </tr>\n\n<tr>",
|
|
"tcpFlags": "",
|
|
"sequence": 3001461,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4802,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 52289,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000186,
|
|
"acknowledgement": 3002921
|
|
},
|
|
{
|
|
"time": 5024,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 52289,
|
|
"payload": "<td><input name=\"radioRule\" type=\"radio\" value=\"1\" size=\"10\" maxlength=\"40\" /> 1</td><td></td><td></td><td></td><td></td><td>TCP</td><td>80</td><td>verwerfen</td></tr><tr><td><input name=\"radioRule\" type=\"radio\" value=\"2\" size=\"10\" maxlength=\"40\" /> 2</td><td>10.0.0.0</td><td>255.255.255.0</td><td></td><td></td><td>TCP</td><td>80</td><td>akzeptieren</td></tr>\n\n </table>\n </font>\n\u0009 </td>\n </tr>\n\u0009<tr>\n\u0009 <td>\n\u0009 Aktion für ausgewählte Regel:\n\u0009 </td>\n\u0009</tr>\n <tr>\n <td>\n <input type=\"submit\" name=\"moveup\" value=\"rauf\">\n <input type=\"submit\" name=\"movedown\" value=\"runter\">\n <input type=\"submit\" name=\"delrule\" value=\"löschen\">\n </td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n\n <!-- Konfiguration neuer Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td colspan=\"2\">\n <h3>Neue Regel erstellen</h3><br>\n\u0009 Alle Felder sind optional und werden <br>-- falls leer gelassen --<br> für die Filterung nicht verwendet.\n </td>\n </tr>\n <tr>\n <td width=\"30%\">Quell-IP: </td>\n <td width=\"70%\"><input name=\"srcIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n\u0009</tr>\n\u0009<tr>\n <td>Quell-Subnetzmaske: </td>\n <td><input name=\"srcMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n ",
|
|
"tcpFlags": "",
|
|
"sequence": 3002921,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 5024,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 52289,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000186,
|
|
"acknowledgement": 3004381
|
|
},
|
|
{
|
|
"time": 5247,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 52289,
|
|
"payload": " <tr>\n <td>Ziel-IP: </td>\n <td> <input name=\"destIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Ziel-Subnetzmaske: </td>\n <td> <input name=\"destMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Protokoll: </td>\n <td> \n\u0009 <select name=\"protocol\" size=\"1\">\n\u0009 <option value=\"*\" >*</option>\n\u0009 <option value=\"TCP\" >TCP</option>\n\u0009 <option value=\"UDP\" >UDP</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td>Port: </td>\n <td> <input name=\"port\" type=\"text\" size=\"5\" maxlength=\"5\" value=\"\"></td>\n </tr>\n <tr>\n <td>Aktion: </td>\n <td> \n\u0009 <select name=\"action\" size=\"1\">\n\u0009 <option value=\"drop\" >verwerfen</option>\n\u0009 <option value=\"accept\" >akzeptieren</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td colspan=\"2\">\n <input type=\"submit\" name=\"addrule\" value=\"hinzufügen\">\n </td>\n </tr>\n </table>\n </td></tr></table></center>\n </form>\n </body>\n</html>\n",
|
|
"tcpFlags": "P",
|
|
"sequence": 3004381,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 5247,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 52289,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000186,
|
|
"acknowledgement": 3005524
|
|
},
|
|
{
|
|
"time": 5303,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 52289,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 4000186,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 5525,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 52289,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3005524,
|
|
"acknowledgement": 4000187
|
|
},
|
|
{
|
|
"time": 5580,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 52289,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 3005524,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 5581,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 52289,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000187,
|
|
"acknowledgement": 3005525
|
|
},
|
|
{
|
|
"time": 8001,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 64828,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "S",
|
|
"sequence": 6000000,
|
|
"acknowledgement": 0
|
|
}
|
|
],
|
|
"00000000-0000-0000-0000-000000000302": [
|
|
{
|
|
"time": 643,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "10.0.0.2",
|
|
"targetIp": "10.0.0.1"
|
|
},
|
|
{
|
|
"time": 644,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"arp": 2,
|
|
"senderIp": "10.0.0.1",
|
|
"targetIp": "10.0.0.2"
|
|
},
|
|
{
|
|
"time": 873,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 50999,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "S",
|
|
"sequence": 2000000,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 876,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 50999,
|
|
"payload": null,
|
|
"tcpFlags": "SA",
|
|
"sequence": 1000000,
|
|
"acknowledgement": 2000001
|
|
},
|
|
{
|
|
"time": 1100,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 50999,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000001,
|
|
"acknowledgement": 1000001
|
|
},
|
|
{
|
|
"time": 1155,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 50999,
|
|
"destinationPort": 80,
|
|
"payload": "POST /konfig HTTP/1.1\nHost: 10.0.0.1\n\nfirewallActivate=1&dropICMP=1&onlySYN=1&defaultPolicy=accept&srcIP=&srcMask=&destIP=&destMask=&protocol=TCP&port=80&action=drop&addrule=hinzuf%C3%BCgen",
|
|
"tcpFlags": "P",
|
|
"sequence": 2000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1156,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 50999,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000001,
|
|
"acknowledgement": 2000190
|
|
},
|
|
{
|
|
"time": 1212,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 50999,
|
|
"payload": "HTTP/1.1 200 OK\nContent-type: text/html\n\n<html>\n <head>\n <title>Konfiguration der Firewall auf dem Vermittlungsrechner</title>\n </head>\n\n <body>\n\n <form action=\"konfig\" method=\"POST\">\n\u0009<center> <table border=\"0\" cellspacing=\"5\" width=\"400\"> <tr><td> <h2>Firewall-Konfiguration </h2> </td></tr><tr><td>\n <table bgcolor=\"#E0E0E0\" border=\"0\" width=\"100%\" cellpadding=\"5\">\n <tr><td align=\"center\">\n <table border=\"0\" cellpadding=\"5\">\n <tr>\n <td width=\"10%\">\n\u0009\u0009<input name=\"firewallActivate\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\n </td>\n <td width=\"90%\">Firewall aktivieren</td>\n </tr>\n <tr>\n <td colspan=\"2\">\n\u0009 Erst durch Aktivieren der Firewall werden die Firewall-Regeln angewendet. \n\u0009\u0009Bei deaktivierter Firewall findet keine Filterung statt.\n </td>\n </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"dropICMP\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\u0009 \n\u0009 </td>\n\u0009 <td>ICMP-Pakete filtern</td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Alle ICMP Pakete, z.B. Ping-Anfragen, werden von der Firewall verworfen.\n\u0009 </td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"onlySYN\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\u0009\n\u0009 </td>\n\u0009 <td>\n\u0009 nur SYN-Pakete verwerfen\n\u0009 </td>\n\u0009 </t",
|
|
"tcpFlags": "",
|
|
"sequence": 1000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1435,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 50999,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000190,
|
|
"acknowledgement": 1001461
|
|
},
|
|
{
|
|
"time": 1435,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 50999,
|
|
"payload": "r>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Neue Verbindungsanfragen zu gesperrten Ports werden verworfen.\n\u0009\u0009Der Rückkanal für erlaubte Verbindungsanfragen wird akzeptiert.\n\u0009 </td>\n\u0009 </tr>\n </table>\n </tr>\n\u0009 <tr>\n <td><input type=\"submit\" name=\"btnSave\" value=\"speichern\"></td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n <!-- Konfiguration der Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td>\n <h3>Firewall-Regeln:</h3><br>\n\u0009 Die Regeln werden von oben nach unten geprüft.<br>\n\u0009 Sobald eine Regel zutrifft, wird die angegebene Aktion ausgeführt.\n </td>\n </tr>\n <tr>\n <td>\n\u0009 Falls keine Regel zutrifft, wird folgende Standard-Aktion ausgeführt:<br>\n\u0009 <select name=\"defaultPolicy\" size=\"1\">\n\u0009 <option value=\"drop\"\n\u0009 \n\u0009 >verwerfen</option>\n\u0009 <option value=\"accept\"\n selected=\"selected\"\u0009 \n\u0009 >akzeptieren</option>\n\u0009 </select>\n\u0009 <input type=\"submit\" name=\"defPolSet\" value=\"speichern\">\n\u0009 </td>\n </tr>\n <tr>\n <td>\n\u0009 <font size=\"-2\">\n <table border=\"1\" width=\"100%\">\n <tr>\n\u0009\u0009<th>lfd. Nr.</th>\n <th>Quell-IP</th>\n\u0009\u0009<th>Quell-Subnetzmaske</th>\n\u0009\u0009<th>Ziel-IP</th>\n\u0009\u0009<th>Ziel-Subnetzmaske</th>\n\u0009\u0009<th>Protokoll</th>\n\u0009\u0009<th>Port</th>\n <th>Aktion</th>\n </tr>\n\n<tr>",
|
|
"tcpFlags": "",
|
|
"sequence": 1001461,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1658,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 50999,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000190,
|
|
"acknowledgement": 1002921
|
|
},
|
|
{
|
|
"time": 1659,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 50999,
|
|
"payload": "<td><input name=\"radioRule\" type=\"radio\" value=\"1\" size=\"10\" maxlength=\"40\" /> 1</td><td>10.0.0.0</td><td>255.255.255.0</td><td></td><td></td><td>TCP</td><td>80</td><td>akzeptieren</td></tr><tr><td><input name=\"radioRule\" type=\"radio\" value=\"2\" size=\"10\" maxlength=\"40\" /> 2</td><td></td><td></td><td></td><td></td><td>TCP</td><td>80</td><td>verwerfen</td></tr>\n\n </table>\n </font>\n\u0009 </td>\n </tr>\n\u0009<tr>\n\u0009 <td>\n\u0009 Aktion für ausgewählte Regel:\n\u0009 </td>\n\u0009</tr>\n <tr>\n <td>\n <input type=\"submit\" name=\"moveup\" value=\"rauf\">\n <input type=\"submit\" name=\"movedown\" value=\"runter\">\n <input type=\"submit\" name=\"delrule\" value=\"löschen\">\n </td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n\n <!-- Konfiguration neuer Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td colspan=\"2\">\n <h3>Neue Regel erstellen</h3><br>\n\u0009 Alle Felder sind optional und werden <br>-- falls leer gelassen --<br> für die Filterung nicht verwendet.\n </td>\n </tr>\n <tr>\n <td width=\"30%\">Quell-IP: </td>\n <td width=\"70%\"><input name=\"srcIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n\u0009</tr>\n\u0009<tr>\n <td>Quell-Subnetzmaske: </td>\n <td><input name=\"srcMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n ",
|
|
"tcpFlags": "",
|
|
"sequence": 1002921,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1882,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 50999,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000190,
|
|
"acknowledgement": 1004381
|
|
},
|
|
{
|
|
"time": 1882,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 50999,
|
|
"payload": " <tr>\n <td>Ziel-IP: </td>\n <td> <input name=\"destIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Ziel-Subnetzmaske: </td>\n <td> <input name=\"destMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Protokoll: </td>\n <td> \n\u0009 <select name=\"protocol\" size=\"1\">\n\u0009 <option value=\"*\" >*</option>\n\u0009 <option value=\"TCP\" >TCP</option>\n\u0009 <option value=\"UDP\" >UDP</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td>Port: </td>\n <td> <input name=\"port\" type=\"text\" size=\"5\" maxlength=\"5\" value=\"\"></td>\n </tr>\n <tr>\n <td>Aktion: </td>\n <td> \n\u0009 <select name=\"action\" size=\"1\">\n\u0009 <option value=\"drop\" >verwerfen</option>\n\u0009 <option value=\"accept\" >akzeptieren</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td colspan=\"2\">\n <input type=\"submit\" name=\"addrule\" value=\"hinzufügen\">\n </td>\n </tr>\n </table>\n </td></tr></table></center>\n </form>\n </body>\n</html>\n",
|
|
"tcpFlags": "P",
|
|
"sequence": 1004381,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 2105,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 50999,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000190,
|
|
"acknowledgement": 1005524
|
|
},
|
|
{
|
|
"time": 2161,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 50999,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 2000190,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 2161,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 50999,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1005524,
|
|
"acknowledgement": 2000191
|
|
},
|
|
{
|
|
"time": 2216,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 50999,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 1005524,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 2439,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 50999,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000191,
|
|
"acknowledgement": 1005525
|
|
},
|
|
{
|
|
"time": 4112,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 52289,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "S",
|
|
"sequence": 4000000,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4112,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 52289,
|
|
"payload": null,
|
|
"tcpFlags": "SA",
|
|
"sequence": 3000000,
|
|
"acknowledgement": 4000001
|
|
},
|
|
{
|
|
"time": 4335,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 52289,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000001,
|
|
"acknowledgement": 3000001
|
|
},
|
|
{
|
|
"time": 4412,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 52289,
|
|
"destinationPort": 80,
|
|
"payload": "POST /konfig HTTP/1.1\nHost: 10.0.0.1\n\nfirewallActivate=1&dropICMP=1&onlySYN=1&defaultPolicy=accept&radioRule=2&moveup=rauf&srcIP=&srcMask=&destIP=&destMask=&protocol=*&port=&action=drop",
|
|
"tcpFlags": "P",
|
|
"sequence": 4000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4412,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 52289,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000001,
|
|
"acknowledgement": 4000186
|
|
},
|
|
{
|
|
"time": 4468,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 52289,
|
|
