Quelltext der Seite UMA/Konfig/Anpassung der Firewall

{{Set_lang}}

{{#vardefine:headerIcon|spicon-uma}}
{{:UMA/Konfig/Anpassung der Firewall.lang}}

{{var	| neu--Vereinfachung
		| Allgemeine Überarbeitung des Artikels
		| General revision of the article }}
{{var	| neu--UTMv12.6
		| Anpassung des Designs zur UTM v12.6
		| Adaptation of the design to UTM v12.6 }}
{{var	| neu--Ports
		| Detailliertere Auflistung der [[#Benötigte_Ports|benötigten Ports]]
		| Detailed list of the [[#Required_ports|required ports]] }}
{{var	| neu--Zeitstempel
		| Aktualisierung des [[#Zeitstempel|Zeitstempelservers]]
		| Update of the [[#Timestamp|Timestamp server]] }}
{{var	| neu--Updateserver
		| Aktualisierung des [[#Updateserver|Updateservers]]
		| Update of the [[#Updateserver|Updateserver]] }}

{{var	| URL-UTM
		| {{Hover|Admin Interface der UTM |UTM-IP:Port oder UTM-URL:Port<br>Port wie unter Netzwerk / Servereinstellungen / Webserver konfiguriert<br>Default-Port:&#09;11115<br>z.B.:&#09;&#09;&#09;https://utm.ttt-point.de:11115<br>Default:&#09;&#09;https://192.168.175.1:11115}}
		| {{Hover|Admin Interface of the UTM |UTM-IP:Port or UTM-URL:Port<br>Port as configured at Network / Appliance Settings / Webserver <br>Default-Port:&#09;11115<br>i.e.:&#09;&#09;&#09;https://utm.ttt-point.de:11115<br>Default:&#09;&#09;https://192.168.175.1:11115}} }}

</div><div class="new_design"></div>{{Select_lang}}{{TOC2}}
{{Header|3.3.5|
* {{#var:neu--Vereinfachung}}
* {{#var:neu--UTMv12.6}}
* {{#var:neu--Ports}}
* {{#var:neu--Zeitstempel}}
* {{#var:neu--Updateserver}}
|[[UMA/Konfig/Anpassung_der_Firewall_v3.3 | 3.3]] 
[[UMA/Anpassung_der_Firewall_an_das_UMA2.0 | 2.5.6]]
| zuletzt=01.2024
}}


----

=== {{#var:Einleitung}} ===
<div class="einrücken">
{{#var:Einleitung--desc}}
</div>

