Quelltext der Seite UTM/RULE/Paketfilter

{{Set_lang}}

<templatestyles src="Vorlage:Portfilter.css" />
{{#vardefine:headerIcon|spicon-utm}}
{{:UTM/RULE/Paketfilter.lang}}

{{var	| neu--Logginganzeige
		| [[#Logging|Logginganzeige/-konfiguration]] in Paketfilterübersicht
		| [[#Logging|Logging display/configuration]] in packet filter overview }}
{{var	| neu--nftables
		| Iptables wird durch nftables abgelöst
		| Iptables is replaced by nftables }}

</div><div class="new_design"></div>{{Select_lang}}{{TOC2|limit=2}}
{{Header|12.7.1.1|
* {{#var:neu--Logginganzeige}}
* <del>{{#var:neu--nftables}}</del> <small>Hotfix 12.7.1.1</small>
|[[UTM/RULE/Paketfilter_v12.6.0 | 12.6]]
[[UTM/RULE/Portfilter_v12.4 | 12.4]]
[[UTM/RULE/Portfilter_v12.2.3 | 12.2]]
[[UTM/RULE/Portfilter_v12.1 | 12.1]]
[[UTM/RULE/Portfilter_v11.7 | 11.7]]
| {{Menu-UTM|Firewall|Paketfilter}}
}}
<br>
<li class="list--element__alert list--element__positiv">{{#var:Portfilter zu Paketfilter}}</li>
----

<!--
<li class="list--element__alert list--element__hint em2">
{{#var:nftables--Hinweis}} {{info|{{#var:nftables--info}} }}<br>
{{#var:Umschalten per CLI}}{{info|
{{code|system rule_engine set value "nftables"}}<br>
{{#var:bzw.}}<br>
{{code|system rule_engine set value "iptables"}}<br>
{{#var:Umschalten per CLI--info}}
| icon=code}}
</div></div></span></li>
-->
<li class="list--element__alert list--element__hint">{{#var:nft Test}}{{info|{{#var:nftables--info}} <br>{{code|system rule_engine set value "nftables"}}<br>{{#var:bzw.}}<br>{{code|system rule_engine set value "iptables"}}
| icon=code}}
</li>

<br clear=all>
=== {{#var:Paketfilter Beschreibung}} ===
<div class="Einrücken">
{{Bild| {{#var:Paketfilter--Bild}} |{{#var:Menü Paketfilter}}||{{#var:Paketfilter}}|Firewall|icon=fa-play|icon-text={{#var:Regeln aktualisieren}}|class=Bild-t}}
{{#var:Funktion--desc}}
<li class="list--element__alert list--element__warning">{{#var:Regel-Ausnahme}}</li>
<br>
<li class="list--element__alert list--element__warning">{{#var:Last-rule-drop}}</li>
<!-- {{pt3|{{#var:Paketfilter--Bild}}|hochkant=2.5 }} -->
{{#var:Paketfilter-Elemente--desc}}
</div><br clear=all>
----


=== {{#var:Paketfilterregel}} ===
<div class="Einrücken">
* {{#var:Paketfilterregel--desc}}
* {{#var:Paketfilterregel-Hinweis}}
* {{#var:Logging Slider}}
</div>

{| class="Einrücken sptable2 Paketfilter pd5 tr--bc__white zh1"
|- class="bold small no1cell"
| class="Leerzeile bc__default" | '''{{#var:Typische Beispiele}}:''' || || <nowiki>#</nowiki> || style="min-width:12em;" | {{#var:Quelle}} || style="min-width:12em;" | {{#var:Ziel}} || style="min-width:12em;" | {{#var:Dienst}} || style="min-width:6em;" | NAT || Logging || style="min-width:7em;" |  {{#var:Aktion}} || {{#var:Aktiv}} || style="min-width:5em;" | 
|- 
| class="bc__default" | {{#var:Regel--internal-internet}} || {{spc|drag|o|-}} || 7 || {{spc|net|o|-}} internal-network || {{spc|world|o|-}} internet || {{spc|dienste|o|-}} default-internet || {{Kasten|HN|blau}} || {{Logging-Slider|1}} || {{Kasten|Accept|grün}} || {{ButtonAn|{{#var:ein}} }} || class=mw6 | {{Button||copy|fs=14}}{{Button||w|fs=14}}{{Button||trash|fs=14}}
|- class="Leerzeile bc__default"
| colspan="9" |
|-
| class="bc__default" | {{#var:Regel--internal-dmz1}} || {{spc|drag|o|-}} || 8 || {{spc|net|o|-}} internal-network || {{spc|net|o|-}} dmz1-network || {{spc|other|o|-}} any ||  || {{Logging-Slider|1}} || {{Kasten|Accept|grün}} || {{ButtonAn|{{#var:ein}} }} || class=mw6 | {{Button||copy}}{{Button||w|fs=14}}{{Button||trash|fs=14}}
|- class="Leerzeile bc__default"
| colspan="9" |
|-
| class="bc__default" | {{#var:Regel--internet-server-ssh}} || {{spc|drag|o|-}} || 9 || {{spc|world|o|-}} internet || {{spc|net|o|-}} internal-network || {{spc|tcp|o|-}} ssh || {{Kasten|DN ➞|blau}} || {{Logging-Slider|2}} || {{Kasten|Accept|grün}} || {{ButtonAn|{{#var:ein}} }} || class=mw6 | {{Button||copy}}{{Button||w|fs=14}}{{Button||trash|fs=14}}
|- class="Leerzeile bc__default"
| colspan="9" |
|-
| rowspan="3" class="bc__default" | {{#var:Regel--internet-ohne-ftp}}<br><li class="list--element__alert list--element__hint">{{#var:Regel--internet-ohne-ftp--Hinweis}}</li> || {{spc|drag|o|-}} || 10 || {{spc|net|o|-}} internal-network || {{spc|world|o|-}} internet || {{spc|tcp|o|-}}  ftp || || {{Logging-Slider}} || {{Kasten|Drop|gelb}} || {{ButtonAn|{{#var:ein}} }} || class=mw6 | {{Button||copy}}{{Button||w|fs=14}}{{Button||trash|fs=14}}
|- class="no1cell"
|  {{spc|drag|o|-}} || 7 || {{spc|net|o|-}} internal-network || {{spc|world|o|-}} internet || {{spc|dienste|o|-}}  default-internet || {{Kasten|HN|blau}} || {{Logging-Slider|3}} || {{Kasten|Accept|grün}} || {{ButtonAn|{{#var:ein}} }} || class=mw6 | {{Button||copy}}{{Button||w|fs=14}}{{Button||trash|fs=14}}
|- class="Leerzeile bc__default"
|
|- class="Leerzeile bc__default"
|
|}