"payload": "HTTP/1.1 200 OK\nContent-type: text/html\n\n<html>\n <head>\n <title>Konfiguration der Firewall auf dem Vermittlungsrechner</title>\n </head>\n\n <body>\n\n <form action=\"konfig\" method=\"POST\">\n\u0009<center> <table border=\"0\" cellspacing=\"5\" width=\"400\"> <tr><td> <h2>Firewall-Konfiguration </h2> </td></tr><tr><td>\n <table bgcolor=\"#E0E0E0\" border=\"0\" width=\"100%\" cellpadding=\"5\">\n <tr><td align=\"center\">\n <table border=\"0\" cellpadding=\"5\">\n <tr>\n <td width=\"10%\">\n\u0009\u0009<input name=\"firewallActivate\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\n </td>\n <td width=\"90%\">Firewall aktivieren</td>\n </tr>\n <tr>\n <td colspan=\"2\">\n\u0009 Erst durch Aktivieren der Firewall werden die Firewall-Regeln angewendet. \n\u0009\u0009Bei deaktivierter Firewall findet keine Filterung statt.\n </td>\n </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"dropICMP\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\u0009 \n\u0009 </td>\n\u0009 <td>ICMP-Pakete filtern</td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Alle ICMP Pakete, z.B. Ping-Anfragen, werden von der Firewall verworfen.\n\u0009 </td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"onlySYN\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\u0009\n\u0009 </td>\n\u0009 <td>\n\u0009 nur SYN-Pakete verwerfen\n\u0009 </td>\n\u0009 </t",
|
|
"tcpFlags": "",
|
|
"sequence": 3000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4690,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 52289,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000186,
|
|
"acknowledgement": 3001461
|
|
},
|
|
{
|
|
"time": 4690,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 52289,
|
|
"payload": "r>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Neue Verbindungsanfragen zu gesperrten Ports werden verworfen.\n\u0009\u0009Der Rückkanal für erlaubte Verbindungsanfragen wird akzeptiert.\n\u0009 </td>\n\u0009 </tr>\n </table>\n </tr>\n\u0009 <tr>\n <td><input type=\"submit\" name=\"btnSave\" value=\"speichern\"></td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n <!-- Konfiguration der Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td>\n <h3>Firewall-Regeln:</h3><br>\n\u0009 Die Regeln werden von oben nach unten geprüft.<br>\n\u0009 Sobald eine Regel zutrifft, wird die angegebene Aktion ausgeführt.\n </td>\n </tr>\n <tr>\n <td>\n\u0009 Falls keine Regel zutrifft, wird folgende Standard-Aktion ausgeführt:<br>\n\u0009 <select name=\"defaultPolicy\" size=\"1\">\n\u0009 <option value=\"drop\"\n\u0009 \n\u0009 >verwerfen</option>\n\u0009 <option value=\"accept\"\n selected=\"selected\"\u0009 \n\u0009 >akzeptieren</option>\n\u0009 </select>\n\u0009 <input type=\"submit\" name=\"defPolSet\" value=\"speichern\">\n\u0009 </td>\n </tr>\n <tr>\n <td>\n\u0009 <font size=\"-2\">\n <table border=\"1\" width=\"100%\">\n <tr>\n\u0009\u0009<th>lfd. Nr.</th>\n <th>Quell-IP</th>\n\u0009\u0009<th>Quell-Subnetzmaske</th>\n\u0009\u0009<th>Ziel-IP</th>\n\u0009\u0009<th>Ziel-Subnetzmaske</th>\n\u0009\u0009<th>Protokoll</th>\n\u0009\u0009<th>Port</th>\n <th>Aktion</th>\n </tr>\n\n<tr>",
|
|
"tcpFlags": "",
|
|
"sequence": 3001461,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4913,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 52289,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000186,
|
|
"acknowledgement": 3002921
|
|
},
|
|
{
|
|
"time": 4913,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 52289,
|
|
"payload": "<td><input name=\"radioRule\" type=\"radio\" value=\"1\" size=\"10\" maxlength=\"40\" /> 1</td><td></td><td></td><td></td><td></td><td>TCP</td><td>80</td><td>verwerfen</td></tr><tr><td><input name=\"radioRule\" type=\"radio\" value=\"2\" size=\"10\" maxlength=\"40\" /> 2</td><td>10.0.0.0</td><td>255.255.255.0</td><td></td><td></td><td>TCP</td><td>80</td><td>akzeptieren</td></tr>\n\n </table>\n </font>\n\u0009 </td>\n </tr>\n\u0009<tr>\n\u0009 <td>\n\u0009 Aktion für ausgewählte Regel:\n\u0009 </td>\n\u0009</tr>\n <tr>\n <td>\n <input type=\"submit\" name=\"moveup\" value=\"rauf\">\n <input type=\"submit\" name=\"movedown\" value=\"runter\">\n <input type=\"submit\" name=\"delrule\" value=\"löschen\">\n </td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n\n <!-- Konfiguration neuer Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td colspan=\"2\">\n <h3>Neue Regel erstellen</h3><br>\n\u0009 Alle Felder sind optional und werden <br>-- falls leer gelassen --<br> für die Filterung nicht verwendet.\n </td>\n </tr>\n <tr>\n <td width=\"30%\">Quell-IP: </td>\n <td width=\"70%\"><input name=\"srcIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n\u0009</tr>\n\u0009<tr>\n <td>Quell-Subnetzmaske: </td>\n <td><input name=\"srcMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n ",
|
|
"tcpFlags": "",
|
|
"sequence": 3002921,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 5135,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 52289,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000186,
|
|
"acknowledgement": 3004381
|
|
},
|
|
{
|
|
"time": 5136,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 52289,
|
|
"payload": " <tr>\n <td>Ziel-IP: </td>\n <td> <input name=\"destIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Ziel-Subnetzmaske: </td>\n <td> <input name=\"destMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Protokoll: </td>\n <td> \n\u0009 <select name=\"protocol\" size=\"1\">\n\u0009 <option value=\"*\" >*</option>\n\u0009 <option value=\"TCP\" >TCP</option>\n\u0009 <option value=\"UDP\" >UDP</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td>Port: </td>\n <td> <input name=\"port\" type=\"text\" size=\"5\" maxlength=\"5\" value=\"\"></td>\n </tr>\n <tr>\n <td>Aktion: </td>\n <td> \n\u0009 <select name=\"action\" size=\"1\">\n\u0009 <option value=\"drop\" >verwerfen</option>\n\u0009 <option value=\"accept\" >akzeptieren</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td colspan=\"2\">\n <input type=\"submit\" name=\"addrule\" value=\"hinzufügen\">\n </td>\n </tr>\n </table>\n </td></tr></table></center>\n </form>\n </body>\n</html>\n",
|
|
"tcpFlags": "P",
|
|
"sequence": 3004381,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 5358,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 52289,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000186,
|
|
"acknowledgement": 3005524
|
|
},
|
|
{
|
|
"time": 5414,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 52289,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 4000186,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 5414,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 52289,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3005524,
|
|
"acknowledgement": 4000187
|
|
},
|
|
{
|
|
"time": 5469,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 52289,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 3005524,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 5692,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 52289,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000187,
|
|
"acknowledgement": 3005525
|
|
},
|
|
{
|
|
"time": 8112,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 64828,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "S",
|
|
"sequence": 6000000,
|
|
"acknowledgement": 0
|
|
}
|
|
],
|
|
"00000000-0000-0000-0000-000000000302#1": [],
|
|
"00000000-0000-0000-0000-000000000303": []
|
|
},
|
|
"rows": {
|
|
"00000000-0000-0000-0000-000000000301": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:03:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"10.0.0.2:50999",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 2.000.000"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:50999",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"10.0.0.2:50999",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001, ACK: 1.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"10.0.0.2:50999",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"10.0.0.2:50999",
|
|
"10.0.0.1:80",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"POST /konfig HTTP/1.1\nHost: 10.0.0.1\n\nfirewallActivate=1&dropICMP=1&onlySYN=1&defaultPolicy=accept&srcIP=&srcMask=&destIP=&destMask=&protocol=TCP&port=80&action=drop&addrule=hinzuf%C3%BCgen"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:50999",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001, ACK: 2.000.190"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:50999",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001"
|
|
],
|
|
[
|
|
"8",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:50999",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"HTTP/1.1 200 OK\nContent-type: text/html\n\n<html>\n <head>\n <title>Konfiguration der Firewall auf dem Vermittlungsrechner</title>\n </head>\n\n <body>\n\n <form action=\"konfig\" method=\"POST\">\n\u0009<center> <table border=\"0\" cellspacing=\"5\" width=\"400\"> <tr><td> <h2>Firewall-Konfiguration </h2> </td></tr><tr><td>\n <table bgcolor=\"#E0E0E0\" border=\"0\" width=\"100%\" cellpadding=\"5\">\n <tr><td align=\"center\">\n <table border=\"0\" cellpadding=\"5\">\n <tr>\n <td width=\"10%\">\n\u0009\u0009<input name=\"firewallActivate\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\n </td>\n <td width=\"90%\">Firewall aktivieren</td>\n </tr>\n <tr>\n <td colspan=\"2\">\n\u0009 Erst durch Aktivieren der Firewall werden die Firewall-Regeln angewendet. \n\u0009\u0009Bei deaktivierter Firewall findet keine Filterung statt.\n </td>\n </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"dropICMP\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\u0009 \n\u0009 </td>\n\u0009 <td>ICMP-Pakete filtern</td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Alle ICMP Pakete, z.B. Ping-Anfragen, werden von der Firewall verworfen.\n\u0009 </td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"onlySYN\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\u0009\n\u0009 </td>\n\u0009 <td>\n\u0009 nur SYN-Pakete verwerfen\n\u0009 </td>\n\u0009 </t"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"10.0.0.2:50999",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.190, ACK: 1.001.461"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:50999",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.001.461"
|
|
],
|
|
[
|
|
"10",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:50999",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"r>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Neue Verbindungsanfragen zu gesperrten Ports werden verworfen.\n\u0009\u0009Der Rückkanal für erlaubte Verbindungsanfragen wird akzeptiert.\n\u0009 </td>\n\u0009 </tr>\n </table>\n </tr>\n\u0009 <tr>\n <td><input type=\"submit\" name=\"btnSave\" value=\"speichern\"></td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n <!-- Konfiguration der Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td>\n <h3>Firewall-Regeln:</h3><br>\n\u0009 Die Regeln werden von oben nach unten geprüft.<br>\n\u0009 Sobald eine Regel zutrifft, wird die angegebene Aktion ausgeführt.\n </td>\n </tr>\n <tr>\n <td>\n\u0009 Falls keine Regel zutrifft, wird folgende Standard-Aktion ausgeführt:<br>\n\u0009 <select name=\"defaultPolicy\" size=\"1\">\n\u0009 <option value=\"drop\"\n\u0009 \n\u0009 >verwerfen</option>\n\u0009 <option value=\"accept\"\n selected=\"selected\"\u0009 \n\u0009 >akzeptieren</option>\n\u0009 </select>\n\u0009 <input type=\"submit\" name=\"defPolSet\" value=\"speichern\">\n\u0009 </td>\n </tr>\n <tr>\n <td>\n\u0009 <font size=\"-2\">\n <table border=\"1\" width=\"100%\">\n <tr>\n\u0009\u0009<th>lfd. Nr.</th>\n <th>Quell-IP</th>\n\u0009\u0009<th>Quell-Subnetzmaske</th>\n\u0009\u0009<th>Ziel-IP</th>\n\u0009\u0009<th>Ziel-Subnetzmaske</th>\n\u0009\u0009<th>Protokoll</th>\n\u0009\u0009<th>Port</th>\n <th>Aktion</th>\n </tr>\n\n<tr>"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"10.0.0.2:50999",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.190, ACK: 1.002.921"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:50999",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.002.921"
|
|
],
|
|
[
|
|
"12",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:50999",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"<td><input name=\"radioRule\" type=\"radio\" value=\"1\" size=\"10\" maxlength=\"40\" /> 1</td><td>10.0.0.0</td><td>255.255.255.0</td><td></td><td></td><td>TCP</td><td>80</td><td>akzeptieren</td></tr><tr><td><input name=\"radioRule\" type=\"radio\" value=\"2\" size=\"10\" maxlength=\"40\" /> 2</td><td></td><td></td><td></td><td></td><td>TCP</td><td>80</td><td>verwerfen</td></tr>\n\n </table>\n </font>\n\u0009 </td>\n </tr>\n\u0009<tr>\n\u0009 <td>\n\u0009 Aktion für ausgewählte Regel:\n\u0009 </td>\n\u0009</tr>\n <tr>\n <td>\n <input type=\"submit\" name=\"moveup\" value=\"rauf\">\n <input type=\"submit\" name=\"movedown\" value=\"runter\">\n <input type=\"submit\" name=\"delrule\" value=\"löschen\">\n </td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n\n <!-- Konfiguration neuer Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td colspan=\"2\">\n <h3>Neue Regel erstellen</h3><br>\n\u0009 Alle Felder sind optional und werden <br>-- falls leer gelassen --<br> für die Filterung nicht verwendet.\n </td>\n </tr>\n <tr>\n <td width=\"30%\">Quell-IP: </td>\n <td width=\"70%\"><input name=\"srcIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n\u0009</tr>\n\u0009<tr>\n <td>Quell-Subnetzmaske: </td>\n <td><input name=\"srcMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n "
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"10.0.0.2:50999",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.190, ACK: 1.004.381"
|
|
],
|
|
[
|
|
"14",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:50999",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.004.381"
|
|
],
|
|
[
|
|
"14",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:50999",
|
|
"HTTP",
|
|
"Anwendung",
|
|
" <tr>\n <td>Ziel-IP: </td>\n <td> <input name=\"destIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Ziel-Subnetzmaske: </td>\n <td> <input name=\"destMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Protokoll: </td>\n <td> \n\u0009 <select name=\"protocol\" size=\"1\">\n\u0009 <option value=\"*\" >*</option>\n\u0009 <option value=\"TCP\" >TCP</option>\n\u0009 <option value=\"UDP\" >UDP</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td>Port: </td>\n <td> <input name=\"port\" type=\"text\" size=\"5\" maxlength=\"5\" value=\"\"></td>\n </tr>\n <tr>\n <td>Aktion: </td>\n <td> \n\u0009 <select name=\"action\" size=\"1\">\n\u0009 <option value=\"drop\" >verwerfen</option>\n\u0009 <option value=\"accept\" >akzeptieren</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td colspan=\"2\">\n <input type=\"submit\" name=\"addrule\" value=\"hinzufügen\">\n </td>\n </tr>\n </table>\n </td></tr></table></center>\n </form>\n </body>\n</html>\n"
|
|
],
|
|
[
|
|
"15",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"10.0.0.2:50999",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.190, ACK: 1.005.524"
|
|
],
|
|
[
|
|
"16",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"16",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"16",
|
|
"10.0.0.2:50999",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 2.000.190"
