gfwleak/tango-verify-policy
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

策略验证支持管控策略DOH协议

Browse Source
This commit is contained in:
fengweihao
2020-07-03 19:16:53 +08:00
parent a99667162f
commit 75d9cfb13b
4 changed files with 23 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
common/include/verify_policy.h
View File

@@ -30,6 +30,8 @@ enum manipulate_sacn_table
PXY_CTRL_HTTP_RES_BODY, PXY_CTRL_HTTP_RES_BODY,
PXY_CTRL_SUBSCRIBE_ID, PXY_CTRL_SUBSCRIBE_ID,
PXY_CTRL_APP_ID, PXY_CTRL_APP_ID,
PXY_CTRL_DOH_QNAME,
PXY_CTRL_DOH_HOST,
PXY_CTRL_IP_SRC_ASN, PXY_CTRL_IP_SRC_ASN,
PXY_CTRL_IP_DST_ASN, PXY_CTRL_IP_DST_ASN,
PXY_CTRL_IP_SRC_LOCATION, PXY_CTRL_IP_SRC_LOCATION,

2
platform/src/verify_policy.cpp
View File

@@ -94,6 +94,8 @@ int protoco_field_type_str2idx(enum verify_policy_type type, const char *action_
table_name[PXY_CTRL_HTTP_RES_BODY] = "TSG_FIELD_HTTP_RES_CONTENT"; table_name[PXY_CTRL_HTTP_RES_BODY] = "TSG_FIELD_HTTP_RES_CONTENT";
table_name[PXY_CTRL_SUBSCRIBE_ID] = "TSG_OBJ_SUBSCRIBER_ID"; table_name[PXY_CTRL_SUBSCRIBE_ID] = "TSG_OBJ_SUBSCRIBER_ID";
table_name[PXY_CTRL_APP_ID] = "TSG_OBJ_APP_ID"; table_name[PXY_CTRL_APP_ID] = "TSG_OBJ_APP_ID";
table_name[PXY_CTRL_DOH_QNAME]="TSG_FIELD_DOH_QNAME";
table_name[PXY_CTRL_DOH_HOST]="TSG_FIELD_DOH_HOST";
break; break;
case PXY_TABLE_SECURITY: case PXY_TABLE_SECURITY:
table_name[PXY_SECURITY_IP] = "TSG_OBJ_IP_ADDR"; table_name[PXY_SECURITY_IP] = "TSG_OBJ_IP_ADDR";