----

=== {{#var:Benötigte Ports}} {{Hinweis-box||gr|3.3|status=neu}}===
<div class="einrücken">
{{#var:Benötigte Ports--desc}}
{| class="sptable2 pd5 zh1"
! {{#var:Funktion}} !! {{#var:Port/Protokoll}}
|-
| {{#var:Updates sowie Zeitstempelabruf}} || 443/TCP
|-
| {{#var:Zeitserver}} || 123/TCP, 123/UDP
|-
| IMAP || 143/TCP, 993/TCP
|-
| POP3 || 110/TCP, 995/TCP
|-
| SMTP || 25/TCP, 465/TCP, 587/TCP
|-
| {{#var:Namensauflösung}} || 53/TCP, 53/UDP
|- class="Leerzeile"
|
|}
{{#var:Benötigte Ports Regeln}}
<!--{{Einblenden|{{#var:Ports Regeln UTM}}|{{#var:hide}}|dezent|true}}
{{#var:Zeitstempel Regel--desc}}
{| class="sptable2 pd5 zh1"
|-
| {{b|{{#var:Aktiv}} }} || {{buttonAn|{{#var:ein}}|Anw=UTM}} || {{#var:Aktiv Regel 1--desc}}
|-
| {{b|{{#var:Quelle}} }} || {{ic|internet|dr|icon=world|iconborder=none|Anw=UTM|class=available}} || 
|-
| {{b|{{#var:Ziel}} }} || {{ic|external-interface|dr|icon=interface|iconborder=none|Anw=UTM|class=available}} ||
|-
| {{b|{{#var:Dienst}} }} || {{ic|smtp|dr|icon=tcp|iconborder=none|Anw=UTM|class=available}} || {{#var:Dienst--desc}}
|-
| {{b|{{#var:Aktion}} }} || {{button|Accept|dr|class=available|Anw=UTM}} ||
|-
| {{b|{{#var:Logging}} }} || {{button|{{#var:None}}|dr|class=available|Anw=UTM}} ||
|-
| {{b|{{#var:Gruppe}} }} || {{button|default|dr|class=available|Anw=UTM}} || {{#var:Gruppe--desc}}
|- class="Leerzeile"
|
|-
| {{b|{{#var:Aktiv}} }} || {{buttonAn|{{#var:ein}}|Anw=UTM}} || {{#var:Aktiv Regel 2--desc}}
|-
| {{b|{{#var:Quelle}} }} || {{ic|Mailserver|dr|icon=host|iconborder=none|Anw=UTM|class=available}} || {{#var:Quelle-desc}}
|-
| {{b|{{#var:Ziel}} }} || {{ic|internal-interface|dr|icon=interface|iconborder=none|Anw=UTM|class=available}} || {{#var:Ziel-desc}}
|-
| {{b|{{#var:Dienst}} }} || {{ic|smtp|dr|icon=tcp|iconborder=none|Anw=UTM|class=available}} || {{#var:Dienst--desc}}
|-
| {{b|{{#var:Aktion}} }} || {{button|Accept|dr|class=available|Anw=UTM}} ||
|-
| {{b|{{#var:Logging}} }} || {{button|{{#var:None}}|dr|class=available|Anw=UTM}} ||
|-
| {{b|{{#var:Gruppe}} }} || {{button|default|dr|class=available|Anw=UTM}} || {{#var:Gruppe--desc}}
|- class="Leerzeile"
|
|-
| {{b|{{#var:Aktiv}} }} || {{buttonAn|{{#var:ein}}|Anw=UTM}} || {{#var:Aktiv Regel 3--desc}}
|-
| {{b|{{#var:Quelle}} }} || {{ic|Mailserver|dr|icon=host|iconborder=none|Anw=UTM|class=available}} || {{#var:Quelle-desc}}
|-
| {{b|{{#var:Ziel}} }} || {{ic|internal-interface|dr|icon=interface|iconborder=none|Anw=UTM|class=available}} || {{#var:Ziel-desc}}
|-
| {{b|{{#var:Dienst}} }} || {{ic|ntp-tcp|dr|icon=tcp|iconborder=none|Anw=UTM|class=available}} || {{#var:Dienst--desc}}
|-
| {{b|{{#var:Aktion}} }} || {{button|Accept|dr|class=available|Anw=UTM}} ||
|-
| {{b|{{#var:Logging}} }} || {{button|{{#var:None}}|dr|class=available|Anw=UTM}} ||
|-
| {{b|{{#var:Gruppe}} }} || {{button|default|dr|class=available|Anw=UTM}} || {{#var:Gruppe--desc}}
|- class="Leerzeile"
|
|}
</div></span></div>-->
{{Einblenden|{{#var:Ports Regeln UTM}}|{{#var:hide}}|dezent|true}}
{{#var:Zeitstempel Regel--desc}}
{| class="sptable2 pd5 zh1 tr--bc__white"
|-
| || {{b|<nowiki>#</nowiki>}} || class="mw7"| {{b|{{#var:Quelle}} }} || class="mw12"| {{b|{{#var:Ziel}} }} || {{b|{{#var:Dienst}} }} || {{b|NAT}} || class="mw6"| {{b|{{#var:Aktion}} }} || {{b|{{#var:Aktiv}} }} || class="mw6"| || {{b|{{#var:desc}} }}
|-
| {{spc|drag|o|-}} || 1 || {{ic|UMA|icon=host|iconborder=none|Anw=UTM|class=available}} || {{ic|Mailserver|icon=host|iconborder=none|Anw=UTM|class=available}} || {{ic|imap|icon=tcp|iconborder=none|Anw=UTM}} {{#var:oder}} {{ic|imap-ssl|icon=tcp|iconborder=none|Anw=UTM}} {{#var:oder}}<br> {{ic|pop3|icon=tcp|iconborder=none|Anw=UTM}} {{#var:oder}} {{ic|pop3s|icon=tcp|iconborder=none|Anw=UTM}} || || {{Kasten|Accept|grün}} || {{buttonAn|{{#var:ein}}|Anw=UTM}} || {{Button||copy|fs=14|Anw=UTM}}{{Button||w|fs=14|Anw=UTM}}{{Button||trash|fs=14|Anw=UTM}} || {{#var:Aktiv Regel 1--desc}}
|-
| {{spc|drag|o|-}} || 2 || {{ic|UMA|icon=host|iconborder=none|Anw=UTM|class=available}} || {{ic|internal-interface|icon=interface|iconborder=none|Anw=UTM|class=available}} || {{ic|dns|icon=service-group|iconborder=none|Anw=UTM}} || || {{Kasten|Accept|grün}} || {{buttonAn|{{#var:ein}}|Anw=UTM}} || {{Button||copy|fs=14|Anw=UTM}}{{Button||w|fs=14|Anw=UTM}}{{Button||trash|fs=14|Anw=UTM}} || {{#var:Aktiv Regel 2--desc}}
|-
| {{spc|drag|o|-}} || 3 || {{ic|UMA|icon=host|iconborder=none|Anw=UTM|class=available}} || {{ic|Mailserver|icon=host|iconborder=none|Anw=UTM|class=available}} || {{ic|smtp|icon=tcp|iconborder=none|Anw=UTM}} || || {{Kasten|Accept|grün}} || {{buttonAn|{{#var:ein}}|Anw=UTM}} || {{Button||copy|fs=14|Anw=UTM}}{{Button||w|fs=14|Anw=UTM}}{{Button||trash|fs=14|Anw=UTM}} || {{#var:Aktiv Regel 3--desc}}
|- class="Leerzeile"
|
|}
</div></span></div>
</div>