|
|
],
|
|
[
|
|
"17",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"17",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"17",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:50999",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.005.524, ACK: 2.000.191"
|
|
],
|
|
[
|
|
"18",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"18",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"18",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:50999",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 1.005.524"
|
|
],
|
|
[
|
|
"19",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"19",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"19",
|
|
"10.0.0.2:50999",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.191, ACK: 1.005.525"
|
|
],
|
|
[
|
|
"20",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"20",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"20",
|
|
"10.0.0.2:52289",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 4.000.000"
|
|
],
|
|
[
|
|
"21",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"21",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"21",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:52289",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 3.000.000, ACK: 4.000.001"
|
|
],
|
|
[
|
|
"22",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"22",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"22",
|
|
"10.0.0.2:52289",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.001, ACK: 3.000.001"
|
|
],
|
|
[
|
|
"23",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"23",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"23",
|
|
"10.0.0.2:52289",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.001"
|
|
],
|
|
[
|
|
"23",
|
|
"10.0.0.2:52289",
|
|
"10.0.0.1:80",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"POST /konfig HTTP/1.1\nHost: 10.0.0.1\n\nfirewallActivate=1&dropICMP=1&onlySYN=1&defaultPolicy=accept&radioRule=2&moveup=rauf&srcIP=&srcMask=&destIP=&destMask=&protocol=*&port=&action=drop"
|
|
],
|
|
[
|
|
"24",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"24",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"24",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:52289",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001, ACK: 4.000.186"
|
|
],
|
|
[
|
|
"25",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"25",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"25",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:52289",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001"
|
|
],
|
|
[
|
|
"25",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:52289",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"HTTP/1.1 200 OK\nContent-type: text/html\n\n<html>\n <head>\n <title>Konfiguration der Firewall auf dem Vermittlungsrechner</title>\n </head>\n\n <body>\n\n <form action=\"konfig\" method=\"POST\">\n\u0009<center> <table border=\"0\" cellspacing=\"5\" width=\"400\"> <tr><td> <h2>Firewall-Konfiguration </h2> </td></tr><tr><td>\n <table bgcolor=\"#E0E0E0\" border=\"0\" width=\"100%\" cellpadding=\"5\">\n <tr><td align=\"center\">\n <table border=\"0\" cellpadding=\"5\">\n <tr>\n <td width=\"10%\">\n\u0009\u0009<input name=\"firewallActivate\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\n </td>\n <td width=\"90%\">Firewall aktivieren</td>\n </tr>\n <tr>\n <td colspan=\"2\">\n\u0009 Erst durch Aktivieren der Firewall werden die Firewall-Regeln angewendet. \n\u0009\u0009Bei deaktivierter Firewall findet keine Filterung statt.\n </td>\n </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"dropICMP\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\u0009 \n\u0009 </td>\n\u0009 <td>ICMP-Pakete filtern</td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Alle ICMP Pakete, z.B. Ping-Anfragen, werden von der Firewall verworfen.\n\u0009 </td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"onlySYN\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\u0009\n\u0009 </td>\n\u0009 <td>\n\u0009 nur SYN-Pakete verwerfen\n\u0009 </td>\n\u0009 </t"
|
|
],
|
|
[
|
|
"26",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"26",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"26",
|
|
"10.0.0.2:52289",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.186, ACK: 3.001.461"
|
|
],
|
|
[
|
|
"27",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"27",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"27",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:52289",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.001.461"
|
|
],
|
|
[
|
|
"27",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:52289",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"r>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Neue Verbindungsanfragen zu gesperrten Ports werden verworfen.\n\u0009\u0009Der Rückkanal für erlaubte Verbindungsanfragen wird akzeptiert.\n\u0009 </td>\n\u0009 </tr>\n </table>\n </tr>\n\u0009 <tr>\n <td><input type=\"submit\" name=\"btnSave\" value=\"speichern\"></td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n <!-- Konfiguration der Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td>\n <h3>Firewall-Regeln:</h3><br>\n\u0009 Die Regeln werden von oben nach unten geprüft.<br>\n\u0009 Sobald eine Regel zutrifft, wird die angegebene Aktion ausgeführt.\n </td>\n </tr>\n <tr>\n <td>\n\u0009 Falls keine Regel zutrifft, wird folgende Standard-Aktion ausgeführt:<br>\n\u0009 <select name=\"defaultPolicy\" size=\"1\">\n\u0009 <option value=\"drop\"\n\u0009 \n\u0009 >verwerfen</option>\n\u0009 <option value=\"accept\"\n selected=\"selected\"\u0009 \n\u0009 >akzeptieren</option>\n\u0009 </select>\n\u0009 <input type=\"submit\" name=\"defPolSet\" value=\"speichern\">\n\u0009 </td>\n </tr>\n <tr>\n <td>\n\u0009 <font size=\"-2\">\n <table border=\"1\" width=\"100%\">\n <tr>\n\u0009\u0009<th>lfd. Nr.</th>\n <th>Quell-IP</th>\n\u0009\u0009<th>Quell-Subnetzmaske</th>\n\u0009\u0009<th>Ziel-IP</th>\n\u0009\u0009<th>Ziel-Subnetzmaske</th>\n\u0009\u0009<th>Protokoll</th>\n\u0009\u0009<th>Port</th>\n <th>Aktion</th>\n </tr>\n\n<tr>"
|
|
],
|
|
[
|
|
"28",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"28",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"28",
|
|
"10.0.0.2:52289",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.186, ACK: 3.002.921"
|
|
],
|
|
[
|
|
"29",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"29",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"29",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:52289",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.002.921"
|
|
],
|
|
[
|
|
"29",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:52289",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"<td><input name=\"radioRule\" type=\"radio\" value=\"1\" size=\"10\" maxlength=\"40\" /> 1</td><td></td><td></td><td></td><td></td><td>TCP</td><td>80</td><td>verwerfen</td></tr><tr><td><input name=\"radioRule\" type=\"radio\" value=\"2\" size=\"10\" maxlength=\"40\" /> 2</td><td>10.0.0.0</td><td>255.255.255.0</td><td></td><td></td><td>TCP</td><td>80</td><td>akzeptieren</td></tr>\n\n </table>\n </font>\n\u0009 </td>\n </tr>\n\u0009<tr>\n\u0009 <td>\n\u0009 Aktion für ausgewählte Regel:\n\u0009 </td>\n\u0009</tr>\n <tr>\n <td>\n <input type=\"submit\" name=\"moveup\" value=\"rauf\">\n <input type=\"submit\" name=\"movedown\" value=\"runter\">\n <input type=\"submit\" name=\"delrule\" value=\"löschen\">\n </td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n\n <!-- Konfiguration neuer Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td colspan=\"2\">\n <h3>Neue Regel erstellen</h3><br>\n\u0009 Alle Felder sind optional und werden <br>-- falls leer gelassen --<br> für die Filterung nicht verwendet.\n </td>\n </tr>\n <tr>\n <td width=\"30%\">Quell-IP: </td>\n <td width=\"70%\"><input name=\"srcIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n\u0009</tr>\n\u0009<tr>\n <td>Quell-Subnetzmaske: </td>\n <td><input name=\"srcMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n "
|
|
],
|
|
[
|
|
"30",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"30",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"30",
|
|
"10.0.0.2:52289",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.186, ACK: 3.004.381"
|
|
],
|
|
[
|
|
"31",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"31",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"31",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:52289",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.004.381"
|
|
],
|
|
[
|
|
"31",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:52289",
|
|
"HTTP",
|
|
"Anwendung",
|
|
" <tr>\n <td>Ziel-IP: </td>\n <td> <input name=\"destIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Ziel-Subnetzmaske: </td>\n <td> <input name=\"destMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Protokoll: </td>\n <td> \n\u0009 <select name=\"protocol\" size=\"1\">\n\u0009 <option value=\"*\" >*</option>\n\u0009 <option value=\"TCP\" >TCP</option>\n\u0009 <option value=\"UDP\" >UDP</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td>Port: </td>\n <td> <input name=\"port\" type=\"text\" size=\"5\" maxlength=\"5\" value=\"\"></td>\n </tr>\n <tr>\n <td>Aktion: </td>\n <td> \n\u0009 <select name=\"action\" size=\"1\">\n\u0009 <option value=\"drop\" >verwerfen</option>\n\u0009 <option value=\"accept\" >akzeptieren</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td colspan=\"2\">\n <input type=\"submit\" name=\"addrule\" value=\"hinzufügen\">\n </td>\n </tr>\n </table>\n </td></tr></table></center>\n </form>\n </body>\n</html>\n"
|
|
],
|
|
[
|
|
"32",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"32",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"32",
|
|
"10.0.0.2:52289",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.186, ACK: 3.005.524"
|
|
],
|
|
[
|
|
"33",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"33",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"33",
|
|
"10.0.0.2:52289",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 4.000.186"
|
|
],
|
|
[
|
|
"34",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"34",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"34",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:52289",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.005.524, ACK: 4.000.187"
|
|
],
|
|
[
|
|
"35",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"35",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"35",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:52289",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 3.005.524"
|
|
],
|
|
[
|
|
"36",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"36",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"36",
|
|
"10.0.0.2:52289",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.187, ACK: 3.005.525"
|
|
],
|
|
[
|
|
"37",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"37",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"37",
|
|
"10.0.0.2:64828",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 6.000.000"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000302": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:03:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"10.0.0.2:50999",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 2.000.000"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:50999",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"10.0.0.2:50999",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001, ACK: 1.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"10.0.0.2:50999",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"10.0.0.2:50999",
|
|
"10.0.0.1:80",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"POST /konfig HTTP/1.1\nHost: 10.0.0.1\n\nfirewallActivate=1&dropICMP=1&onlySYN=1&defaultPolicy=accept&srcIP=&srcMask=&destIP=&destMask=&protocol=TCP&port=80&action=drop&addrule=hinzuf%C3%BCgen"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:50999",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001, ACK: 2.000.190"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:50999",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001"
|
|
],
|
|
[
|
|
"8",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:50999",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"HTTP/1.1 200 OK\nContent-type: text/html\n\n<html>\n <head>\n <title>Konfiguration der Firewall auf dem Vermittlungsrechner</title>\n </head>\n\n <body>\n\n <form action=\"konfig\" method=\"POST\">\n\u0009<center> <table border=\"0\" cellspacing=\"5\" width=\"400\"> <tr><td> <h2>Firewall-Konfiguration </h2> </td></tr><tr><td>\n <table bgcolor=\"#E0E0E0\" border=\"0\" width=\"100%\" cellpadding=\"5\">\n <tr><td align=\"center\">\n <table border=\"0\" cellpadding=\"5\">\n <tr>\n <td width=\"10%\">\n\u0009\u0009<input name=\"firewallActivate\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\n </td>\n <td width=\"90%\">Firewall aktivieren</td>\n </tr>\n <tr>\n <td colspan=\"2\">\n\u0009 Erst durch Aktivieren der Firewall werden die Firewall-Regeln angewendet. \n\u0009\u0009Bei deaktivierter Firewall findet keine Filterung statt.\n </td>\n </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"dropICMP\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\u0009 \n\u0009 </td>\n\u0009 <td>ICMP-Pakete filtern</td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Alle ICMP Pakete, z.B. Ping-Anfragen, werden von der Firewall verworfen.\n\u0009 </td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"onlySYN\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\u0009\n\u0009 </td>\n\u0009 <td>\n\u0009 nur SYN-Pakete verwerfen\n\u0009 </td>\n\u0009 </t"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"10.0.0.2:50999",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.190, ACK: 1.001.461"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:50999",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.001.461"
|
|
],
|
|
[
|
|
