LANCOM Router Firewall Konfiguration - Versionsgeschichte

Torsten am 29. März 2021 um 10:54 Uhr

2021-03-29T10:54:44Z

← Nächstältere Version		Version vom 29. März 2021, 10:54 Uhr
Zeile 1:		Zeile 1:
	~~https://support.lancom-systems.com/knowledge/pages/viewpage.action?pageId=32982115~~

	== Firewall Ports ==		== Firewall Ports ==
Zeile 51:		Zeile 50:

	Ports (TCP/UDP) 61616/30005		Ports (TCP/UDP) 61616/30005

			== Konfiguration gem. LANCOM ==
			https://support.lancom-systems.com/knowledge/pages/viewpage.action?pageId=32982115

	== Firewall Regeln für AddIn ==		== Firewall Regeln für AddIn ==

Torsten am 29. März 2021 um 10:53 Uhr

2021-03-29T10:53:11Z

← Nächstältere Version		Version vom 29. März 2021, 10:53 Uhr
Zeile 46:		Zeile 46:
	==== Dropbox ====		==== Dropbox ====
	Ports 80/443/17600/17603/17500		Ports 80/443/17600/17603/17500

			==== Citrix ====
			Ports (TCP) 8443/9080/30001/30002/30022

			Ports (TCP/UDP) 61616/30005

	== Firewall Regeln für AddIn ==		== Firewall Regeln für AddIn ==

Torsten am 29. März 2021 um 10:51 Uhr

2021-03-29T10:51:06Z

← Nächstältere Version		Version vom 29. März 2021, 10:51 Uhr
Zeile 2:		Zeile 2:

	== Firewall Ports ==		== Firewall Ports ==

			=== Allgemeine Ports ===
	{\| class="wikitable"		{\| class="wikitable"
	\|+~~Allgemeine Ports~~		\|+
	!Port		!Port
	!Dienst		!Dienst
Zeile 39:		Zeile 41:
	\|		\|
	\|}		\|}

			=== Anwendungsspezifische Ports ===

			==== Dropbox ====
			Ports 80/443/17600/17603/17500

	== Firewall Regeln für AddIn ==		== Firewall Regeln für AddIn ==

Torsten: /* Allgemeine Dienste: */

2021-03-29T10:47:31Z

Allgemeine Dienste:

← Nächstältere Version		Version vom 29. März 2021, 10:47 Uhr
Zeile 1:		Zeile 1:
	https://support.lancom-systems.com/knowledge/pages/viewpage.action?pageId=32982115		https://support.lancom-systems.com/knowledge/pages/viewpage.action?pageId=32982115

			== Firewall Ports ==
			{\| class="wikitable"
			\|+Allgemeine Ports
			!Port
			!Dienst
			!Protokoll
			!
			\|-
			\|53
			\|DNS
			\|TCP
			\|
			\|-
			\|80
			\|HTTP
			\|TCP
			\|
			\|-
			\|443
			\|HTTPS
			\|TCP
			\|
			\|-
			\|500
			\|IPSEC / VPN
			\|UDP
			\|
			\|-
			\|4500
			\|IPSEC / VPN
			\|UDP
			\|
			\|-
			\|
			\|
			\|
			\|
			\|}

	== Firewall Regeln für AddIn ==		== Firewall Regeln für AddIn ==

Torsten am 29. März 2021 um 08:50 Uhr

2021-03-29T08:50:40Z

← Nächstältere Version		Version vom 29. März 2021, 08:50 Uhr
Zeile 1:		Zeile 1:
	https://support.lancom-systems.com/knowledge/pages/viewpage.action?pageId=32982115		https://support.lancom-systems.com/knowledge/pages/viewpage.action?pageId=32982115

			== Firewall Regeln für AddIn ==

			=== Allgemeine Dienste: ===
			cd /

			cd /Setup/IP-Router/Firewall/Rules

			del *

			<nowiki>#</nowiki> Name Prot. Source Destination Action LB-Policy Linked Prio Firewall-Rule VPN-Rule Stateful Src-Tag Rtg-tag Comment

