gfwleak/tango-verify-policy
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

TSG-5661 策略验证支持VOIP协议

Browse Source
This commit is contained in:
fengweihao
2021-03-02 18:17:31 +08:00
parent c900e0ab28
commit 9d7142e164
4 changed files with 9 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
common/include/verify_policy.h
View File

@@ -76,6 +76,8 @@ enum security_scan_table
PXY_SECURITY_FTP_URI, PXY_SECURITY_FTP_URI,
PXY_SECURITY_FTP_CONTENT, PXY_SECURITY_FTP_CONTENT,
PXY_SECURITY_FTP_ACCOUNT, PXY_SECURITY_FTP_ACCOUNT,
PXY_SECURITY_SIP_FROM,
PXY_SECURITY_SIP_TO,
PXY_SECURITY_IP_SRC_ASN, PXY_SECURITY_IP_SRC_ASN,
PXY_SECURITY_IP_DST_ASN, PXY_SECURITY_IP_DST_ASN,
PXY_SECURITY_IP_SRC_LOCATION, PXY_SECURITY_IP_SRC_LOCATION,

4
platform/src/verify_policy.cpp
View File

@@ -135,7 +135,9 @@ int protoco_field_type_str2idx(enum verify_policy_type type, const char *action_
table_name[PXY_SECURITY_FTP_URI] = "TSG_FIELD_FTP_URI"; table_name[PXY_SECURITY_FTP_URI] = "TSG_FIELD_FTP_URI";
table_name[PXY_SECURITY_FTP_CONTENT] = "TSG_FIELD_FTP_CONTENT"; table_name[PXY_SECURITY_FTP_CONTENT] = "TSG_FIELD_FTP_CONTENT";
table_name[PXY_SECURITY_FTP_ACCOUNT] = "TSG_FIELD_FTP_ACCOUNT"; table_name[PXY_SECURITY_FTP_ACCOUNT] = "TSG_FIELD_FTP_ACCOUNT";
scan_table_max = PXY_SECURITY_FTP_ACCOUNT; table_name[PXY_SECURITY_SIP_FROM]="TSG_FIELD_SIP_FROM";
table_name[PXY_SECURITY_SIP_TO]="TSG_FIELD_SIP_TO";
scan_table_max = PXY_SECURITY_SIP_TO;
break; break;
case PXY_TABLE_WANNAT: case PXY_TABLE_WANNAT:
table_name[PXY_WANNAT_SOURCE_ADDR]="TSG_SECURITY_SOURCE_ADDR"; table_name[PXY_WANNAT_SOURCE_ADDR]="TSG_SECURITY_SOURCE_ADDR";

4
resource/table_info_security.conf
View File

@@ -56,5 +56,5 @@
45 TSG_SECURITY_DESTINATION_LOCATION virtual TSG_OBJ_GEO_LOCATION -- 45 TSG_SECURITY_DESTINATION_LOCATION virtual TSG_OBJ_GEO_LOCATION --
46 TSG_FQDN_CATEGORY_BUILT_IN fqdn_plugin {"row_id":1,"is_suffix_match":4,"fqdn":3,"valid":5} -- 46 TSG_FQDN_CATEGORY_BUILT_IN fqdn_plugin {"row_id":1,"is_suffix_match":4,"fqdn":3,"valid":5} --
47 TSG_FQDN_CATEGORY_USER_DEFINED fqdn_plugin {"row_id":1,"is_suffix_match":4,"fqdn":3,"valid":5} -- 47 TSG_FQDN_CATEGORY_USER_DEFINED fqdn_plugin {"row_id":1,"is_suffix_match":4,"fqdn":3,"valid":5} --
48 TSG_FIELD_SIP_FROM virtual TSG_OBJ_ACCOUNT --
49 TSG_FIELD_SIP_TO virtual TSG_OBJ_ACCOUNT --

2
scan/src/policy_scan.cpp
View File

@@ -1382,6 +1382,8 @@ int security_policy_init(struct verify_policy * verify, const char* profile_path
table_name[PXY_SECURITY_IP_DST_ASN]="TSG_SECURITY_DESTINATION_ASN"; table_name[PXY_SECURITY_IP_DST_ASN]="TSG_SECURITY_DESTINATION_ASN";
table_name[PXY_SECURITY_IP_SRC_LOCATION]="TSG_SECURITY_SOURCE_LOCATION"; table_name[PXY_SECURITY_IP_SRC_LOCATION]="TSG_SECURITY_SOURCE_LOCATION";
table_name[PXY_SECURITY_IP_DST_LOCATION]="TSG_SECURITY_DESTINATION_LOCATION"; table_name[PXY_SECURITY_IP_DST_LOCATION]="TSG_SECURITY_DESTINATION_LOCATION";
table_name[PXY_SECURITY_SIP_FROM]="TSG_FIELD_SIP_FROM";
table_name[PXY_SECURITY_SIP_TO]="TSG_FIELD_SIP_TO";
for (int i = 0; i < __SECURITY_TABLE_MAX; i++) for (int i = 0; i < __SECURITY_TABLE_MAX; i++)
{ {