Files
geedge-jira/md/OMPUB-1007.md
2025-09-14 22:27:11 +00:00

3.9 KiB
Raw Permalink Blame History

TSG.BJ环境自定义APP Psiphon Deny无效

ID Creation Date Assignee Status
OMPUB-1007 2023-08-16T18:23:16.000+0800 刘学利 已解决

环境信息港TSG.BJ CM IP192.168.44.29 TSG-OS IP192.168.40.62 Client IP192.168.58.52 Server IP196.196.200.82 策略ID3407 测试四元组产生的数据包详见附件196.196.200.82_DNS.pcap

描述: Security Events Log有上述二元组的日志且Application Label中已命中Psiphon-Server-APP但该阻断无效果流仍能正常传输Session Record中仍能找到该二元组的日志

!screenshot-1.png|thumbnail! !screenshot-3.png|thumbnail! !screenshot-2.png|thumbnail! liuxueli commented on 2023-08-25T16:28:52.340+0800:

  • 附件中提供的数据包非真正的DNS协议数据包 (只是使用了UDP的53端口)基础协议识别插件误识别为DNS。OMPUB-1002修复后可以复测。[~zhangzhihan] 

gitlab commented on 2023-08-25T18:52:20.584+0800:

[刘学利|https://git.mesalab.cn/liuxueli] mentioned this issue in [a commit|1f84c4e6ec] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [update-v23.07-v11|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/update-v23.07-v11]:{quote}更新tsg_master、firewall、quic修复{quote}


gitlab commented on 2023-08-25T18:52:53.545+0800:

[刘学利|https://git.mesalab.cn/liuxueli] mentioned this issue in [a merge request|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/merge_requests/1680] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [update-v23.07-v11|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/update-v23.07-v11]:{quote}更新tsg_master、firewall、quic修复{quote}


gitlab commented on 2023-08-25T19:40:12.419+0800:

[刘学利|https://git.mesalab.cn/liuxueli] mentioned this issue in [a commit|359cb7861f] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [update-v23.08-firewall-v10|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/update-v23.08-firewall-v10]:{quote}更新tsg_master、firewall、quic修复:{quote}


gitlab commented on 2023-08-25T19:40:21.790+0800:

[刘学利|https://git.mesalab.cn/liuxueli] mentioned this issue in [a merge request|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/merge_requests/1681] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [update-v23.08-firewall-v10|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/update-v23.08-firewall-v10]:{quote}更新tsg_master、firewall、quic修复:{quote}


gitlab commented on 2023-08-25T19:41:58.963+0800:

[付明卫|https://git.mesalab.cn/fumingwei] mentioned this issue in [a commit|c3b62c66bd] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [update-v23.07-v11|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/update-v23.07-v11]:{quote}更新tsg_master、firewall、quic修复{quote}


Attachments

Attachment: 196.196.200.82_DNS.pcap

196.196.200.82_DNS.pcap

Attachment: screenshot-1.png

screenshot-1.png

Attachment: screenshot-2.png

screenshot-2.png

Attachment: screenshot-3.png

screenshot-3.png