geedge-jira/md/OMPUB-1007.md

# TSG.BJ环境：自定义APP Psiphon Deny无效

| ID | Creation Date | Assignee | Status |
|----|----------------|----------|--------|
| OMPUB-1007 | 2023-08-16T18:23:16.000+0800 | 刘学利 | 已解决 |


---

环境：信息港TSG.BJ
CM IP：192.168.44.29
TSG-OS IP：192.168.40.62
Client IP：192.168.58.52
Server IP：196.196.200.82
策略ID：3407
测试四元组产生的数据包：详见附件196.196.200.82_DNS.pcap

描述：
Security Events Log有上述二元组的日志，且Application Label中已命中Psiphon-Server-APP，但该阻断无效果，流仍能正常传输，Session Record中仍能找到该二元组的日志

 !screenshot-1.png|thumbnail! 
 !screenshot-3.png|thumbnail! 
 !screenshot-2.png|thumbnail! **liuxueli** commented on *2023-08-25T16:28:52.340+0800*:

* 附件中提供的数据包，非真正的DNS协议数据包 (只是使用了UDP的53端口)，基础协议识别插件误识别为DNS。OMPUB-1002修复后可以复测。[~zhangzhihan] 



---

**gitlab** commented on *2023-08-25T18:52:20.584+0800*:

[刘学利|https://git.mesalab.cn/liuxueli] mentioned this issue in [a commit|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/commit/1f84c4e6ecdec7451586b2fbf43f2a715609fa2f] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [update-v23.07-v11|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/update-v23.07-v11]:{quote}更新tsg_master、firewall、quic，修复：{quote}



---

**gitlab** commented on *2023-08-25T18:52:53.545+0800*:

[刘学利|https://git.mesalab.cn/liuxueli] mentioned this issue in [a merge request|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/merge_requests/1680] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [update-v23.07-v11|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/update-v23.07-v11]:{quote}更新tsg_master、firewall、quic，修复：{quote}



---

**gitlab** commented on *2023-08-25T19:40:12.419+0800*:

[刘学利|https://git.mesalab.cn/liuxueli] mentioned this issue in [a commit|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/commit/359cb7861f4bf67b1a602b37ba65f46175cb3588] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [update-v23.08-firewall-v10|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/update-v23.08-firewall-v10]:{quote}更新tsg_master、firewall、quic，修复:{quote}



---

**gitlab** commented on *2023-08-25T19:40:21.790+0800*:

[刘学利|https://git.mesalab.cn/liuxueli] mentioned this issue in [a merge request|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/merge_requests/1681] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [update-v23.08-firewall-v10|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/update-v23.08-firewall-v10]:{quote}更新tsg_master、firewall、quic，修复:{quote}



---

**gitlab** commented on *2023-08-25T19:41:58.963+0800*:

[付明卫|https://git.mesalab.cn/fumingwei] mentioned this issue in [a commit|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/commit/c3b62c66bde8300e198472222e0a1e4863f92b7f] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [update-v23.07-v11|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/update-v23.07-v11]:{quote}更新tsg_master、firewall、quic，修复：{quote}



---



# Attachments

Attachment: 196.196.200.82_DNS.pcap

[196.196.200.82_DNS.pcap](https://gfwleak.exec.li/admin/geedge-jira/raw/branch/master/attachment/43055/196.196.200.82_DNS.pcap)



Attachment: screenshot-1.png

![screenshot-1.png](https://gfwleak.exec.li/admin/geedge-jira/raw/branch/master/attachment/43072/screenshot-1.png)



Attachment: screenshot-2.png

![screenshot-2.png](https://gfwleak.exec.li/admin/geedge-jira/raw/branch/master/attachment/43073/screenshot-2.png)



Attachment: screenshot-3.png

![screenshot-3.png](https://gfwleak.exec.li/admin/geedge-jira/raw/branch/master/attachment/43074/screenshot-3.png)