"10",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:50999",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"r>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Neue Verbindungsanfragen zu gesperrten Ports werden verworfen.\n\u0009\u0009Der Rückkanal für erlaubte Verbindungsanfragen wird akzeptiert.\n\u0009 </td>\n\u0009 </tr>\n </table>\n </tr>\n\u0009 <tr>\n <td><input type=\"submit\" name=\"btnSave\" value=\"speichern\"></td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n <!-- Konfiguration der Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td>\n <h3>Firewall-Regeln:</h3><br>\n\u0009 Die Regeln werden von oben nach unten geprüft.<br>\n\u0009 Sobald eine Regel zutrifft, wird die angegebene Aktion ausgeführt.\n </td>\n </tr>\n <tr>\n <td>\n\u0009 Falls keine Regel zutrifft, wird folgende Standard-Aktion ausgeführt:<br>\n\u0009 <select name=\"defaultPolicy\" size=\"1\">\n\u0009 <option value=\"drop\"\n\u0009 \n\u0009 >verwerfen</option>\n\u0009 <option value=\"accept\"\n selected=\"selected\"\u0009 \n\u0009 >akzeptieren</option>\n\u0009 </select>\n\u0009 <input type=\"submit\" name=\"defPolSet\" value=\"speichern\">\n\u0009 </td>\n </tr>\n <tr>\n <td>\n\u0009 <font size=\"-2\">\n <table border=\"1\" width=\"100%\">\n <tr>\n\u0009\u0009<th>lfd. Nr.</th>\n <th>Quell-IP</th>\n\u0009\u0009<th>Quell-Subnetzmaske</th>\n\u0009\u0009<th>Ziel-IP</th>\n\u0009\u0009<th>Ziel-Subnetzmaske</th>\n\u0009\u0009<th>Protokoll</th>\n\u0009\u0009<th>Port</th>\n <th>Aktion</th>\n </tr>\n\n<tr>"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"10.0.0.2:50999",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.190, ACK: 1.002.921"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:50999",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.002.921"
|
|
],
|
|
[
|
|
"12",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:50999",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"<td><input name=\"radioRule\" type=\"radio\" value=\"1\" size=\"10\" maxlength=\"40\" /> 1</td><td>10.0.0.0</td><td>255.255.255.0</td><td></td><td></td><td>TCP</td><td>80</td><td>akzeptieren</td></tr><tr><td><input name=\"radioRule\" type=\"radio\" value=\"2\" size=\"10\" maxlength=\"40\" /> 2</td><td></td><td></td><td></td><td></td><td>TCP</td><td>80</td><td>verwerfen</td></tr>\n\n </table>\n </font>\n\u0009 </td>\n </tr>\n\u0009<tr>\n\u0009 <td>\n\u0009 Aktion für ausgewählte Regel:\n\u0009 </td>\n\u0009</tr>\n <tr>\n <td>\n <input type=\"submit\" name=\"moveup\" value=\"rauf\">\n <input type=\"submit\" name=\"movedown\" value=\"runter\">\n <input type=\"submit\" name=\"delrule\" value=\"löschen\">\n </td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n\n <!-- Konfiguration neuer Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td colspan=\"2\">\n <h3>Neue Regel erstellen</h3><br>\n\u0009 Alle Felder sind optional und werden <br>-- falls leer gelassen --<br> für die Filterung nicht verwendet.\n </td>\n </tr>\n <tr>\n <td width=\"30%\">Quell-IP: </td>\n <td width=\"70%\"><input name=\"srcIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n\u0009</tr>\n\u0009<tr>\n <td>Quell-Subnetzmaske: </td>\n <td><input name=\"srcMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n "
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"10.0.0.2:50999",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.190, ACK: 1.004.381"
|
|
],
|
|
[
|
|
"14",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:50999",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.004.381"
|
|
],
|
|
[
|
|
"14",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:50999",
|
|
"HTTP",
|
|
"Anwendung",
|
|
" <tr>\n <td>Ziel-IP: </td>\n <td> <input name=\"destIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Ziel-Subnetzmaske: </td>\n <td> <input name=\"destMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Protokoll: </td>\n <td> \n\u0009 <select name=\"protocol\" size=\"1\">\n\u0009 <option value=\"*\" >*</option>\n\u0009 <option value=\"TCP\" >TCP</option>\n\u0009 <option value=\"UDP\" >UDP</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td>Port: </td>\n <td> <input name=\"port\" type=\"text\" size=\"5\" maxlength=\"5\" value=\"\"></td>\n </tr>\n <tr>\n <td>Aktion: </td>\n <td> \n\u0009 <select name=\"action\" size=\"1\">\n\u0009 <option value=\"drop\" >verwerfen</option>\n\u0009 <option value=\"accept\" >akzeptieren</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td colspan=\"2\">\n <input type=\"submit\" name=\"addrule\" value=\"hinzufügen\">\n </td>\n </tr>\n </table>\n </td></tr></table></center>\n </form>\n </body>\n</html>\n"
|
|
],
|
|
[
|
|
"15",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"10.0.0.2:50999",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.190, ACK: 1.005.524"
|
|
],
|
|
[
|
|
"16",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"16",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"16",
|
|
"10.0.0.2:50999",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 2.000.190"
|
|
],
|
|
[
|
|
"17",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"17",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"17",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:50999",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.005.524, ACK: 2.000.191"
|
|
],
|
|
[
|
|
"18",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"18",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"18",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:50999",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 1.005.524"
|
|
],
|
|
[
|
|
"19",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"19",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"19",
|
|
"10.0.0.2:50999",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.191, ACK: 1.005.525"
|
|
],
|
|
[
|
|
"20",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"20",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"20",
|
|
"10.0.0.2:52289",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 4.000.000"
|
|
],
|
|
[
|
|
"21",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"21",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"21",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:52289",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 3.000.000, ACK: 4.000.001"
|
|
],
|
|
[
|
|
"22",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"22",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"22",
|
|
"10.0.0.2:52289",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.001, ACK: 3.000.001"
|
|
],
|
|
[
|
|
"23",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"23",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"23",
|
|
"10.0.0.2:52289",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.001"
|
|
],
|
|
[
|
|
"23",
|
|
"10.0.0.2:52289",
|
|
"10.0.0.1:80",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"POST /konfig HTTP/1.1\nHost: 10.0.0.1\n\nfirewallActivate=1&dropICMP=1&onlySYN=1&defaultPolicy=accept&radioRule=2&moveup=rauf&srcIP=&srcMask=&destIP=&destMask=&protocol=*&port=&action=drop"
|
|
],
|
|
[
|
|
"24",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"24",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"24",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:52289",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001, ACK: 4.000.186"
|
|
],
|
|
[
|
|
"25",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"25",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"25",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:52289",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001"
|
|
],
|
|
[
|
|
"25",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:52289",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"HTTP/1.1 200 OK\nContent-type: text/html\n\n<html>\n <head>\n <title>Konfiguration der Firewall auf dem Vermittlungsrechner</title>\n </head>\n\n <body>\n\n <form action=\"konfig\" method=\"POST\">\n\u0009<center> <table border=\"0\" cellspacing=\"5\" width=\"400\"> <tr><td> <h2>Firewall-Konfiguration </h2> </td></tr><tr><td>\n <table bgcolor=\"#E0E0E0\" border=\"0\" width=\"100%\" cellpadding=\"5\">\n <tr><td align=\"center\">\n <table border=\"0\" cellpadding=\"5\">\n <tr>\n <td width=\"10%\">\n\u0009\u0009<input name=\"firewallActivate\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\n </td>\n <td width=\"90%\">Firewall aktivieren</td>\n </tr>\n <tr>\n <td colspan=\"2\">\n\u0009 Erst durch Aktivieren der Firewall werden die Firewall-Regeln angewendet. \n\u0009\u0009Bei deaktivierter Firewall findet keine Filterung statt.\n </td>\n </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"dropICMP\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\u0009 \n\u0009 </td>\n\u0009 <td>ICMP-Pakete filtern</td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Alle ICMP Pakete, z.B. Ping-Anfragen, werden von der Firewall verworfen.\n\u0009 </td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"onlySYN\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\u0009\n\u0009 </td>\n\u0009 <td>\n\u0009 nur SYN-Pakete verwerfen\n\u0009 </td>\n\u0009 </t"
|
|
],
|
|
[
|
|
"26",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"26",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"26",
|
|
"10.0.0.2:52289",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.186, ACK: 3.001.461"
|
|
],
|
|
[
|
|
"27",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"27",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"27",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:52289",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.001.461"
|
|
],
|
|
[
|
|
"27",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:52289",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"r>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Neue Verbindungsanfragen zu gesperrten Ports werden verworfen.\n\u0009\u0009Der Rückkanal für erlaubte Verbindungsanfragen wird akzeptiert.\n\u0009 </td>\n\u0009 </tr>\n </table>\n </tr>\n\u0009 <tr>\n <td><input type=\"submit\" name=\"btnSave\" value=\"speichern\"></td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n <!-- Konfiguration der Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td>\n <h3>Firewall-Regeln:</h3><br>\n\u0009 Die Regeln werden von oben nach unten geprüft.<br>\n\u0009 Sobald eine Regel zutrifft, wird die angegebene Aktion ausgeführt.\n </td>\n </tr>\n <tr>\n <td>\n\u0009 Falls keine Regel zutrifft, wird folgende Standard-Aktion ausgeführt:<br>\n\u0009 <select name=\"defaultPolicy\" size=\"1\">\n\u0009 <option value=\"drop\"\n\u0009 \n\u0009 >verwerfen</option>\n\u0009 <option value=\"accept\"\n selected=\"selected\"\u0009 \n\u0009 >akzeptieren</option>\n\u0009 </select>\n\u0009 <input type=\"submit\" name=\"defPolSet\" value=\"speichern\">\n\u0009 </td>\n </tr>\n <tr>\n <td>\n\u0009 <font size=\"-2\">\n <table border=\"1\" width=\"100%\">\n <tr>\n\u0009\u0009<th>lfd. Nr.</th>\n <th>Quell-IP</th>\n\u0009\u0009<th>Quell-Subnetzmaske</th>\n\u0009\u0009<th>Ziel-IP</th>\n\u0009\u0009<th>Ziel-Subnetzmaske</th>\n\u0009\u0009<th>Protokoll</th>\n\u0009\u0009<th>Port</th>\n <th>Aktion</th>\n </tr>\n\n<tr>"
|
|
],
|
|
[
|
|
"28",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"28",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"28",
|
|
"10.0.0.2:52289",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.186, ACK: 3.002.921"
|
|
],
|
|
[
|
|
"29",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"29",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"29",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:52289",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.002.921"
|
|
],
|
|
[
|
|
"29",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:52289",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"<td><input name=\"radioRule\" type=\"radio\" value=\"1\" size=\"10\" maxlength=\"40\" /> 1</td><td></td><td></td><td></td><td></td><td>TCP</td><td>80</td><td>verwerfen</td></tr><tr><td><input name=\"radioRule\" type=\"radio\" value=\"2\" size=\"10\" maxlength=\"40\" /> 2</td><td>10.0.0.0</td><td>255.255.255.0</td><td></td><td></td><td>TCP</td><td>80</td><td>akzeptieren</td></tr>\n\n </table>\n </font>\n\u0009 </td>\n </tr>\n\u0009<tr>\n\u0009 <td>\n\u0009 Aktion für ausgewählte Regel:\n\u0009 </td>\n\u0009</tr>\n <tr>\n <td>\n <input type=\"submit\" name=\"moveup\" value=\"rauf\">\n <input type=\"submit\" name=\"movedown\" value=\"runter\">\n <input type=\"submit\" name=\"delrule\" value=\"löschen\">\n </td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n\n <!-- Konfiguration neuer Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td colspan=\"2\">\n <h3>Neue Regel erstellen</h3><br>\n\u0009 Alle Felder sind optional und werden <br>-- falls leer gelassen --<br> für die Filterung nicht verwendet.\n </td>\n </tr>\n <tr>\n <td width=\"30%\">Quell-IP: </td>\n <td width=\"70%\"><input name=\"srcIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n\u0009</tr>\n\u0009<tr>\n <td>Quell-Subnetzmaske: </td>\n <td><input name=\"srcMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n "
|
|
],
|
|
[
|
|
"30",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"30",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"30",
|
|
"10.0.0.2:52289",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.186, ACK: 3.004.381"
|
|
],
|
|
[
|
|
"31",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"31",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"31",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:52289",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.004.381"
|
|
],
|
|
[
|
|
"31",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:52289",
|
|
"HTTP",
|
|
"Anwendung",
|
|
" <tr>\n <td>Ziel-IP: </td>\n <td> <input name=\"destIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Ziel-Subnetzmaske: </td>\n <td> <input name=\"destMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Protokoll: </td>\n <td> \n\u0009 <select name=\"protocol\" size=\"1\">\n\u0009 <option value=\"*\" >*</option>\n\u0009 <option value=\"TCP\" >TCP</option>\n\u0009 <option value=\"UDP\" >UDP</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td>Port: </td>\n <td> <input name=\"port\" type=\"text\" size=\"5\" maxlength=\"5\" value=\"\"></td>\n </tr>\n <tr>\n <td>Aktion: </td>\n <td> \n\u0009 <select name=\"action\" size=\"1\">\n\u0009 <option value=\"drop\" >verwerfen</option>\n\u0009 <option value=\"accept\" >akzeptieren</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td colspan=\"2\">\n <input type=\"submit\" name=\"addrule\" value=\"hinzufügen\">\n </td>\n </tr>\n </table>\n </td></tr></table></center>\n </form>\n </body>\n</html>\n"
|
|
],
|
|
[
|
|
"32",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"32",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"32",
|
|
"10.0.0.2:52289",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.186, ACK: 3.005.524"
|
|
],
|
|
[
|
|
"33",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"33",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"33",
|
|
"10.0.0.2:52289",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 4.000.186"
|
|
],
|
|
[
|
|
"34",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"34",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"34",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:52289",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.005.524, ACK: 4.000.187"
|
|
],
|
|
[
|
|
