99 lines
3.9 KiB
Markdown
99 lines
3.9 KiB
Markdown
# TSG.BJ环境：自定义APP Psiphon Deny无效
|
||
|
||
| ID | Creation Date | Assignee | Status |
|
||
|----|----------------|----------|--------|
|
||
| OMPUB-1007 | 2023-08-16T18:23:16.000+0800 | 刘学利 | 已解决 |
|
||
|
||
|
||
---
|
||
|
||
环境：信息港TSG.BJ
|
||
CM IP：192.168.44.29
|
||
TSG-OS IP：192.168.40.62
|
||
Client IP：192.168.58.52
|
||
Server IP：196.196.200.82
|
||
策略ID：3407
|
||
测试四元组产生的数据包：详见附件196.196.200.82_DNS.pcap
|
||
|
||
描述：
|
||
Security Events Log有上述二元组的日志，且Application Label中已命中Psiphon-Server-APP，但该阻断无效果，流仍能正常传输，Session Record中仍能找到该二元组的日志
|
||
|
||
!screenshot-1.png|thumbnail!
|
||
!screenshot-3.png|thumbnail!
|
||
!screenshot-2.png|thumbnail! **liuxueli** commented on *2023-08-25T16:28:52.340+0800*:
|
||
|
||
* 附件中提供的数据包，非真正的DNS协议数据包 (只是使用了UDP的53端口)，基础协议识别插件误识别为DNS。OMPUB-1002修复后可以复测。[~zhangzhihan]
|
||
|
||
|
||
|
||
---
|
||
|
||
**gitlab** commented on *2023-08-25T18:52:20.584+0800*:
|
||
|
||
[刘学利|https://git.mesalab.cn/liuxueli] mentioned this issue in [a commit|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/commit/1f84c4e6ecdec7451586b2fbf43f2a715609fa2f] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [update-v23.07-v11|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/update-v23.07-v11]:{quote}更新tsg_master、firewall、quic，修复：{quote}
|
||
|
||
|
||
|
||
---
|
||
|
||
**gitlab** commented on *2023-08-25T18:52:53.545+0800*:
|
||
|
||
[刘学利|https://git.mesalab.cn/liuxueli] mentioned this issue in [a merge request|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/merge_requests/1680] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [update-v23.07-v11|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/update-v23.07-v11]:{quote}更新tsg_master、firewall、quic，修复：{quote}
|
||
|
||
|
||
|
||
---
|
||
|
||
**gitlab** commented on *2023-08-25T19:40:12.419+0800*:
|
||
|
||
[刘学利|https://git.mesalab.cn/liuxueli] mentioned this issue in [a commit|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/commit/359cb7861f4bf67b1a602b37ba65f46175cb3588] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [update-v23.08-firewall-v10|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/update-v23.08-firewall-v10]:{quote}更新tsg_master、firewall、quic，修复:{quote}
|
||
|
||
|
||
|
||
---
|
||
|
||
**gitlab** commented on *2023-08-25T19:40:21.790+0800*:
|
||
|
||
[刘学利|https://git.mesalab.cn/liuxueli] mentioned this issue in [a merge request|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/merge_requests/1681] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [update-v23.08-firewall-v10|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/update-v23.08-firewall-v10]:{quote}更新tsg_master、firewall、quic，修复:{quote}
|
||
|
||
|
||
|
||
---
|
||
|
||
**gitlab** commented on *2023-08-25T19:41:58.963+0800*:
|
||
|
||
[付明卫|https://git.mesalab.cn/fumingwei] mentioned this issue in [a commit|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/commit/c3b62c66bde8300e198472222e0a1e4863f92b7f] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [update-v23.07-v11|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/update-v23.07-v11]:{quote}更新tsg_master、firewall、quic，修复：{quote}
|
||
|
||
|
||
|
||
---
|
||
|
||
|
||
|
||
# Attachments
|
||
|
||
Attachment: 196.196.200.82_DNS.pcap
|
||
|
||
[196.196.200.82_DNS.pcap](https://gfwleak.exec.li/admin/geedge-jira/raw/branch/master/attachment/43055/196.196.200.82_DNS.pcap)
|
||
|
||
|
||
|
||
Attachment: screenshot-1.png
|
||
|
||
|
||
|
||
|
||
|
||
Attachment: screenshot-2.png
|
||
|
||
|
||
|
||
|
||
|
||
Attachment: screenshot-3.png
|
||
|
||
|
||
|
||
|
||
|