			<nowiki>#</nowiki> ==================================-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

			add "WINS" {Prot.} "TCP UDP" {Source} "NETBIOS ANYHOST" {Destination} "ANYHOST" {Action} "INTERNET-FILTER" {LB-Policy} "" {Linked} No {Prio} 0 {Firewall-Rule} Yes {VPN-Rule} No {Stateful} Yes {Src-Tag} 0 {Rtg-tag} 0 {Comment} "block NetBIOS/WINS name resolution via DNS"

			add "ALLOW-VPN" {Prot.} "ANY" {Source} "LOCALNET" {Destination} "IPSEC ANYHOST" {Action} "ACCEPT" {LB-Policy} "" {Linked} No {Prio} 0 {Firewall-Rule} Yes {VPN-Rule} No {Stateful} Yes {Src-Tag} 0 {Rtg-tag} 0 {Comment} ""

			add "ALLOW-DNS" {Prot.} "ANY" {Source} "LOCALNET" {Destination} "DNS ANYHOST" {Action} "ACCEPT" {LB-Policy} "" {Linked} No {Prio} 0 {Firewall-Rule} Yes {VPN-Rule} No {Stateful} Yes {Src-Tag} 0 {Rtg-tag} 0 {Comment} ""

			add "ALLOW-INET" {Prot.} "ANY" {Source} "LOCALNET" {Destination} "MAIL HTTP HTTPS ANYHOST" {Action} "ACCEPT" {LB-Policy} "" {Linked} No {Prio} 0 {Firewall-Rule} Yes {VPN-Rule} No {Stateful} Yes {Src-Tag} 0 {Rtg-tag} 0 {Comment} ""

			add "DENAY-ALL" {Prot.} "ANY" {Source} "ANYHOST" {Destination} "ANYHOST" {Action} "INTERNET-FILTER" {LB-Policy} "" {Linked} No {Prio} 0 {Firewall-Rule} Yes {VPN-Rule} No {Stateful} Yes {Src-Tag} 0 {Rtg-tag} 0 {Comment} ""

			add "CONTENT-FILTER" {Prot.} "TCP" {Source} "LOCALNET" {Destination} "WEB ANYHOST" {Action} "CONTENT-FILTER-BASIC" {LB-Policy} "" {Linked} No {Prio} 9999 {Firewall-Rule} No {VPN-Rule} No {Stateful} Yes {Src-Tag} 0 {Rtg-tag} 0 {Comment} "pass web traffic to Content-Filter"

			cd /

			=== Zusätzlich für ein Bestimmtes Netz "Produktiv" in ein VPN Tunnel alles freigeben: ===
			add "IGEL" {Prot.} "ANY" {Source} "%LPRODUKTIVNETZ" {Destination} "%HPRODU@Z_RZGA_M" {Action} "ACCEPT" {LB-Policy} "" {Linked} No {Prio} 100 {Firewall-Rule} Yes {VPN-Rule} No {Stateful} Yes {Src-Tag} 0 {Rtg-tag} 0 {Comment} ""

			[[Kategorie:Lancom]]
			[[Kategorie:Firewall]]
			[[Kategorie:Regeln]]
			[[Kategorie:17xx]]
			[[Kategorie:19xx]]
			__INHALTSVERZEICHNIS_ERZWINGEN__

Torsten: Die Seite wurde neu angelegt: „https://support.lancom-systems.com/knowledge/pages/viewpage.action?pageId=32982115“

2021-03-26T08:35:22Z

Die Seite wurde neu angelegt: „https://support.lancom-systems.com/knowledge/pages/viewpage.action?pageId=32982115“

Neue Seite

https://support.lancom-systems.com/knowledge/pages/viewpage.action?pageId=32982115