"35",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"35",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"35",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:52289",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 3.005.524"
|
|
],
|
|
[
|
|
"36",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"36",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"36",
|
|
"10.0.0.2:52289",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.187, ACK: 3.005.525"
|
|
],
|
|
[
|
|
"37",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"37",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"37",
|
|
"10.0.0.2:64828",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 6.000.000"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000302#1": [],
|
|
"00000000-0000-0000-0000-000000000303": []
|
|
},
|
|
"layeredRows": {
|
|
"00000000-0000-0000-0000-000000000301": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:03:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"50999",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 2.000.000"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"80",
|
|
"50999",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"50999",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001, ACK: 1.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"50999",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
null,
|
|
null,
|
|
"HTTP",
|
|
"Anwendung",
|
|
"POST /konfig HTTP/1.1\nHost: 10.0.0.1\n\nfirewallActivate=1&dropICMP=1&onlySYN=1&defaultPolicy=accept&srcIP=&srcMask=&destIP=&destMask=&protocol=TCP&port=80&action=drop&addrule=hinzuf%C3%BCgen"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"80",
|
|
"50999",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001, ACK: 2.000.190"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"80",
|
|
"50999",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001"
|
|
],
|
|
[
|
|
"8",
|
|
null,
|
|
null,
|
|
"HTTP",
|
|
"Anwendung",
|
|
"HTTP/1.1 200 OK\nContent-type: text/html\n\n<html>\n <head>\n <title>Konfiguration der Firewall auf dem Vermittlungsrechner</title>\n </head>\n\n <body>\n\n <form action=\"konfig\" method=\"POST\">\n\u0009<center> <table border=\"0\" cellspacing=\"5\" width=\"400\"> <tr><td> <h2>Firewall-Konfiguration </h2> </td></tr><tr><td>\n <table bgcolor=\"#E0E0E0\" border=\"0\" width=\"100%\" cellpadding=\"5\">\n <tr><td align=\"center\">\n <table border=\"0\" cellpadding=\"5\">\n <tr>\n <td width=\"10%\">\n\u0009\u0009<input name=\"firewallActivate\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\n </td>\n <td width=\"90%\">Firewall aktivieren</td>\n </tr>\n <tr>\n <td colspan=\"2\">\n\u0009 Erst durch Aktivieren der Firewall werden die Firewall-Regeln angewendet. \n\u0009\u0009Bei deaktivierter Firewall findet keine Filterung statt.\n </td>\n </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"dropICMP\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\u0009 \n\u0009 </td>\n\u0009 <td>ICMP-Pakete filtern</td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Alle ICMP Pakete, z.B. Ping-Anfragen, werden von der Firewall verworfen.\n\u0009 </td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"onlySYN\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\u0009\n\u0009 </td>\n\u0009 <td>\n\u0009 nur SYN-Pakete verwerfen\n\u0009 </td>\n\u0009 </t"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"50999",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.190, ACK: 1.001.461"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"80",
|
|
"50999",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.001.461"
|
|
],
|
|
[
|
|
"10",
|
|
null,
|
|
null,
|
|
"HTTP",
|
|
"Anwendung",
|
|
"r>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Neue Verbindungsanfragen zu gesperrten Ports werden verworfen.\n\u0009\u0009Der Rückkanal für erlaubte Verbindungsanfragen wird akzeptiert.\n\u0009 </td>\n\u0009 </tr>\n </table>\n </tr>\n\u0009 <tr>\n <td><input type=\"submit\" name=\"btnSave\" value=\"speichern\"></td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n <!-- Konfiguration der Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td>\n <h3>Firewall-Regeln:</h3><br>\n\u0009 Die Regeln werden von oben nach unten geprüft.<br>\n\u0009 Sobald eine Regel zutrifft, wird die angegebene Aktion ausgeführt.\n </td>\n </tr>\n <tr>\n <td>\n\u0009 Falls keine Regel zutrifft, wird folgende Standard-Aktion ausgeführt:<br>\n\u0009 <select name=\"defaultPolicy\" size=\"1\">\n\u0009 <option value=\"drop\"\n\u0009 \n\u0009 >verwerfen</option>\n\u0009 <option value=\"accept\"\n selected=\"selected\"\u0009 \n\u0009 >akzeptieren</option>\n\u0009 </select>\n\u0009 <input type=\"submit\" name=\"defPolSet\" value=\"speichern\">\n\u0009 </td>\n </tr>\n <tr>\n <td>\n\u0009 <font size=\"-2\">\n <table border=\"1\" width=\"100%\">\n <tr>\n\u0009\u0009<th>lfd. Nr.</th>\n <th>Quell-IP</th>\n\u0009\u0009<th>Quell-Subnetzmaske</th>\n\u0009\u0009<th>Ziel-IP</th>\n\u0009\u0009<th>Ziel-Subnetzmaske</th>\n\u0009\u0009<th>Protokoll</th>\n\u0009\u0009<th>Port</th>\n <th>Aktion</th>\n </tr>\n\n<tr>"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"50999",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.190, ACK: 1.002.921"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"80",
|
|
"50999",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.002.921"
|
|
],
|
|
[
|
|
"12",
|
|
null,
|
|
null,
|
|
"HTTP",
|
|
"Anwendung",
|
|
"<td><input name=\"radioRule\" type=\"radio\" value=\"1\" size=\"10\" maxlength=\"40\" /> 1</td><td>10.0.0.0</td><td>255.255.255.0</td><td></td><td></td><td>TCP</td><td>80</td><td>akzeptieren</td></tr><tr><td><input name=\"radioRule\" type=\"radio\" value=\"2\" size=\"10\" maxlength=\"40\" /> 2</td><td></td><td></td><td></td><td></td><td>TCP</td><td>80</td><td>verwerfen</td></tr>\n\n </table>\n </font>\n\u0009 </td>\n </tr>\n\u0009<tr>\n\u0009 <td>\n\u0009 Aktion für ausgewählte Regel:\n\u0009 </td>\n\u0009</tr>\n <tr>\n <td>\n <input type=\"submit\" name=\"moveup\" value=\"rauf\">\n <input type=\"submit\" name=\"movedown\" value=\"runter\">\n <input type=\"submit\" name=\"delrule\" value=\"löschen\">\n </td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n\n <!-- Konfiguration neuer Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td colspan=\"2\">\n <h3>Neue Regel erstellen</h3><br>\n\u0009 Alle Felder sind optional und werden <br>-- falls leer gelassen --<br> für die Filterung nicht verwendet.\n </td>\n </tr>\n <tr>\n <td width=\"30%\">Quell-IP: </td>\n <td width=\"70%\"><input name=\"srcIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n\u0009</tr>\n\u0009<tr>\n <td>Quell-Subnetzmaske: </td>\n <td><input name=\"srcMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n "
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"50999",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.190, ACK: 1.004.381"
|
|
],
|
|
[
|
|
"14",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"80",
|
|
"50999",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.004.381"
|
|
],
|
|
[
|
|
"14",
|
|
null,
|
|
null,
|
|
"HTTP",
|
|
"Anwendung",
|
|
" <tr>\n <td>Ziel-IP: </td>\n <td> <input name=\"destIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Ziel-Subnetzmaske: </td>\n <td> <input name=\"destMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Protokoll: </td>\n <td> \n\u0009 <select name=\"protocol\" size=\"1\">\n\u0009 <option value=\"*\" >*</option>\n\u0009 <option value=\"TCP\" >TCP</option>\n\u0009 <option value=\"UDP\" >UDP</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td>Port: </td>\n <td> <input name=\"port\" type=\"text\" size=\"5\" maxlength=\"5\" value=\"\"></td>\n </tr>\n <tr>\n <td>Aktion: </td>\n <td> \n\u0009 <select name=\"action\" size=\"1\">\n\u0009 <option value=\"drop\" >verwerfen</option>\n\u0009 <option value=\"accept\" >akzeptieren</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td colspan=\"2\">\n <input type=\"submit\" name=\"addrule\" value=\"hinzufügen\">\n </td>\n </tr>\n </table>\n </td></tr></table></center>\n </form>\n </body>\n</html>\n"
|
|
],
|
|
[
|
|
"15",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"50999",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.190, ACK: 1.005.524"
|
|
],
|
|
[
|
|
"16",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"16",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"16",
|
|
"50999",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 2.000.190"
|
|
],
|
|
[
|
|
"17",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"17",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"17",
|
|
"80",
|
|
"50999",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.005.524, ACK: 2.000.191"
|
|
],
|
|
[
|
|
"18",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"18",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"18",
|
|
"80",
|
|
"50999",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 1.005.524"
|
|
],
|
|
[
|
|
"19",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"19",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"19",
|
|
"50999",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.191, ACK: 1.005.525"
|
|
],
|
|
[
|
|
"20",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"20",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"20",
|
|
"52289",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 4.000.000"
|
|
],
|
|
[
|
|
"21",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"21",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"21",
|
|
"80",
|
|
"52289",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 3.000.000, ACK: 4.000.001"
|
|
],
|
|
[
|
|
"22",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"22",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"22",
|
|
"52289",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.001, ACK: 3.000.001"
|
|
],
|
|
[
|
|
"23",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"23",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"23",
|
|
"52289",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.001"
|
|
],
|
|
[
|
|
"23",
|
|
null,
|
|
null,
|
|
"HTTP",
|
|
"Anwendung",
|
|
"POST /konfig HTTP/1.1\nHost: 10.0.0.1\n\nfirewallActivate=1&dropICMP=1&onlySYN=1&defaultPolicy=accept&radioRule=2&moveup=rauf&srcIP=&srcMask=&destIP=&destMask=&protocol=*&port=&action=drop"
|
|
],
|
|
[
|
|
"24",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"24",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"24",
|
|
"80",
|
|
"52289",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001, ACK: 4.000.186"
|
|
],
|
|
[
|
|
"25",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"25",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"25",
|
|
"80",
|
|
"52289",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001"
|
|
],
|
|
[
|
|
"25",
|
|
null,
|
|
null,
|
|
"HTTP",
|
|
"Anwendung",
|
|
"HTTP/1.1 200 OK\nContent-type: text/html\n\n<html>\n <head>\n <title>Konfiguration der Firewall auf dem Vermittlungsrechner</title>\n </head>\n\n <body>\n\n <form action=\"konfig\" method=\"POST\">\n\u0009<center> <table border=\"0\" cellspacing=\"5\" width=\"400\"> <tr><td> <h2>Firewall-Konfiguration </h2> </td></tr><tr><td>\n <table bgcolor=\"#E0E0E0\" border=\"0\" width=\"100%\" cellpadding=\"5\">\n <tr><td align=\"center\">\n <table border=\"0\" cellpadding=\"5\">\n <tr>\n <td width=\"10%\">\n\u0009\u0009<input name=\"firewallActivate\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\n </td>\n <td width=\"90%\">Firewall aktivieren</td>\n </tr>\n <tr>\n <td colspan=\"2\">\n\u0009 Erst durch Aktivieren der Firewall werden die Firewall-Regeln angewendet. \n\u0009\u0009Bei deaktivierter Firewall findet keine Filterung statt.\n </td>\n </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"dropICMP\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\u0009 \n\u0009 </td>\n\u0009 <td>ICMP-Pakete filtern</td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Alle ICMP Pakete, z.B. Ping-Anfragen, werden von der Firewall verworfen.\n\u0009 </td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"onlySYN\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\u0009\n\u0009 </td>\n\u0009 <td>\n\u0009 nur SYN-Pakete verwerfen\n\u0009 </td>\n\u0009 </t"
|
|
],
|
|
[
|
|
"26",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"26",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"26",
|
|
"52289",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.186, ACK: 3.001.461"
|
|
],
|
|
[
|
|
"27",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"27",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"27",
|
|
"80",
|
|
"52289",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.001.461"
|
|
],
|
|
[
|
|
"27",
|
|
null,
|
|
null,
|
|
"HTTP",
|
|
"Anwendung",
|
|
"r>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Neue Verbindungsanfragen zu gesperrten Ports werden verworfen.\n\u0009\u0009Der Rückkanal für erlaubte Verbindungsanfragen wird akzeptiert.\n\u0009 </td>\n\u0009 </tr>\n </table>\n </tr>\n\u0009 <tr>\n <td><input type=\"submit\" name=\"btnSave\" value=\"speichern\"></td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n <!-- Konfiguration der Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td>\n <h3>Firewall-Regeln:</h3><br>\n\u0009 Die Regeln werden von oben nach unten geprüft.<br>\n\u0009 Sobald eine Regel zutrifft, wird die angegebene Aktion ausgeführt.\n </td>\n </tr>\n <tr>\n <td>\n\u0009 Falls keine Regel zutrifft, wird folgende Standard-Aktion ausgeführt:<br>\n\u0009 <select name=\"defaultPolicy\" size=\"1\">\n\u0009 <option value=\"drop\"\n\u0009 \n\u0009 >verwerfen</option>\n\u0009 <option value=\"accept\"\n selected=\"selected\"\u0009 \n\u0009 >akzeptieren</option>\n\u0009 </select>\n\u0009 <input type=\"submit\" name=\"defPolSet\" value=\"speichern\">\n\u0009 </td>\n </tr>\n <tr>\n <td>\n\u0009 <font size=\"-2\">\n <table border=\"1\" width=\"100%\">\n <tr>\n\u0009\u0009<th>lfd. Nr.</th>\n <th>Quell-IP</th>\n\u0009\u0009<th>Quell-Subnetzmaske</th>\n\u0009\u0009<th>Ziel-IP</th>\n\u0009\u0009<th>Ziel-Subnetzmaske</th>\n\u0009\u0009<th>Protokoll</th>\n\u0009\u0009<th>Port</th>\n <th>Aktion</th>\n </tr>\n\n<tr>"
|
|
],
|
|
[
|
|
"28",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"28",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"28",
|
|
"52289",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.186, ACK: 3.002.921"
|
|
],
|
|
[
|
|
"29",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"29",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"29",
|
|
"80",
|
|
"52289",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.002.921"
|
|
],
|
|
[
|
|
"29",
|
|
null,
|
|
null,
|
|
"HTTP",
|
|
"Anwendung",
|
|
