3.9 KiB
TSG.BJ环境:自定义APP Psiphon Deny无效
| ID | Creation Date | Assignee | Status |
|---|---|---|---|
| OMPUB-1007 | 2023-08-16T18:23:16.000+0800 | 刘学利 | 已解决 |
环境:信息港TSG.BJ CM IP:192.168.44.29 TSG-OS IP:192.168.40.62 Client IP:192.168.58.52 Server IP:196.196.200.82 策略ID:3407 测试四元组产生的数据包:详见附件196.196.200.82_DNS.pcap
描述: Security Events Log有上述二元组的日志,且Application Label中已命中Psiphon-Server-APP,但该阻断无效果,流仍能正常传输,Session Record中仍能找到该二元组的日志
!screenshot-1.png|thumbnail! !screenshot-3.png|thumbnail! !screenshot-2.png|thumbnail! liuxueli commented on 2023-08-25T16:28:52.340+0800:
- 附件中提供的数据包,非真正的DNS协议数据包 (只是使用了UDP的53端口),基础协议识别插件误识别为DNS。OMPUB-1002修复后可以复测。[~zhangzhihan]
gitlab commented on 2023-08-25T18:52:20.584+0800:
[刘学利|https://git.mesalab.cn/liuxueli] mentioned this issue in [a commit|1f84c4e6ec] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [update-v23.07-v11|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/update-v23.07-v11]:{quote}更新tsg_master、firewall、quic,修复:{quote}
gitlab commented on 2023-08-25T18:52:53.545+0800:
[刘学利|https://git.mesalab.cn/liuxueli] mentioned this issue in [a merge request|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/merge_requests/1680] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [update-v23.07-v11|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/update-v23.07-v11]:{quote}更新tsg_master、firewall、quic,修复:{quote}
gitlab commented on 2023-08-25T19:40:12.419+0800:
[刘学利|https://git.mesalab.cn/liuxueli] mentioned this issue in [a commit|359cb7861f] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [update-v23.08-firewall-v10|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/update-v23.08-firewall-v10]:{quote}更新tsg_master、firewall、quic,修复:{quote}
gitlab commented on 2023-08-25T19:40:21.790+0800:
[刘学利|https://git.mesalab.cn/liuxueli] mentioned this issue in [a merge request|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/merge_requests/1681] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [update-v23.08-firewall-v10|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/update-v23.08-firewall-v10]:{quote}更新tsg_master、firewall、quic,修复:{quote}
gitlab commented on 2023-08-25T19:41:58.963+0800:
[付明卫|https://git.mesalab.cn/fumingwei] mentioned this issue in [a commit|c3b62c66bd] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [update-v23.07-v11|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/update-v23.07-v11]:{quote}更新tsg_master、firewall、quic,修复:{quote}
Attachments
Attachment: 196.196.200.82_DNS.pcap
Attachment: screenshot-1.png
Attachment: screenshot-2.png
Attachment: screenshot-3.png


