支持Decryption Exclusion

初始化maat时增加应答文件路径设置 Friewall仅deny动作填写common_sub_action 更新相应配置文件
2020-04-27 17:49:59 +08:00
parent dcd936caaf
commit bc0e6313b4
6 changed files with 138 additions and 23 deletions
--- a/bin/main.conf
+++ b/bin/main.conf
@@ -1,6 +1,6 @@
 [MAAT]
 PROFILE=./tsgconf/maat.conf
-IP_ADDR_TABLE=TSG_OBJ_IP_ADDR
+IP_ADDR_TABLE=TSG_SECURITY_ADDR
 SUBSCRIBER_ID_TABLE=TSG_OBJ_SUBSCRIBER_ID
 CB_SUBSCRIBER_IP_TABLE=TSG_DYN_SUBSCRIBER_IP

--- a/bin/tsg_log_field.conf
+++ b/bin/tsg_log_field.conf
@@ -41,3 +41,4 @@ STRING		common_schema_type	34
 STRING		http_host		35
 STRING		ssl_sni			36
 LONG		common_establish_latency_ms	37
+STRING		common_sub_action		38
--- a/bin/tsg_static_tableinfo.conf
+++ b/bin/tsg_static_tableinfo.conf
@@ -43,3 +43,5 @@
 31	TSG_SECURITY_SOURCE_ADDR	virtual	TSG_OBJ_IP_ADDR	--
 32	TSG_SECURITY_DESTINATION_ADDR	virtual	TSG_OBJ_IP_ADDR	--
 33	TSG_SECURITY_ADDR	composition	{"source":"TSG_SECURITY_SOURCE_ADDR","destination":"TSG_SECURITY_DESTINATION_ADDR"}
+34	TSG_DECYPTION_EXCLUSION_SSL_SNI	virtual	TSG_OBJ_FQDN
+35	TSG_PROFILE_RESPONSE_PAGES	plugin	{"key":1,"foreign":"4","valid":5}	--