"<td><input name=\"radioRule\" type=\"radio\" value=\"1\" size=\"10\" maxlength=\"40\" /> 1</td><td></td><td></td><td></td><td></td><td>TCP</td><td>80</td><td>verwerfen</td></tr><tr><td><input name=\"radioRule\" type=\"radio\" value=\"2\" size=\"10\" maxlength=\"40\" /> 2</td><td>10.0.0.0</td><td>255.255.255.0</td><td></td><td></td><td>TCP</td><td>80</td><td>akzeptieren</td></tr>\n\n </table>\n </font>\n\u0009 </td>\n </tr>\n\u0009<tr>\n\u0009 <td>\n\u0009 Aktion für ausgewählte Regel:\n\u0009 </td>\n\u0009</tr>\n <tr>\n <td>\n <input type=\"submit\" name=\"moveup\" value=\"rauf\">\n <input type=\"submit\" name=\"movedown\" value=\"runter\">\n <input type=\"submit\" name=\"delrule\" value=\"löschen\">\n </td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n\n <!-- Konfiguration neuer Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td colspan=\"2\">\n <h3>Neue Regel erstellen</h3><br>\n\u0009 Alle Felder sind optional und werden <br>-- falls leer gelassen --<br> für die Filterung nicht verwendet.\n </td>\n </tr>\n <tr>\n <td width=\"30%\">Quell-IP: </td>\n <td width=\"70%\"><input name=\"srcIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n\u0009</tr>\n\u0009<tr>\n <td>Quell-Subnetzmaske: </td>\n <td><input name=\"srcMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n "
|
|
],
|
|
[
|
|
"30",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"30",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"30",
|
|
"52289",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.186, ACK: 3.004.381"
|
|
],
|
|
[
|
|
"31",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"31",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"31",
|
|
"80",
|
|
"52289",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.004.381"
|
|
],
|
|
[
|
|
"31",
|
|
null,
|
|
null,
|
|
"HTTP",
|
|
"Anwendung",
|
|
" <tr>\n <td>Ziel-IP: </td>\n <td> <input name=\"destIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Ziel-Subnetzmaske: </td>\n <td> <input name=\"destMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Protokoll: </td>\n <td> \n\u0009 <select name=\"protocol\" size=\"1\">\n\u0009 <option value=\"*\" >*</option>\n\u0009 <option value=\"TCP\" >TCP</option>\n\u0009 <option value=\"UDP\" >UDP</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td>Port: </td>\n <td> <input name=\"port\" type=\"text\" size=\"5\" maxlength=\"5\" value=\"\"></td>\n </tr>\n <tr>\n <td>Aktion: </td>\n <td> \n\u0009 <select name=\"action\" size=\"1\">\n\u0009 <option value=\"drop\" >verwerfen</option>\n\u0009 <option value=\"accept\" >akzeptieren</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td colspan=\"2\">\n <input type=\"submit\" name=\"addrule\" value=\"hinzufügen\">\n </td>\n </tr>\n </table>\n </td></tr></table></center>\n </form>\n </body>\n</html>\n"
|
|
],
|
|
[
|
|
"32",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"32",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"32",
|
|
"52289",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.186, ACK: 3.005.524"
|
|
],
|
|
[
|
|
"33",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"33",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"33",
|
|
"52289",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 4.000.186"
|
|
],
|
|
[
|
|
"34",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"34",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"34",
|
|
"80",
|
|
"52289",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.005.524, ACK: 4.000.187"
|
|
],
|
|
[
|
|
"35",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"35",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"35",
|
|
"80",
|
|
"52289",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 3.005.524"
|
|
],
|
|
[
|
|
"36",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"36",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"36",
|
|
"52289",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.187, ACK: 3.005.525"
|
|
],
|
|
[
|
|
"37",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"37",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"37",
|
|
"64828",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 6.000.000"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000302": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:03:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"50999",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 2.000.000"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"80",
|
|
"50999",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"50999",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001, ACK: 1.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"50999",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
null,
|
|
null,
|
|
"HTTP",
|
|
"Anwendung",
|
|
"POST /konfig HTTP/1.1\nHost: 10.0.0.1\n\nfirewallActivate=1&dropICMP=1&onlySYN=1&defaultPolicy=accept&srcIP=&srcMask=&destIP=&destMask=&protocol=TCP&port=80&action=drop&addrule=hinzuf%C3%BCgen"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"80",
|
|
"50999",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001, ACK: 2.000.190"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"80",
|
|
"50999",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001"
|
|
],
|
|
[
|
|
"8",
|
|
null,
|
|
null,
|
|
"HTTP",
|
|
"Anwendung",
|
|
"HTTP/1.1 200 OK\nContent-type: text/html\n\n<html>\n <head>\n <title>Konfiguration der Firewall auf dem Vermittlungsrechner</title>\n </head>\n\n <body>\n\n <form action=\"konfig\" method=\"POST\">\n\u0009<center> <table border=\"0\" cellspacing=\"5\" width=\"400\"> <tr><td> <h2>Firewall-Konfiguration </h2> </td></tr><tr><td>\n <table bgcolor=\"#E0E0E0\" border=\"0\" width=\"100%\" cellpadding=\"5\">\n <tr><td align=\"center\">\n <table border=\"0\" cellpadding=\"5\">\n <tr>\n <td width=\"10%\">\n\u0009\u0009<input name=\"firewallActivate\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\n </td>\n <td width=\"90%\">Firewall aktivieren</td>\n </tr>\n <tr>\n <td colspan=\"2\">\n\u0009 Erst durch Aktivieren der Firewall werden die Firewall-Regeln angewendet. \n\u0009\u0009Bei deaktivierter Firewall findet keine Filterung statt.\n </td>\n </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"dropICMP\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\u0009 \n\u0009 </td>\n\u0009 <td>ICMP-Pakete filtern</td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Alle ICMP Pakete, z.B. Ping-Anfragen, werden von der Firewall verworfen.\n\u0009 </td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"onlySYN\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\u0009\n\u0009 </td>\n\u0009 <td>\n\u0009 nur SYN-Pakete verwerfen\n\u0009 </td>\n\u0009 </t"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"50999",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.190, ACK: 1.001.461"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"80",
|
|
"50999",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.001.461"
|
|
],
|
|
[
|
|
"10",
|
|
null,
|
|
null,
|
|
"HTTP",
|
|
"Anwendung",
|
|
"r>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Neue Verbindungsanfragen zu gesperrten Ports werden verworfen.\n\u0009\u0009Der Rückkanal für erlaubte Verbindungsanfragen wird akzeptiert.\n\u0009 </td>\n\u0009 </tr>\n </table>\n </tr>\n\u0009 <tr>\n <td><input type=\"submit\" name=\"btnSave\" value=\"speichern\"></td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n <!-- Konfiguration der Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td>\n <h3>Firewall-Regeln:</h3><br>\n\u0009 Die Regeln werden von oben nach unten geprüft.<br>\n\u0009 Sobald eine Regel zutrifft, wird die angegebene Aktion ausgeführt.\n </td>\n </tr>\n <tr>\n <td>\n\u0009 Falls keine Regel zutrifft, wird folgende Standard-Aktion ausgeführt:<br>\n\u0009 <select name=\"defaultPolicy\" size=\"1\">\n\u0009 <option value=\"drop\"\n\u0009 \n\u0009 >verwerfen</option>\n\u0009 <option value=\"accept\"\n selected=\"selected\"\u0009 \n\u0009 >akzeptieren</option>\n\u0009 </select>\n\u0009 <input type=\"submit\" name=\"defPolSet\" value=\"speichern\">\n\u0009 </td>\n </tr>\n <tr>\n <td>\n\u0009 <font size=\"-2\">\n <table border=\"1\" width=\"100%\">\n <tr>\n\u0009\u0009<th>lfd. Nr.</th>\n <th>Quell-IP</th>\n\u0009\u0009<th>Quell-Subnetzmaske</th>\n\u0009\u0009<th>Ziel-IP</th>\n\u0009\u0009<th>Ziel-Subnetzmaske</th>\n\u0009\u0009<th>Protokoll</th>\n\u0009\u0009<th>Port</th>\n <th>Aktion</th>\n </tr>\n\n<tr>"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"50999",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.190, ACK: 1.002.921"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"80",
|
|
"50999",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.002.921"
|
|
],
|
|
[
|
|
"12",
|
|
null,
|
|
null,
|
|
"HTTP",
|
|
"Anwendung",
|
|
"<td><input name=\"radioRule\" type=\"radio\" value=\"1\" size=\"10\" maxlength=\"40\" /> 1</td><td>10.0.0.0</td><td>255.255.255.0</td><td></td><td></td><td>TCP</td><td>80</td><td>akzeptieren</td></tr><tr><td><input name=\"radioRule\" type=\"radio\" value=\"2\" size=\"10\" maxlength=\"40\" /> 2</td><td></td><td></td><td></td><td></td><td>TCP</td><td>80</td><td>verwerfen</td></tr>\n\n </table>\n </font>\n\u0009 </td>\n </tr>\n\u0009<tr>\n\u0009 <td>\n\u0009 Aktion für ausgewählte Regel:\n\u0009 </td>\n\u0009</tr>\n <tr>\n <td>\n <input type=\"submit\" name=\"moveup\" value=\"rauf\">\n <input type=\"submit\" name=\"movedown\" value=\"runter\">\n <input type=\"submit\" name=\"delrule\" value=\"löschen\">\n </td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n\n <!-- Konfiguration neuer Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td colspan=\"2\">\n <h3>Neue Regel erstellen</h3><br>\n\u0009 Alle Felder sind optional und werden <br>-- falls leer gelassen --<br> für die Filterung nicht verwendet.\n </td>\n </tr>\n <tr>\n <td width=\"30%\">Quell-IP: </td>\n <td width=\"70%\"><input name=\"srcIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n\u0009</tr>\n\u0009<tr>\n <td>Quell-Subnetzmaske: </td>\n <td><input name=\"srcMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n "
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"50999",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.190, ACK: 1.004.381"
|
|
],
|
|
[
|
|
"14",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"80",
|
|
"50999",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.004.381"
|
|
],
|
|
[
|
|
"14",
|
|
null,
|
|
null,
|
|
"HTTP",
|
|
"Anwendung",
|
|
" <tr>\n <td>Ziel-IP: </td>\n <td> <input name=\"destIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Ziel-Subnetzmaske: </td>\n <td> <input name=\"destMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Protokoll: </td>\n <td> \n\u0009 <select name=\"protocol\" size=\"1\">\n\u0009 <option value=\"*\" >*</option>\n\u0009 <option value=\"TCP\" >TCP</option>\n\u0009 <option value=\"UDP\" >UDP</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td>Port: </td>\n <td> <input name=\"port\" type=\"text\" size=\"5\" maxlength=\"5\" value=\"\"></td>\n </tr>\n <tr>\n <td>Aktion: </td>\n <td> \n\u0009 <select name=\"action\" size=\"1\">\n\u0009 <option value=\"drop\" >verwerfen</option>\n\u0009 <option value=\"accept\" >akzeptieren</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td colspan=\"2\">\n <input type=\"submit\" name=\"addrule\" value=\"hinzufügen\">\n </td>\n </tr>\n </table>\n </td></tr></table></center>\n </form>\n </body>\n</html>\n"
|
|
],
|
|
[
|
|
"15",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"50999",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.190, ACK: 1.005.524"
|
|
],
|
|
[
|
|
"16",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"16",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"16",
|
|
"50999",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 2.000.190"
|
|
],
|
|
[
|
|
"17",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"17",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"17",
|
|
"80",
|
|
"50999",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.005.524, ACK: 2.000.191"
|
|
],
|
|
[
|
|
"18",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"18",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"18",
|
|
"80",
|
|
"50999",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 1.005.524"
|
|
],
|
|
[
|
|
"19",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"19",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"19",
|
|
"50999",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.191, ACK: 1.005.525"
|
|
],
|
|
[
|
|
"20",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"20",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"20",
|
|
"52289",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 4.000.000"
|
|
],
|
|
[
|
|
"21",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"21",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"21",
|
|
"80",
|
|
"52289",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 3.000.000, ACK: 4.000.001"
|
|
],
|
|
[
|
|
"22",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"22",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"22",
|
|
"52289",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.001, ACK: 3.000.001"
|
|
],
|
|
[
|
|
"23",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"23",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"23",
|
|
"52289",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.001"
|
|
],
|
|
[
|
|
"23",
|
|
null,
|
|
null,
|
|
"HTTP",
|
|
"Anwendung",
|
|
"POST /konfig HTTP/1.1\nHost: 10.0.0.1\n\nfirewallActivate=1&dropICMP=1&onlySYN=1&defaultPolicy=accept&radioRule=2&moveup=rauf&srcIP=&srcMask=&destIP=&destMask=&protocol=*&port=&action=drop"
|
|
],
|
|
[
|
|
"24",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"24",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"24",
|
|
"80",
|
|
"52289",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001, ACK: 4.000.186"
|
|
],
|
|
[
|
|
"25",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"25",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"25",
|
|
"80",
|
|
"52289",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001"
|
|
],
|
|
[
|
|
"25",
|
|
null,
|
|
null,
|
|
"HTTP",
|
|
"Anwendung",
|
|
