85 lines
1.5 KiB
Markdown
85 lines
1.5 KiB
Markdown
|
# 福建项目：用户反馈对特定app封堵无效果
|
|||
|
|
|
|||
|
|
| ID | Creation Date | Assignee | Status |
|
|||
|
|
|----|----------------|----------|--------|
|
|||
|
|
| OMPUB-626 | 2022-09-16T10:24:55.000+0800 | 张智涵 | 已解决 |
|
|||
|
|
|
|||
|
|
|
|||
|
|
---
|
|||
|
|
|
|||
|
|
目标APP的APK文件已上传至附件中：08140602lsqg.apk.zip
|
|||
|
|
*用户反馈：有命中日志，手机上也能收到rst包，但是没有效果*
|
|||
|
|
暂未提供对应app的特征，目前阻断策略只是使用该APP流量中的IP+Port进行阻断
|
|||
|
|
|
|||
|
|
线上TSG版本：22.01
|
|||
|
|
环境：并联**dongxiaoyan** commented on *2022-09-16T15:12:15.703+0800*:
|
|||
|
|
|
|||
|
|
信息港测试环境（串联）测试:
|
|||
|
|
|
|||
|
|
1、tls1.3网站测试正常阻断；
|
|||
|
|
|
|||
|
|
2、附件中的app安装为“狐友”app，serverip为变化ip，测试使用ssl+sni：{*}.sohucs.com和{*}.sns.sohu.com（右匹配）可阻断狐友app。
|
|||
|
|
|
|||
|
|
3、其他app从手机搜索下载尝试中
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
---
|
|||
|
|
|
|||
|
|
**zhangzhihan** commented on *2022-09-16T17:25:23.930+0800*:
|
|||
|
|
|
|||
|
|
[~dongxiaoyan] [~liuxueli] 与用户沟通了一下，*.sohucs.com这个域名不能用，因为它属于SDK平台的域名，生产环境使用会有误封。目前看只能使用Server IP进行阻断
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
---
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
## Attachments
|
|||
|
|
|
|||
|
|
**31108/08140602lsqg.apk.zip**
|
|||
|
|
|
|||
|
|
---
|
|||
|
|
|
|||
|
|
**31100/蒂情.pcap**
|
|||
|
|
|
|||
|
|
---
|
|||
|
|
|
|||
|
|
**31099/红樱桃.pcap**
|
|||
|
|
|
|||
|
|
---
|
|||
|
|
|
|||
|
|
**31098/久夜.pcap**
|
|||
|
|
|
|||
|
|
---
|
|||
|
|
|
|||
|
|
**31107/恋阴.pcap**
|
|||
|
|
|
|||
|
|
---
|
|||
|
|
|
|||
|
|
**31106/蜜夜.pcap**
|
|||
|
|
|
|||
|
|
---
|
|||
|
|
|
|||
|
|
**31105/妙遇.pcap**
|
|||
|
|
|
|||
|
|
---
|
|||
|
|
|
|||
|
|
**31104/女优.pcap**
|
|||
|
|
|
|||
|
|
---
|
|||
|
|
|
|||
|
|
**31103/倾心相印.pcap**
|
|||
|
|
|
|||
|
|
---
|
|||
|
|
|
|||
|
|
**31102/夜月.pcap**
|
|||
|
|
|
|||
|
|
---
|
|||
|
|
|
|||
|
|
**31101/游伴.pcap**
|
|||
|
|
|
|||
|
|
---
|
|||
|
|
|