geedge-jira/md/OMPUB-1176.md

# 因SMB-IO上链路接反导致TSG-OS回注阻断报文失败

| ID | Creation Date | Assignee | Status |
|----|----------------|----------|--------|
| OMPUB-1176 | 2024-03-05T16:09:15.000+0800 | 杨威 | 已关闭 |


---

环境：信息港5层工程部测试环境（TSG-9140环境）
TSG-OS：192.168.40.84（NBP）
CM：192.168.44.228
TSG版本：TSG v24.01

描述：
测试过程中发现该环境Security Policy的Deny动作与实际不符，无论是指定发送TCP reset，或是发送404应答页面，或是使用DNS重定向功能，均无法达到预期效果。
在驱动抓包能看到firewall伪造的数据包，但客户端捕包反馈结果一直是重传，看不到reset包或404应答页面。
 !image-2024-03-05-16-04-28-319.png|thumbnail! 
 !image-2024-03-05-16-04-35-494.png|thumbnail! 

查看TSG-OS与SMB-IO之间保活报文的VNI值，发现链路方向与实际相反。根据研发反馈，链路接反的情况下理论上不应该影响回注效果。
 !image-2024-03-05-16-09-15-880.png|thumbnail! **gitlab** commented on *2024-03-06T19:33:24.659+0800*:

[杨威|https://git.mesalab.cn/yangwei] mentioned this issue in [a commit|https://git.mesalab.cn/MESA_Platform/sapp/-/commit/c714acbfdaeaea3b86e3daadd64313aafca03e8e] of [MESA Platform / sapp|https://git.mesalab.cn/MESA_Platform/sapp] on branch [Feature-cpu-overload-stack-output|https://git.mesalab.cn/MESA_Platform/sapp/-/tree/Feature-cpu-overload-stack-output]:{quote}🐞 fix(sapp inject packet): Fix OMPUB-1176{quote}



---

**gitlab** commented on *2024-03-06T20:01:28.287+0800*:

[杨威|https://git.mesalab.cn/yangwei] mentioned this issue in [a merge request|https://git.mesalab.cn/MESA_Platform/sapp/-/merge_requests/383] of [MESA Platform / sapp|https://git.mesalab.cn/MESA_Platform/sapp] on branch [Feature-cpu-overload-stack-output|https://git.mesalab.cn/MESA_Platform/sapp/-/tree/Feature-cpu-overload-stack-output]:{quote}🐞 fix(sapp inject packet): Fix OMPUB-1176{quote}



---

**gitlab** commented on *2024-03-13T11:31:04.012+0800*:

[杨威|https://git.mesalab.cn/yangwei] mentioned this issue in [a commit|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/commit/812e001e716de803cc3543cc360f7dcd610e2902] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [Update-sapp-stellar-c|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/Update-sapp-stellar-c]:{quote}🐞 fix(sapp & stellar-c): Fix OMPUB-1176, Fix TSG-19573, Fix TSG-19881{quote}



---

**gitlab** commented on *2024-03-13T11:31:38.184+0800*:

[杨威|https://git.mesalab.cn/yangwei] mentioned this issue in [a merge request|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/merge_requests/2223] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [Update-sapp-stellar-c|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/Update-sapp-stellar-c]:{quote}🐞 fix(sapp & stellar-c): Fix OMPUB-1176, Fix TSG-19573, Fix TSG-19881{quote}



---

**zhangzhihan** commented on *2024-03-13T14:31:42.102+0800*:

复测正常，链路改回正长方向后也能发rst



---



# Attachments

Attachment: image-2024-03-05-16-04-28-319.png

![image-2024-03-05-16-04-28-319.png](https://gfwleak.exec.li/admin/geedge-jira/raw/branch/master/attachment/52824/image-2024-03-05-16-04-28-319.png)



Attachment: image-2024-03-05-16-04-35-494.png

![image-2024-03-05-16-04-35-494.png](https://gfwleak.exec.li/admin/geedge-jira/raw/branch/master/attachment/52823/image-2024-03-05-16-04-35-494.png)



Attachment: image-2024-03-05-16-09-15-880.png

![image-2024-03-05-16-09-15-880.png](https://gfwleak.exec.li/admin/geedge-jira/raw/branch/master/attachment/52822/image-2024-03-05-16-09-15-880.png)