"HTTP/1.1 200 OK\nContent-type: text/html\n\n<html>\n <head>\n <title>Konfiguration der Firewall auf dem Vermittlungsrechner</title>\n </head>\n\n <body>\n\n <form action=\"konfig\" method=\"POST\">\n\u0009<center> <table border=\"0\" cellspacing=\"5\" width=\"400\"> <tr><td> <h2>Firewall-Konfiguration </h2> </td></tr><tr><td>\n <table bgcolor=\"#E0E0E0\" border=\"0\" width=\"100%\" cellpadding=\"5\">\n <tr><td align=\"center\">\n <table border=\"0\" cellpadding=\"5\">\n <tr>\n <td width=\"10%\">\n\u0009\u0009<input name=\"firewallActivate\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\n </td>\n <td width=\"90%\">Firewall aktivieren</td>\n </tr>\n <tr>\n <td colspan=\"2\">\n\u0009 Erst durch Aktivieren der Firewall werden die Firewall-Regeln angewendet. \n\u0009\u0009Bei deaktivierter Firewall findet keine Filterung statt.\n </td>\n </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"dropICMP\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\u0009 \n\u0009 </td>\n\u0009 <td>ICMP-Pakete filtern</td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Alle ICMP Pakete, z.B. Ping-Anfragen, werden von der Firewall verworfen.\n\u0009 </td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"onlySYN\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\u0009\n\u0009 </td>\n\u0009 <td>\n\u0009 nur SYN-Pakete verwerfen\n\u0009 </td>\n\u0009 </t"
|
|
],
|
|
[
|
|
"26",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"26",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"26",
|
|
"52289",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.186, ACK: 3.001.461"
|
|
],
|
|
[
|
|
"27",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"27",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"27",
|
|
"80",
|
|
"52289",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.001.461"
|
|
],
|
|
[
|
|
"27",
|
|
null,
|
|
null,
|
|
"HTTP",
|
|
"Anwendung",
|
|
"r>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Neue Verbindungsanfragen zu gesperrten Ports werden verworfen.\n\u0009\u0009Der Rückkanal für erlaubte Verbindungsanfragen wird akzeptiert.\n\u0009 </td>\n\u0009 </tr>\n </table>\n </tr>\n\u0009 <tr>\n <td><input type=\"submit\" name=\"btnSave\" value=\"speichern\"></td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n <!-- Konfiguration der Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td>\n <h3>Firewall-Regeln:</h3><br>\n\u0009 Die Regeln werden von oben nach unten geprüft.<br>\n\u0009 Sobald eine Regel zutrifft, wird die angegebene Aktion ausgeführt.\n </td>\n </tr>\n <tr>\n <td>\n\u0009 Falls keine Regel zutrifft, wird folgende Standard-Aktion ausgeführt:<br>\n\u0009 <select name=\"defaultPolicy\" size=\"1\">\n\u0009 <option value=\"drop\"\n\u0009 \n\u0009 >verwerfen</option>\n\u0009 <option value=\"accept\"\n selected=\"selected\"\u0009 \n\u0009 >akzeptieren</option>\n\u0009 </select>\n\u0009 <input type=\"submit\" name=\"defPolSet\" value=\"speichern\">\n\u0009 </td>\n </tr>\n <tr>\n <td>\n\u0009 <font size=\"-2\">\n <table border=\"1\" width=\"100%\">\n <tr>\n\u0009\u0009<th>lfd. Nr.</th>\n <th>Quell-IP</th>\n\u0009\u0009<th>Quell-Subnetzmaske</th>\n\u0009\u0009<th>Ziel-IP</th>\n\u0009\u0009<th>Ziel-Subnetzmaske</th>\n\u0009\u0009<th>Protokoll</th>\n\u0009\u0009<th>Port</th>\n <th>Aktion</th>\n </tr>\n\n<tr>"
|
|
],
|
|
[
|
|
"28",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"28",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"28",
|
|
"52289",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.186, ACK: 3.002.921"
|
|
],
|
|
[
|
|
"29",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"29",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"29",
|
|
"80",
|
|
"52289",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.002.921"
|
|
],
|
|
[
|
|
"29",
|
|
null,
|
|
null,
|
|
"HTTP",
|
|
"Anwendung",
|
|
"<td><input name=\"radioRule\" type=\"radio\" value=\"1\" size=\"10\" maxlength=\"40\" /> 1</td><td></td><td></td><td></td><td></td><td>TCP</td><td>80</td><td>verwerfen</td></tr><tr><td><input name=\"radioRule\" type=\"radio\" value=\"2\" size=\"10\" maxlength=\"40\" /> 2</td><td>10.0.0.0</td><td>255.255.255.0</td><td></td><td></td><td>TCP</td><td>80</td><td>akzeptieren</td></tr>\n\n </table>\n </font>\n\u0009 </td>\n </tr>\n\u0009<tr>\n\u0009 <td>\n\u0009 Aktion für ausgewählte Regel:\n\u0009 </td>\n\u0009</tr>\n <tr>\n <td>\n <input type=\"submit\" name=\"moveup\" value=\"rauf\">\n <input type=\"submit\" name=\"movedown\" value=\"runter\">\n <input type=\"submit\" name=\"delrule\" value=\"löschen\">\n </td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n\n <!-- Konfiguration neuer Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td colspan=\"2\">\n <h3>Neue Regel erstellen</h3><br>\n\u0009 Alle Felder sind optional und werden <br>-- falls leer gelassen --<br> für die Filterung nicht verwendet.\n </td>\n </tr>\n <tr>\n <td width=\"30%\">Quell-IP: </td>\n <td width=\"70%\"><input name=\"srcIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n\u0009</tr>\n\u0009<tr>\n <td>Quell-Subnetzmaske: </td>\n <td><input name=\"srcMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n "
|
|
],
|
|
[
|
|
"30",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"30",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"30",
|
|
"52289",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.186, ACK: 3.004.381"
|
|
],
|
|
[
|
|
"31",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"31",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"31",
|
|
"80",
|
|
"52289",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.004.381"
|
|
],
|
|
[
|
|
"31",
|
|
null,
|
|
null,
|
|
"HTTP",
|
|
"Anwendung",
|
|
" <tr>\n <td>Ziel-IP: </td>\n <td> <input name=\"destIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Ziel-Subnetzmaske: </td>\n <td> <input name=\"destMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Protokoll: </td>\n <td> \n\u0009 <select name=\"protocol\" size=\"1\">\n\u0009 <option value=\"*\" >*</option>\n\u0009 <option value=\"TCP\" >TCP</option>\n\u0009 <option value=\"UDP\" >UDP</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td>Port: </td>\n <td> <input name=\"port\" type=\"text\" size=\"5\" maxlength=\"5\" value=\"\"></td>\n </tr>\n <tr>\n <td>Aktion: </td>\n <td> \n\u0009 <select name=\"action\" size=\"1\">\n\u0009 <option value=\"drop\" >verwerfen</option>\n\u0009 <option value=\"accept\" >akzeptieren</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td colspan=\"2\">\n <input type=\"submit\" name=\"addrule\" value=\"hinzufügen\">\n </td>\n </tr>\n </table>\n </td></tr></table></center>\n </form>\n </body>\n</html>\n"
|
|
],
|
|
[
|
|
"32",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"32",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"32",
|
|
"52289",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.186, ACK: 3.005.524"
|
|
],
|
|
[
|
|
"33",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"33",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"33",
|
|
"52289",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 4.000.186"
|
|
],
|
|
[
|
|
"34",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"34",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"34",
|
|
"80",
|
|
"52289",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.005.524, ACK: 4.000.187"
|
|
],
|
|
[
|
|
"35",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"35",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"35",
|
|
"80",
|
|
"52289",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 3.005.524"
|
|
],
|
|
[
|
|
"36",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"36",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"36",
|
|
"52289",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.187, ACK: 3.005.525"
|
|
],
|
|
[
|
|
"37",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"37",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"37",
|
|
"64828",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 6.000.000"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000302#1": [],
|
|
"00000000-0000-0000-0000-000000000303": []
|
|
},
|
|
"events": [
|
|
[
|
|
208,
|
|
"browser",
|
|
"update"
|
|
],
|
|
[
|
|
209,
|
|
"server",
|
|
"null"
|
|
],
|
|
[
|
|
211,
|
|
"server",
|
|
"Annahme von Verbindungsanfragen gestartet"
|
|
],
|
|
[
|
|
500,
|
|
"browser",
|
|
"call holeWebseite 10.0.0.1/konfig firewallActivate=1&dropICMP=1&onlySYN=1&defaultPolicy=accept&srcIP=&srcMask=&destIP=&destMask=&protocol=TCP&port=80&action=drop&addrule=hinzuf%C3%BCgen"
|
|
],
|
|
[
|
|
1117,
|
|
"server",
|
|
"Verbindung zu 10.0.0.2:50999 hergestellt"
|
|
],
|
|
[
|
|
1156,
|
|
"server",
|
|
">>POST /konfig HTTP/1.1\nHost: 10.0.0.1\n\nfirewallActivate=1&dropICMP=1&onlySYN=1&defaultPolicy=accept&srcIP=&srcMask=&destIP=&destMask=&protocol=TCP&port=80&action=drop&addrule=hinzuf%C3%BCgen"
|
|
],
|
|
[
|
|
2017,
|
|
"browser",
|
|
"page 200 text/html\n<html>\n <head>\n <title>Konfiguration der Firewall auf dem Vermittlungsrechner</title>\n </head>\n\n <body>\n\n <form action=\"konfig\" method=\"POST\">\n\u0009<center> <table border=\"0\" cellspacing=\"5\" width=\"400\"> <tr><td> <h2>Firewall-Konfiguration </h2> </td></tr><tr><td>\n <table bgcolor=\"#E0E0E0\" border=\"0\" width=\"100%\" cellpadding=\"5\">\n <tr><td align=\"center\">\n <table border=\"0\" cellpadding=\"5\">\n <tr>\n <td width=\"10%\">\n\u0009\u0009<input name=\"firewallActivate\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\n </td>\n <td width=\"90%\">Firewall aktivieren</td>\n </tr>\n <tr>\n <td colspan=\"2\">\n\u0009 Erst durch Aktivieren der Firewall werden die Firewall-Regeln angewendet. \n\u0009\u0009Bei deaktivierter Firewall findet keine Filterung statt.\n </td>\n </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"dropICMP\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\u0009 \n\u0009 </td>\n\u0009 <td>ICMP-Pakete filtern</td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Alle ICMP Pakete, z.B. Ping-Anfragen, werden von der Firewall verworfen.\n\u0009 </td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"onlySYN\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\u0009\n\u0009 </td>\n\u0009 <td>\n\u0009 nur SYN-Pakete verwerfen\n\u0009 </td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Neue Verbindungsanfragen zu gesperrten Ports werden verworfen.\n\u0009\u0009Der Rückkanal für erlaubte Verbindungsanfragen wird akzeptiert.\n\u0009 </td>\n\u0009 </tr>\n </table>\n </tr>\n\u0009 <tr>\n <td><input type=\"submit\" name=\"btnSave\" value=\"speichern\"></td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n <!-- Konfiguration der Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td>\n <h3>Firewall-Regeln:</h3><br>\n\u0009 Die Regeln werden von oben nach unten geprüft.<br>\n\u0009 Sobald eine Regel zutrifft, wird die angegebene Aktion ausgeführt.\n </td>\n </tr>\n <tr>\n <td>\n\u0009 Falls keine Regel zutrifft, wird folgende Standard-Aktion ausgeführt:<br>\n\u0009 <select name=\"defaultPolicy\" size=\"1\">\n\u0009 <option value=\"drop\"\n\u0009 \n\u0009 >verwerfen</option>\n\u0009 <option value=\"accept\"\n selected=\"selected\"\u0009 \n\u0009 >akzeptieren</option>\n\u0009 </select>\n\u0009 <input type=\"submit\" name=\"defPolSet\" value=\"speichern\">\n\u0009 </td>\n </tr>\n <tr>\n <td>\n\u0009 <font size=\"-2\">\n <table border=\"1\" width=\"100%\">\n <tr>\n\u0009\u0009<th>lfd. Nr.</th>\n <th>Quell-IP</th>\n\u0009\u0009<th>Quell-Subnetzmaske</th>\n\u0009\u0009<th>Ziel-IP</th>\n\u0009\u0009<th>Ziel-Subnetzmaske</th>\n\u0009\u0009<th>Protokoll</th>\n\u0009\u0009<th>Port</th>\n <th>Aktion</th>\n </tr>\n\n<tr><td><input name=\"radioRule\" type=\"radio\" value=\"1\" size=\"10\" maxlength=\"40\" /> 1</td><td>10.0.0.0</td><td>255.255.255.0</td><td></td><td></td><td>TCP</td><td>80</td><td>akzeptieren</td></tr><tr><td><input name=\"radioRule\" type=\"radio\" value=\"2\" size=\"10\" maxlength=\"40\" /> 2</td><td></td><td></td><td></td><td></td><td>TCP</td><td>80</td><td>verwerfen</td></tr>\n\n </table>\n </font>\n\u0009 </td>\n </tr>\n\u0009<tr>\n\u0009 <td>\n\u0009 Aktion für ausgewählte Regel:\n\u0009 </td>\n\u0009</tr>\n <tr>\n <td>\n <input type=\"submit\" name=\"moveup\" value=\"rauf\">\n <input type=\"submit\" name=\"movedown\" value=\"runter\">\n <input type=\"submit\" name=\"delrule\" value=\"löschen\">\n </td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n\n <!-- Konfiguration neuer Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td colspan=\"2\">\n <h3>Neue Regel erstellen</h3><br>\n\u0009 Alle Felder sind optional und werden <br>-- falls leer gelassen --<br> für die Filterung nicht verwendet.\n </td>\n </tr>\n <tr>\n <td width=\"30%\">Quell-IP: </td>\n <td width=\"70%\"><input name=\"srcIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n\u0009</tr>\n\u0009<tr>\n <td>Quell-Subnetzmaske: </td>\n <td><input name=\"srcMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Ziel-IP: </td>\n <td> <input name=\"destIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Ziel-Subnetzmaske: </td>\n <td> <input name=\"destMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Protokoll: </td>\n <td> \n\u0009 <select name=\"protocol\" size=\"1\">\n\u0009 <option value=\"*\" >*</option>\n\u0009 <option value=\"TCP\" >TCP</option>\n\u0009 <option value=\"UDP\" >UDP</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td>Port: </td>\n <td> <input name=\"port\" type=\"text\" size=\"5\" maxlength=\"5\" value=\"\"></td>\n </tr>\n <tr>\n <td>Aktion: </td>\n <td> \n\u0009 <select name=\"action\" size=\"1\">\n\u0009 <option value=\"drop\" >verwerfen</option>\n\u0009 <option value=\"accept\" >akzeptieren</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td colspan=\"2\">\n <input type=\"submit\" name=\"addrule\" value=\"hinzufügen\">\n </td>\n </tr>\n </table>\n </td></tr></table></center>\n </form>\n </body>\n</html>"
|
|
],
|
|
[
|
|
2105,
|
|
"server",
|
|
