gfwleak/tango-tsg-master
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

TSG-8709: 支持执行Default Security Policy(Deny/Allow)

Browse Source
This commit is contained in:
liuxueli
2021-12-31 16:28:00 +03:00
parent 4f1045022f
commit e76eefde5f
6 changed files with 2386 additions and 2180 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
src/tsg_protocol_common.h
View File

@@ -21,6 +21,8 @@ enum TSG_DENY_TYPE
TSG_DENY_TYPE_REDIRECT_URL,
TSG_DENY_TYPE_REDIRECT_RECORD,
TSG_DENY_TYPE_SEND_ICMP,
TSG_DENY_TYPE_DEFAULT_RST,
TSG_DENY_TYPE_DEFAULT_DROP,
TSG_DENY_TYPE_MAX
};
@@ -52,7 +54,6 @@ struct dns_answer_records
struct dns_record_val record_val;
};
struct dns_profile_records
{
int ref_cnt;
@@ -83,6 +84,7 @@ struct deny_user_region
{
int code;
int records_num;
int after_n_packets;
};
union
{
@@ -91,7 +93,7 @@ struct deny_user_region
struct dns_user_region *records;
int profile_id;
int bps;
int send_icmp_unreachable_enable;
int send_icmp_enable;
void *para;
};
};
@@ -109,6 +111,13 @@ struct monitor_user_region
int profile_id;
};
struct default_session_para
{
struct Maat_rule_t result; //XJ default policy
struct deny_user_region tcp;
struct deny_user_region udp;
};
struct compile_user_region
{
int ref_cnt;
@@ -117,8 +126,8 @@ struct compile_user_region
{
struct deny_user_region *deny;
struct monitor_user_region *mirror;
struct Maat_rule_t *result; //XJ default policy
void *user_region_para;
struct default_session_para *session_para;
void *user_region_para;
};
struct packet_capture capture;
};