----

=== {{#var:Zeitstempel}} {{Hinweis-box||gr|3.3|status=update}}===
<div class="einrücken">
{{#var:Zeitstempel--desc}}
{{#var:Zeitstempel Firewall-Regel allgemein}}
{{Einblenden|{{#var:Zeitstempel UTM}}|{{#var:hide}}|dezent|true}}
{|  class="sptable2 pd5 zh1 einrücken"
|- class="noborder"
| colspan="4"| {{#var:Zeitstempel erstellen}}
|-
! {{#var:cap}} !! {{#var:val}} !! {{#var:desc}}
| class="Bild" rowspan="7"| {{Bild|{{#var:Zeitstempel erstellen--Bild}}|||{{#var:Netzwerkobjekt hinzufügen}}|Firewall|{{#var:Netzwerkobjekt}}|icon=fa-save|icon2=fa-floppy-disk-circle-xmark|icon3=fa-close }}
|-
| {{b|{{#var:Name}} }} || {{ic|{{#var:Zeitstempelserver}}|class=available}} || {{#var:Name--desc}}
|-
| {{b|{{#var:Typ}} }} || {{button|Hostname|dr|class=available|Anw=UTM}} || {{#var:Typ Hostname--desc}}
|-
| {{b|Hostname:}} || {{ic|tsa.utimaco.com|class=available}} || {{#var:Hostname--desc}}
|-
| {{b|{{#var:Zone}} }} || {{button|external|dr|class=available|Anw=UTM}} || {{#var:Zone--desc}}
|-
| {{b|{{#var:Gruppen}} }} || {{ic||cb|class=available}} || {{#var:Gruppen--desc}}
|- class="Leerzeile"
|
|}
<div class="einrücken">{{#var:Zeitstempel Regel--desc}}</div>
{| class="sptable2 pd5 zh1 einrücken tr--bc__white"
<!--|-
| class="Leerzeile" colspan="4"| {{#var:Zeitstempel Regel--desc}}-->
<!--|-
| {{b|{{#var:Aktiv}} }} || {{buttonAn|{{#var:ein}}|Anw=UTM}} || {{#var:Aktiv--desc}}
| class="Bild" rowspan="11"| {{Bild|{{#var:Zeitstempel Regel--Bild}} }}
|-
| {{b|{{#var:Quelle}} }} || {{ic|UMA|dr|icon=host|iconborder=none|Anw=UTM|class=available}} || {{#var:Quelle Zeitstempel-desc}}
|-
| {{b|{{#var:Ziel}} }} ||  {{ic|{{#var:Zeitstempelserver}}|dr|icon=host|iconborder=none|Anw=UTM|class=available}} || {{#var:Ziel Zeitstempel-desc}}
|-
| {{b|{{#var:Dienst}} }} || {{ic|https|dr|icon=tcp|iconborder=none|Anw=UTM|class=available}} || {{#var:Dienst--desc}}
|-
| {{b|{{#var:Aktion}} }} || {{button|Accept|dr|class=available|Anw=UTM}} ||
|-
| {{b|{{#var:Logging}} }} || {{button|{{#var:None}}|dr|class=available|Anw=UTM}} ||
|-
| {{b|{{#var:Gruppe}} }} || {{button|default|dr|class=available|Anw=UTM}} || {{#var:Gruppe--desc}}
|- class="noborder"
| colspan="3"| {{b|{{Kasten|[–] NAT|L}} }}
|-
| {{b|{{#var:Typ}} }} || {{button|HIDENAT|dr|class=avaialble|Anw=UTM}} || {{#var:Typ Nat--desc}}
|-
| {{b|{{#var:Netzwerkobjekt}} }} || {{ic|external-interface|dr|icon=interface|iconborder=none|Anw=UTM|class=available}} || {{#var:Netzwerkobjekt Nat--desc}}-->
|-
| || {{b|<nowiki>#</nowiki>}} || class="mw7"| {{b|{{#var:Quelle}} }} || class="mw12"| {{b|{{#var:Ziel}} }} || {{b|{{#var:Dienst}} }} || {{b|NAT}} || class="mw6"| {{b|{{#var:Aktion}} }} || {{b|{{#var:Aktiv}} }} ||
|-
| {{spc|drag|o|-}} || 4 || {{ic|UMA|icon=host|iconborder=none|Anw=UTM|class=available}} || {{ic|{{#var:Zeitstempelserver}}|icon=host|iconborder=none|Anw=UTM|class=available}} || {{ic|https|icon=tcp|iconborder=none|Anw=UTM}} || {{Kasten|HN|blau}} || {{Kasten|Accept|grün}} || {{buttonAn|{{#var:ein}}|Anw=UTM}} || {{Button||copy|fs=14|Anw=UTM}}{{Button||w|fs=14|Anw=UTM}}{{Button||trash|fs=14|Anw=UTM}}
|-
| {{spc|drag|o|-}} || 5 || {{ic|UMA|icon=host|iconborder=none|Anw=UTM|class=available}} || {{ic|{{#var:Zeitsynchronisation}}|icon=host|iconborder=none|Anw=UTM|class=available}} || {{ic|ntp-tcp|icon=tcp|iconborder=none|Anw=UTM}} {{#var:oder}}{{ic|ntp-udp|icon=udp|iconborder=none|Anw=UTM}} || {{Kasten|HN|blau}} || {{Kasten|Accept|grün}} || {{buttonAn|{{#var:ein}}|Anw=UTM}} || {{Button||copy|fs=14|Anw=UTM}}{{Button||w|fs=14|Anw=UTM}}{{Button||trash|fs=14|Anw=UTM}}
|- class="Leerzeile"
|
|}
</div></span></div>
</div>
<br clear=all>