"<<HTTP/1.1 200 OK\nContent-type: text/html\n\n<html>\n <head>\n <title>Konfiguration der Firewall auf dem Vermittlungsrechner</title>\n </head>\n\n <body>\n\n <form action=\"konfig\" method=\"POST\">\n\u0009<center> <table border=\"0\" cellspacing=\"5\" width=\"400\"> <tr><td> <h2>Firewall-Konfiguration </h2> </td></tr><tr><td>\n <table bgcolor=\"#E0E0E0\" border=\"0\" width=\"100%\" cellpadding=\"5\">\n <tr><td align=\"center\">\n <table border=\"0\" cellpadding=\"5\">\n <tr>\n <td width=\"10%\">\n\u0009\u0009<input name=\"firewallActivate\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\n </td>\n <td width=\"90%\">Firewall aktivieren</td>\n </tr>\n <tr>\n <td colspan=\"2\">\n\u0009 Erst durch Aktivieren der Firewall werden die Firewall-Regeln angewendet. \n\u0009\u0009Bei deaktivierter Firewall findet keine Filterung statt.\n </td>\n </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"dropICMP\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\u0009 \n\u0009 </td>\n\u0009 <td>ICMP-Pakete filtern</td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Alle ICMP Pakete, z.B. Ping-Anfragen, werden von der Firewall verworfen.\n\u0009 </td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"onlySYN\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\u0009\n\u0009 </td>\n\u0009 <td>\n\u0009 nur SYN-Pakete verwerfen\n\u0009 </td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Neue Verbindungsanfragen zu gesperrten Ports werden verworfen.\n\u0009\u0009Der Rückkanal für erlaubte Verbindungsanfragen wird akzeptiert.\n\u0009 </td>\n\u0009 </tr>\n </table>\n </tr>\n\u0009 <tr>\n <td><input type=\"submit\" name=\"btnSave\" value=\"speichern\"></td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n <!-- Konfiguration der Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td>\n <h3>Firewall-Regeln:</h3><br>\n\u0009 Die Regeln werden von oben nach unten geprüft.<br>\n\u0009 Sobald eine Regel zutrifft, wird die angegebene Aktion ausgeführt.\n </td>\n </tr>\n <tr>\n <td>\n\u0009 Falls keine Regel zutrifft, wird folgende Standard-Aktion ausgeführt:<br>\n\u0009 <select name=\"defaultPolicy\" size=\"1\">\n\u0009 <option value=\"drop\"\n\u0009 \n\u0009 >verwerfen</option>\n\u0009 <option value=\"accept\"\n selected=\"selected\"\u0009 \n\u0009 >akzeptieren</option>\n\u0009 </select>\n\u0009 <input type=\"submit\" name=\"defPolSet\" value=\"speichern\">\n\u0009 </td>\n </tr>\n <tr>\n <td>\n\u0009 <font size=\"-2\">\n <table border=\"1\" width=\"100%\">\n <tr>\n\u0009\u0009<th>lfd. Nr.</th>\n <th>Quell-IP</th>\n\u0009\u0009<th>Quell-Subnetzmaske</th>\n\u0009\u0009<th>Ziel-IP</th>\n\u0009\u0009<th>Ziel-Subnetzmaske</th>\n\u0009\u0009<th>Protokoll</th>\n\u0009\u0009<th>Port</th>\n <th>Aktion</th>\n </tr>\n\n<tr><td><input name=\"radioRule\" type=\"radio\" value=\"1\" size=\"10\" maxlength=\"40\" /> 1</td><td>10.0.0.0</td><td>255.255.255.0</td><td></td><td></td><td>TCP</td><td>80</td><td>akzeptieren</td></tr><tr><td><input name=\"radioRule\" type=\"radio\" value=\"2\" size=\"10\" maxlength=\"40\" /> 2</td><td></td><td></td><td></td><td></td><td>TCP</td><td>80</td><td>verwerfen</td></tr>\n\n </table>\n </font>\n\u0009 </td>\n </tr>\n\u0009<tr>\n\u0009 <td>\n\u0009 Aktion für ausgewählte Regel:\n\u0009 </td>\n\u0009</tr>\n <tr>\n <td>\n <input type=\"submit\" name=\"moveup\" value=\"rauf\">\n <input type=\"submit\" name=\"movedown\" value=\"runter\">\n <input type=\"submit\" name=\"delrule\" value=\"löschen\">\n </td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n\n <!-- Konfiguration neuer Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td colspan=\"2\">\n <h3>Neue Regel erstellen</h3><br>\n\u0009 Alle Felder sind optional und werden <br>-- falls leer gelassen --<br> für die Filterung nicht verwendet.\n </td>\n </tr>\n <tr>\n <td width=\"30%\">Quell-IP: </td>\n <td width=\"70%\"><input name=\"srcIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n\u0009</tr>\n\u0009<tr>\n <td>Quell-Subnetzmaske: </td>\n <td><input name=\"srcMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Ziel-IP: </td>\n <td> <input name=\"destIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Ziel-Subnetzmaske: </td>\n <td> <input name=\"destMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Protokoll: </td>\n <td> \n\u0009 <select name=\"protocol\" size=\"1\">\n\u0009 <option value=\"*\" >*</option>\n\u0009 <option value=\"TCP\" >TCP</option>\n\u0009 <option value=\"UDP\" >UDP</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td>Port: </td>\n <td> <input name=\"port\" type=\"text\" size=\"5\" maxlength=\"5\" value=\"\"></td>\n </tr>\n <tr>\n <td>Aktion: </td>\n <td> \n\u0009 <select name=\"action\" size=\"1\">\n\u0009 <option value=\"drop\" >verwerfen</option>\n\u0009 <option value=\"accept\" >akzeptieren</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td colspan=\"2\">\n <input type=\"submit\" name=\"addrule\" value=\"hinzufügen\">\n </td>\n </tr>\n </table>\n </td></tr></table></center>\n </form>\n </body>\n</html>\n"
|
|
],
|
|
[
|
|
2161,
|
|
"server",
|
|
"Socket zu 10.0.0.2:50999 geschlossen"
|
|
],
|
|
[
|
|
4000,
|
|
"browser",
|
|
"call holeWebseite 10.0.0.1/konfig firewallActivate=1&dropICMP=1&onlySYN=1&defaultPolicy=accept&radioRule=2&moveup=rauf&srcIP=&srcMask=&destIP=&destMask=&protocol=*&port=&action=drop"
|
|
],
|
|
[
|
|
4420,
|
|
"server",
|
|
"Verbindung zu 10.0.0.2:52289 hergestellt"
|
|
],
|
|
[
|
|
4420,
|
|
"server",
|
|
">>POST /konfig HTTP/1.1\nHost: 10.0.0.1\n\nfirewallActivate=1&dropICMP=1&onlySYN=1&defaultPolicy=accept&radioRule=2&moveup=rauf&srcIP=&srcMask=&destIP=&destMask=&protocol=*&port=&action=drop"
|
|
],
|
|
[
|
|
5250,
|
|
"browser",
|
|
"page 200 text/html\n<html>\n <head>\n <title>Konfiguration der Firewall auf dem Vermittlungsrechner</title>\n </head>\n\n <body>\n\n <form action=\"konfig\" method=\"POST\">\n\u0009<center> <table border=\"0\" cellspacing=\"5\" width=\"400\"> <tr><td> <h2>Firewall-Konfiguration </h2> </td></tr><tr><td>\n <table bgcolor=\"#E0E0E0\" border=\"0\" width=\"100%\" cellpadding=\"5\">\n <tr><td align=\"center\">\n <table border=\"0\" cellpadding=\"5\">\n <tr>\n <td width=\"10%\">\n\u0009\u0009<input name=\"firewallActivate\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\n </td>\n <td width=\"90%\">Firewall aktivieren</td>\n </tr>\n <tr>\n <td colspan=\"2\">\n\u0009 Erst durch Aktivieren der Firewall werden die Firewall-Regeln angewendet. \n\u0009\u0009Bei deaktivierter Firewall findet keine Filterung statt.\n </td>\n </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"dropICMP\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\u0009 \n\u0009 </td>\n\u0009 <td>ICMP-Pakete filtern</td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Alle ICMP Pakete, z.B. Ping-Anfragen, werden von der Firewall verworfen.\n\u0009 </td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"onlySYN\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\u0009\n\u0009 </td>\n\u0009 <td>\n\u0009 nur SYN-Pakete verwerfen\n\u0009 </td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Neue Verbindungsanfragen zu gesperrten Ports werden verworfen.\n\u0009\u0009Der Rückkanal für erlaubte Verbindungsanfragen wird akzeptiert.\n\u0009 </td>\n\u0009 </tr>\n </table>\n </tr>\n\u0009 <tr>\n <td><input type=\"submit\" name=\"btnSave\" value=\"speichern\"></td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n <!-- Konfiguration der Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td>\n <h3>Firewall-Regeln:</h3><br>\n\u0009 Die Regeln werden von oben nach unten geprüft.<br>\n\u0009 Sobald eine Regel zutrifft, wird die angegebene Aktion ausgeführt.\n </td>\n </tr>\n <tr>\n <td>\n\u0009 Falls keine Regel zutrifft, wird folgende Standard-Aktion ausgeführt:<br>\n\u0009 <select name=\"defaultPolicy\" size=\"1\">\n\u0009 <option value=\"drop\"\n\u0009 \n\u0009 >verwerfen</option>\n\u0009 <option value=\"accept\"\n selected=\"selected\"\u0009 \n\u0009 >akzeptieren</option>\n\u0009 </select>\n\u0009 <input type=\"submit\" name=\"defPolSet\" value=\"speichern\">\n\u0009 </td>\n </tr>\n <tr>\n <td>\n\u0009 <font size=\"-2\">\n <table border=\"1\" width=\"100%\">\n <tr>\n\u0009\u0009<th>lfd. Nr.</th>\n <th>Quell-IP</th>\n\u0009\u0009<th>Quell-Subnetzmaske</th>\n\u0009\u0009<th>Ziel-IP</th>\n\u0009\u0009<th>Ziel-Subnetzmaske</th>\n\u0009\u0009<th>Protokoll</th>\n\u0009\u0009<th>Port</th>\n <th>Aktion</th>\n </tr>\n\n<tr><td><input name=\"radioRule\" type=\"radio\" value=\"1\" size=\"10\" maxlength=\"40\" /> 1</td><td></td><td></td><td></td><td></td><td>TCP</td><td>80</td><td>verwerfen</td></tr><tr><td><input name=\"radioRule\" type=\"radio\" value=\"2\" size=\"10\" maxlength=\"40\" /> 2</td><td>10.0.0.0</td><td>255.255.255.0</td><td></td><td></td><td>TCP</td><td>80</td><td>akzeptieren</td></tr>\n\n </table>\n </font>\n\u0009 </td>\n </tr>\n\u0009<tr>\n\u0009 <td>\n\u0009 Aktion für ausgewählte Regel:\n\u0009 </td>\n\u0009</tr>\n <tr>\n <td>\n <input type=\"submit\" name=\"moveup\" value=\"rauf\">\n <input type=\"submit\" name=\"movedown\" value=\"runter\">\n <input type=\"submit\" name=\"delrule\" value=\"löschen\">\n </td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n\n <!-- Konfiguration neuer Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td colspan=\"2\">\n <h3>Neue Regel erstellen</h3><br>\n\u0009 Alle Felder sind optional und werden <br>-- falls leer gelassen --<br> für die Filterung nicht verwendet.\n </td>\n </tr>\n <tr>\n <td width=\"30%\">Quell-IP: </td>\n <td width=\"70%\"><input name=\"srcIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n\u0009</tr>\n\u0009<tr>\n <td>Quell-Subnetzmaske: </td>\n <td><input name=\"srcMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Ziel-IP: </td>\n <td> <input name=\"destIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Ziel-Subnetzmaske: </td>\n <td> <input name=\"destMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Protokoll: </td>\n <td> \n\u0009 <select name=\"protocol\" size=\"1\">\n\u0009 <option value=\"*\" >*</option>\n\u0009 <option value=\"TCP\" >TCP</option>\n\u0009 <option value=\"UDP\" >UDP</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td>Port: </td>\n <td> <input name=\"port\" type=\"text\" size=\"5\" maxlength=\"5\" value=\"\"></td>\n </tr>\n <tr>\n <td>Aktion: </td>\n <td> \n\u0009 <select name=\"action\" size=\"1\">\n\u0009 <option value=\"drop\" >verwerfen</option>\n\u0009 <option value=\"accept\" >akzeptieren</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td colspan=\"2\">\n <input type=\"submit\" name=\"addrule\" value=\"hinzufügen\">\n </td>\n </tr>\n </table>\n </td></tr></table></center>\n </form>\n </body>\n</html>"
|
|
],
|
|
[
|
|
5358,
|
|
"server",
|
|
"<<HTTP/1.1 200 OK\nContent-type: text/html\n\n<html>\n <head>\n <title>Konfiguration der Firewall auf dem Vermittlungsrechner</title>\n </head>\n\n <body>\n\n <form action=\"konfig\" method=\"POST\">\n\u0009<center> <table border=\"0\" cellspacing=\"5\" width=\"400\"> <tr><td> <h2>Firewall-Konfiguration </h2> </td></tr><tr><td>\n <table bgcolor=\"#E0E0E0\" border=\"0\" width=\"100%\" cellpadding=\"5\">\n <tr><td align=\"center\">\n <table border=\"0\" cellpadding=\"5\">\n <tr>\n <td width=\"10%\">\n\u0009\u0009<input name=\"firewallActivate\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\n </td>\n <td width=\"90%\">Firewall aktivieren</td>\n </tr>\n <tr>\n <td colspan=\"2\">\n\u0009 Erst durch Aktivieren der Firewall werden die Firewall-Regeln angewendet. \n\u0009\u0009Bei deaktivierter Firewall findet keine Filterung statt.\n </td>\n </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"dropICMP\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\u0009 \n\u0009 </td>\n\u0009 <td>ICMP-Pakete filtern</td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Alle ICMP Pakete, z.B. Ping-Anfragen, werden von der Firewall verworfen.\n\u0009 </td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td>\n\u0009\u0009<input name=\"onlySYN\" type=\"checkbox\" value=\"1\" size=\"30\" maxlength=\"40\" checked=\"checked\" />\u0009\n\u0009 </td>\n\u0009 <td>\n\u0009 nur SYN-Pakete verwerfen\n\u0009 </td>\n\u0009 </tr>\n\u0009 <tr>\n\u0009 <td colspan=\"2\">\n\u0009 Neue Verbindungsanfragen zu gesperrten Ports werden verworfen.\n\u0009\u0009Der Rückkanal für erlaubte Verbindungsanfragen wird akzeptiert.\n\u0009 </td>\n\u0009 </tr>\n </table>\n </tr>\n\u0009 <tr>\n <td><input type=\"submit\" name=\"btnSave\" value=\"speichern\"></td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n <!-- Konfiguration der Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td>\n <h3>Firewall-Regeln:</h3><br>\n\u0009 Die Regeln werden von oben nach unten geprüft.<br>\n\u0009 Sobald eine Regel zutrifft, wird die angegebene Aktion ausgeführt.\n </td>\n </tr>\n <tr>\n <td>\n\u0009 Falls keine Regel zutrifft, wird folgende Standard-Aktion ausgeführt:<br>\n\u0009 <select name=\"defaultPolicy\" size=\"1\">\n\u0009 <option value=\"drop\"\n\u0009 \n\u0009 >verwerfen</option>\n\u0009 <option value=\"accept\"\n selected=\"selected\"\u0009 \n\u0009 >akzeptieren</option>\n\u0009 </select>\n\u0009 <input type=\"submit\" name=\"defPolSet\" value=\"speichern\">\n\u0009 </td>\n </tr>\n <tr>\n <td>\n\u0009 <font size=\"-2\">\n <table border=\"1\" width=\"100%\">\n <tr>\n\u0009\u0009<th>lfd. Nr.</th>\n <th>Quell-IP</th>\n\u0009\u0009<th>Quell-Subnetzmaske</th>\n\u0009\u0009<th>Ziel-IP</th>\n\u0009\u0009<th>Ziel-Subnetzmaske</th>\n\u0009\u0009<th>Protokoll</th>\n\u0009\u0009<th>Port</th>\n <th>Aktion</th>\n </tr>\n\n<tr><td><input name=\"radioRule\" type=\"radio\" value=\"1\" size=\"10\" maxlength=\"40\" /> 1</td><td></td><td></td><td></td><td></td><td>TCP</td><td>80</td><td>verwerfen</td></tr><tr><td><input name=\"radioRule\" type=\"radio\" value=\"2\" size=\"10\" maxlength=\"40\" /> 2</td><td>10.0.0.0</td><td>255.255.255.0</td><td></td><td></td><td>TCP</td><td>80</td><td>akzeptieren</td></tr>\n\n </table>\n </font>\n\u0009 </td>\n </tr>\n\u0009<tr>\n\u0009 <td>\n\u0009 Aktion für ausgewählte Regel:\n\u0009 </td>\n\u0009</tr>\n <tr>\n <td>\n <input type=\"submit\" name=\"moveup\" value=\"rauf\">\n <input type=\"submit\" name=\"movedown\" value=\"runter\">\n <input type=\"submit\" name=\"delrule\" value=\"löschen\">\n </td>\n </tr>\n </table>\n\n </td></tr><tr><td>\n\n\n <!-- Konfiguration neuer Regeln -->\n <table border=\"0\" bgcolor=\"#E0E0E0\" width=\"100%\" cellpadding=\"5\">\n <tr>\n <td colspan=\"2\">\n <h3>Neue Regel erstellen</h3><br>\n\u0009 Alle Felder sind optional und werden <br>-- falls leer gelassen --<br> für die Filterung nicht verwendet.\n </td>\n </tr>\n <tr>\n <td width=\"30%\">Quell-IP: </td>\n <td width=\"70%\"><input name=\"srcIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n\u0009</tr>\n\u0009<tr>\n <td>Quell-Subnetzmaske: </td>\n <td><input name=\"srcMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Ziel-IP: </td>\n <td> <input name=\"destIP\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Ziel-Subnetzmaske: </td>\n <td> <input name=\"destMask\" type=\"text\" size=\"15\" maxlength=\"15\" value=\"\"></td>\n </tr>\n <tr>\n <td>Protokoll: </td>\n <td> \n\u0009 <select name=\"protocol\" size=\"1\">\n\u0009 <option value=\"*\" >*</option>\n\u0009 <option value=\"TCP\" >TCP</option>\n\u0009 <option value=\"UDP\" >UDP</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td>Port: </td>\n <td> <input name=\"port\" type=\"text\" size=\"5\" maxlength=\"5\" value=\"\"></td>\n </tr>\n <tr>\n <td>Aktion: </td>\n <td> \n\u0009 <select name=\"action\" size=\"1\">\n\u0009 <option value=\"drop\" >verwerfen</option>\n\u0009 <option value=\"accept\" >akzeptieren</option>\n\u0009 </select>\n\u0009 </td>\n </tr>\n <tr>\n <td colspan=\"2\">\n <input type=\"submit\" name=\"addrule\" value=\"hinzufügen\">\n </td>\n </tr>\n </table>\n </td></tr></table></center>\n </form>\n </body>\n</html>\n"
|
|
],
|
|
[
|
|
5414,
|
|
"server",
|
|
"Socket zu 10.0.0.2:52289 geschlossen"
|
|
],
|
|
[
|
|
8000,
|
|
"browser",
|
|
"call holeWebseite 10.0.0.1"
|
|
],
|
|
[
|
|
16307,
|
|
"browser",
|
|
"page 0 null\n<html><head><title>Fehler</title></head><body><h1>Server konnte nicht erreicht werden!</h1></body></html>"
|
|
]
|
|
]
|
|
}
|