命中DENY策略后:并联环境仅对请求包发欺骗包及日志，串联环境丢弃真实应答包并发送伪造应答欺骗包及日志

TSG-6992: 变更DNS应答记录策略表名称,由FW_PROFILE_DNS_RECORDS变更为TSG_PROFILE_DNS_RECORDS
2021-07-12 17:29:42 +08:00 · 2021-07-09 11:36:42 +08:00
2 changed files with 5 additions and 2 deletions
--- a/src/fw_dns_plug.cpp
+++ b/src/fw_dns_plug.cpp
@@ -523,7 +523,10 @@ extern "C" char FW_DNS_PLUG_ENTRY(stSessionInfo* session_info,  void **pme, int
 		if(p_result!=NULL)
 		{
 			state=fw_dns_action(a_stream, dns_info, p_result, a_packet);
-			fw_dns_send_log(a_stream, dns_info, p_result, 1, thread_seq);
+			if(state!=PROT_STATE_GIVEME)
+			{
+				fw_dns_send_log(a_stream, dns_info, p_result, 1, thread_seq);
+			}
 		}
 		else
 		{
--- a/src/fw_dns_rule.cpp
+++ b/src/fw_dns_rule.cpp
@@ -230,7 +230,7 @@ int fw_dns_rule_init(const char *conffile, void *logger)
 	long arg=0;
 	memset(&g_fw_dns_rule_info, 0, sizeof(g_fw_dns_rule_info));
 	
-	MESA_load_profile_string_def(conffile, "DNS_PLUG", "TABLE_RECORDS", g_fw_dns_rule_info.table_records_name, MAX_TABLE_NAME_LEN, (char *)"FW_PROFILE_DNS_RECORDS");
+	MESA_load_profile_string_def(conffile, "DNS_PLUG", "TABLE_RECORDS", g_fw_dns_rule_info.table_records_name, MAX_TABLE_NAME_LEN, (char *)"TSG_PROFILE_DNS_RECORDS");

 	g_fw_dns_rule_info.table_records_id=Maat_table_register(g_tsg_maat_feather, g_fw_dns_rule_info.table_records_name);
 	if(g_fw_dns_rule_info.table_records_id<0)
Author	SHA1	Message	Date
liuxueli	06b600e3f5	命中DENY策略后:并联环境仅对请求包发欺骗包及日志，串联环境丢弃真实应答包并发送伪造应答欺骗包及日志	2021-07-12 17:29:42 +08:00
liuxueli	604fd5d179	TSG-6992: 变更DNS应答记录策略表名称,由FW_PROFILE_DNS_RECORDS变更为TSG_PROFILE_DNS_RECORDS	2021-07-09 11:36:42 +08:00