32
resource/table_info_proxy.conf
View File

@@ -45,19 +45,21 @@
26 TSG_OBJ_GEO_LOCATION expr UTF8 UTF8/GBK yes 0 26 TSG_OBJ_GEO_LOCATION expr UTF8 UTF8/GBK yes 0
27 TSG_SECURITY_SOURCE_LOCATION virtual TSG_OBJ_GEO_LOCATION -- 27 TSG_SECURITY_SOURCE_LOCATION virtual TSG_OBJ_GEO_LOCATION --
28 TSG_SECURITY_DESTINATION_LOCATION virtual TSG_OBJ_GEO_LOCATION -- 28 TSG_SECURITY_DESTINATION_LOCATION virtual TSG_OBJ_GEO_LOCATION --
29 TSG_FIELD_DOH_QNAME virtual TSG_OBJ_FQDN --
30 TSG_FIELD_DOH_HOST virtual TSG_OBJ_FQDN --
#eliminate the alarm #eliminate the alarm
29 TSG_OBJ_ACCOUNT expr UTF8 UTF8 yes 0 31 TSG_OBJ_ACCOUNT expr UTF8 UTF8 yes 0
30 TSG_FIELD_SSL_SNI virtual TSG_OBJ_FQDN -- 32 TSG_FIELD_SSL_SNI virtual TSG_OBJ_FQDN --
31 TSG_FIELD_SSL_CN virtual TSG_OBJ_FQDN -- 33 TSG_FIELD_SSL_CN virtual TSG_OBJ_FQDN --
32 TSG_FIELD_SSL_SAN virtual TSG_OBJ_FQDN -- 34 TSG_FIELD_SSL_SAN virtual TSG_OBJ_FQDN --
33 TSG_FIELD_DNS_QNAME virtual TSG_OBJ_FQDN -- 35 TSG_FIELD_DNS_QNAME virtual TSG_OBJ_FQDN --
34 TSG_FIELD_MAIL_ACCOUNT virtual TSG_OBJ_ACCOUNT -- 36 TSG_FIELD_MAIL_ACCOUNT virtual TSG_OBJ_ACCOUNT --
35 TSG_FIELD_MAIL_FROM virtual TSG_OBJ_ACCOUNT -- 37 TSG_FIELD_MAIL_FROM virtual TSG_OBJ_ACCOUNT --
36 TSG_FIELD_MAIL_TO virtual TSG_OBJ_ACCOUNT -- 38 TSG_FIELD_MAIL_TO virtual TSG_OBJ_ACCOUNT --
37 TSG_FIELD_MAIL_SUBJECT virtual TSG_OBJ_KEYWORDS -- 39 TSG_FIELD_MAIL_SUBJECT virtual TSG_OBJ_KEYWORDS --
38 TSG_FIELD_MAIL_CONTENT virtual TSG_OBJ_KEYWORDS -- 40 TSG_FIELD_MAIL_CONTENT virtual TSG_OBJ_KEYWORDS --
39 TSG_FIELD_MAIL_ATT_NAME virtual TSG_OBJ_KEYWORDS -- 41 TSG_FIELD_MAIL_ATT_NAME virtual TSG_OBJ_KEYWORDS --
40 TSG_FIELD_MAIL_ATT_CONTENT virtual TSG_OBJ_KEYWORDS -- 42 TSG_FIELD_MAIL_ATT_CONTENT virtual TSG_OBJ_KEYWORDS --
41 TSG_FIELD_FTP_URI virtual TSG_OBJ_URL -- 43 TSG_FIELD_FTP_URI virtual TSG_OBJ_URL --
42 TSG_FIELD_FTP_CONTENT virtual TSG_OBJ_KEYWORDS -- 44 TSG_FIELD_FTP_CONTENT virtual TSG_OBJ_KEYWORDS --
43 TSG_FIELD_FTP_ACCOUNT virtual TSG_OBJ_ACCOUNT -- 45 TSG_FIELD_FTP_ACCOUNT virtual TSG_OBJ_ACCOUNT --

2
scan/src/pangu_http.cpp
View File

@@ -826,6 +826,8 @@ int pangu_policy_init(struct verify_policy * verify, const char* profile_path)
table_name[PXY_CTRL_HTTP_RES_BODY] = "TSG_FIELD_HTTP_RES_CONTENT"; table_name[PXY_CTRL_HTTP_RES_BODY] = "TSG_FIELD_HTTP_RES_CONTENT";
table_name[PXY_CTRL_SUBSCRIBE_ID] = "TSG_OBJ_SUBSCRIBER_ID"; table_name[PXY_CTRL_SUBSCRIBE_ID] = "TSG_OBJ_SUBSCRIBER_ID";
table_name[PXY_CTRL_APP_ID] = "TSG_OBJ_APP_ID"; table_name[PXY_CTRL_APP_ID] = "TSG_OBJ_APP_ID";
table_name[PXY_CTRL_DOH_QNAME]="TSG_FIELD_DOH_QNAME";
table_name[PXY_CTRL_DOH_HOST]="TSG_FIELD_DOH_HOST";
table_name[PXY_CTRL_IP_SRC_ASN]="TSG_SECURITY_SOURCE_ASN"; table_name[PXY_CTRL_IP_SRC_ASN]="TSG_SECURITY_SOURCE_ASN";
table_name[PXY_CTRL_IP_DST_ASN]="TSG_SECURITY_DESTINATION_ASN"; table_name[PXY_CTRL_IP_DST_ASN]="TSG_SECURITY_DESTINATION_ASN";
table_name[PXY_CTRL_IP_SRC_LOCATION]="TSG_SECURITY_SOURCE_LOCATION"; table_name[PXY_CTRL_IP_SRC_LOCATION]="TSG_SECURITY_SOURCE_LOCATION";