first
This commit is contained in:
90
md/OMPUB-1007.md
Normal file
90
md/OMPUB-1007.md
Normal file
@@ -0,0 +1,90 @@
|
||||
# TSG.BJ环境:自定义APP Psiphon Deny无效
|
||||
|
||||
| ID | Creation Date | Assignee | Status |
|
||||
|----|----------------|----------|--------|
|
||||
| OMPUB-1007 | 2023-08-16T18:23:16.000+0800 | 刘学利 | 已解决 |
|
||||
|
||||
|
||||
---
|
||||
|
||||
环境:信息港TSG.BJ
|
||||
CM IP:192.168.44.29
|
||||
TSG-OS IP:192.168.40.62
|
||||
Client IP:192.168.58.52
|
||||
Server IP:196.196.200.82
|
||||
策略ID:3407
|
||||
测试四元组产生的数据包:详见附件196.196.200.82_DNS.pcap
|
||||
|
||||
描述:
|
||||
Security Events Log有上述二元组的日志,且Application Label中已命中Psiphon-Server-APP,但该阻断无效果,流仍能正常传输,Session Record中仍能找到该二元组的日志
|
||||
|
||||
!screenshot-1.png|thumbnail!
|
||||
!screenshot-3.png|thumbnail!
|
||||
!screenshot-2.png|thumbnail! **liuxueli** commented on *2023-08-25T16:28:52.340+0800*:
|
||||
|
||||
* 附件中提供的数据包,非真正的DNS协议数据包 (只是使用了UDP的53端口),基础协议识别插件误识别为DNS。OMPUB-1002修复后可以复测。[~zhangzhihan]
|
||||
|
||||
|
||||
|
||||
---
|
||||
|
||||
**gitlab** commented on *2023-08-25T18:52:20.584+0800*:
|
||||
|
||||
[刘学利|https://git.mesalab.cn/liuxueli] mentioned this issue in [a commit|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/commit/1f84c4e6ecdec7451586b2fbf43f2a715609fa2f] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [update-v23.07-v11|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/update-v23.07-v11]:{quote}更新tsg_master、firewall、quic,修复:{quote}
|
||||
|
||||
|
||||
|
||||
---
|
||||
|
||||
**gitlab** commented on *2023-08-25T18:52:53.545+0800*:
|
||||
|
||||
[刘学利|https://git.mesalab.cn/liuxueli] mentioned this issue in [a merge request|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/merge_requests/1680] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [update-v23.07-v11|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/update-v23.07-v11]:{quote}更新tsg_master、firewall、quic,修复:{quote}
|
||||
|
||||
|
||||
|
||||
---
|
||||
|
||||
**gitlab** commented on *2023-08-25T19:40:12.419+0800*:
|
||||
|
||||
[刘学利|https://git.mesalab.cn/liuxueli] mentioned this issue in [a commit|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/commit/359cb7861f4bf67b1a602b37ba65f46175cb3588] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [update-v23.08-firewall-v10|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/update-v23.08-firewall-v10]:{quote}更新tsg_master、firewall、quic,修复:{quote}
|
||||
|
||||
|
||||
|
||||
---
|
||||
|
||||
**gitlab** commented on *2023-08-25T19:40:21.790+0800*:
|
||||
|
||||
[刘学利|https://git.mesalab.cn/liuxueli] mentioned this issue in [a merge request|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/merge_requests/1681] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [update-v23.08-firewall-v10|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/update-v23.08-firewall-v10]:{quote}更新tsg_master、firewall、quic,修复:{quote}
|
||||
|
||||
|
||||
|
||||
---
|
||||
|
||||
**gitlab** commented on *2023-08-25T19:41:58.963+0800*:
|
||||
|
||||
[付明卫|https://git.mesalab.cn/fumingwei] mentioned this issue in [a commit|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/commit/c3b62c66bde8300e198472222e0a1e4863f92b7f] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [update-v23.07-v11|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/update-v23.07-v11]:{quote}更新tsg_master、firewall、quic,修复:{quote}
|
||||
|
||||
|
||||
|
||||
---
|
||||
|
||||
|
||||
|
||||
## Attachments
|
||||
|
||||
**43055/196.196.200.82_DNS.pcap**
|
||||
|
||||
---
|
||||
|
||||
**43072/screenshot-1.png**
|
||||
|
||||
---
|
||||
|
||||
**43073/screenshot-2.png**
|
||||
|
||||
---
|
||||
|
||||
**43074/screenshot-3.png**
|
||||
|
||||
---
|
||||
|
||||
Reference in New Issue
Block a user