----

=== {{#var:Updateserver}} {{Hinweis-box||gr|3.3|status=neu}}===
<div class="einrücken">
{{#var:Updateserver--desc}}
{{Einblenden|{{#var:Updateserver UTM}}|{{#var:hide}}|dezent|true}}
{|  class="sptable2 pd5 zh1 einrücken"
|- class="noborder"
| colspan="4"| {{#var:Zeitstempel erstellen}}
|-
! {{#var:cap}} !! {{#var:val}} !! {{#var:desc}}
| class="Bild" rowspan="7"| {{Bild|{{#var:Updateserver erstellen--Bild}}|||{{#var:Netzwerkobjekt hinzufügen}}|Firewall|{{#var:Netzwerkobjekt}}|icon=fa-save|icon2=fa-floppy-disk-circle-xmark|icon3=fa-close }}
|-
| {{b|{{#var:Name}} }} || {{ic|{{#var:Updateserver}}|class=available}} || {{#var:Name--desc}}
|-
| {{b|{{#var:Typ}} }} || {{button|Hostname|dr|class=available|Anw=UTM}} || {{#var:Typ Hostname--desc}}
|-
| {{b|Hostname:}} || class="mw12"| {{ic|ext.proxy-001.spnoc.de|class=available}} || {{#var:Hostname--desc}}
|-
| {{b|{{#var:Zone}} }} || {{button|external|dr|class=available|Anw=UTM}} || {{#var:Zone--desc}}
|-
| {{b|{{#var:Gruppen}} }} || {{ic||cb|class=available}} || {{#var:Gruppen--desc}}
|- class="Leerzeile"
|
|}
<div class="einrücken">{{#var:Zeitstempel Regel--desc}}</div>
{| class="sptable2 pd5 zh1 einrücken tr--bc__white"
|-
| || {{b|<nowiki>#</nowiki>}} || class="mw7"| {{b|{{#var:Quelle}} }} || class="mw12"| {{b|{{#var:Ziel}} }} || {{b|{{#var:Dienst}} }} || {{b|NAT}} || class="mw6"| {{b|{{#var:Aktion}} }} || {{b|{{#var:Aktiv}} }} ||
|-
| {{spc|drag|o|-}} || 6 || {{ic|UMA|icon=host|iconborder=none|Anw=UTM|class=available}} || {{ic|{{#var:Updateserver}}|icon=host|iconborder=none|Anw=UTM|class=available}} || {{ic|https|icon=tcp|iconborder=none|Anw=UTM}} || || {{Kasten|Accept|grün}} || {{buttonAn|{{#var:ein}}|Anw=UTM}} || {{Button||copy|fs=14|Anw=UTM}}{{Button||w|fs=14|Anw=UTM}}{{Button||trash|fs=14|Anw=UTM}}
|- class="Leerzeile"
|
|}
</div></span></div>
</div>

----

=== {{#var:Weitere Einstellungsmöglichkeiten}} {{Hinweis-box||gr|3.3|status=update}}===
<div class="einrücken">
{{#var:Weitere Einstellungsmöglichkeiten--desc}}
<br>
{{#var:Weitere Einstellungsmöglichkeiten UTM}}
</div>