==== {{#var:Autogenerierte Regeln}} ====
<div class="Einrücken">
<span class="Status>{{#var:autogeneriert}}</span> 
{{#var:Autogenerierte Regeln--desc}}
<br>
{{Hinweis-box|{{#var:Autogenerierte Regeln--Hinweis}}|fs__icon=em2}}
<br>
{{#var:Autogenerierte Regeln--ausblenden}} <small>'''Default'''</small>
</div>


==== {{#var:Paketfilterregel-Einstellungen}} ====
<div class="Einrücken">
{{Hinweis-box|{{#var:Regeln aktualisieren--Hinweis}}<br>{{Button||w}} / {{Button|{{#var:Regel hinzufügen}}|+}} →  {{Button-dialog| {{#var:Regeln aktualisieren}}|fa-play}} |g|fs__icon=em3}}
</div>

{| class="sptable2 pd5 zh1 Einrücken"
|- class="Leerzeile"
| colspan="3" | {{h5|{{#var:Allgemein}}|{{Reiter|{{#var:Allgemein}} }} }}
|-
! {{#var:cap}} !! {{#var:val}} !! {{#var:desc}}
| class="Bild" rowspan="12" | {{Bild| {{#var:Allgemein--Bild}} |{{#var:Allgemein--cap}}||{{#var:Regel hinzufügen}}|Firewall|{{#var:Paketfilter}}|icon=fa-save|icon2=fa-floppy-disk-circle-xmark|icon3=fa-close}}
|-
| {{b|{{#var:Aktiv}}:}} || {{ButtonAn|{{#var:ein}} }} || {{#var:Aktiv--desc}}
|-
| {{b|{{#var:Quelle}}:}} || {{ic|{{spc|net|o|-}} internal-network|dr|class=available}} || {{#var:Quelle--desc}}
|-
| {{b|{{#var:Ziel}}:}} || {{ic| {{spc|world|o|-}} internet|dr|class=available}} || {{#var:Ziel--desc}}
|-
| {{b|{{#var:Dienst}}:}} || {{ic| {{spc|dienste|o|default-internet}} |dr|class=available}} || {{#var:Dienst--desc}}
|-
| colspan="2" | {{Button||+}} <span class=Hover>Netzwerkobjekt {{#var:hinzufügen}}</span> / <span class="Hover nowrap lh2>Dienst {{#var:hinzufügen}}</span>|| {{#var:hinzufügen--desc}}
|-
| colspan="2" | {{Button||class=fas fa-random}} <span class=Hover id=tauschen>{{#var:Netzwerkobjekt wechseln}}</span> || {{#var:Netzwerkobjekt wechseln--desc}}
|-
| rowspan="5" | {{b|{{#var:Aktion}}:}}{{h-6|{{#var:Aktion}}}} || {{Button|ACCEPT|dr|class=available}} || {{Kasten|ACCEPT|grün}} {{#var:ACCEPT--desc}}
|-
| {{Button|DROP|dr|class=available}} || {{Kasten|DROP|gelb}} {{#var:DROP--desc}}
|-
| {{Button|REJECT|dr|class=available}} || {{Kasten|REJECT|gelb}} {{#var:REJECT--desc}}
|-
| {{Button|QOS|dr|class=available}} || {{Kasten|QOS|grau}} {{#var:QOS--desc}}
|-
| {{Button|STATELESS|dr|class=available}} || {{Kasten|STATELESS|grau}} {{#var:STATELESS--desc}}
|-
| rowspan="4" | {{b|Logging:}}{{h-6|Logging}} || || {{#var:Logging--desc}}
<!--| class=Bild rowspan=1 | {{Bild|{{#var:Loggingschaltfläche allgemein--Bild}} }}-->
|-
| {{Button|None|dr|class=available}} || {{#var:Logging--none--desc}} <small>(default)</small>
| class="Bild" rowspan="1" | {{Bild| {{#var:Loggingschaltfläche none--Bild}} |Logging: None}}
|-
| {{Button|Short|dr|class=available}} || {{#var:Logging--short--desc}}
| class="Bild" rowspan="1" | {{Bild| {{#var:Loggingschaltfläche short--Bild}} |Logging: Short}}
|-
| {{Button|Long|dr|class=available}} || {{#var: Logging--long--desc}}
| class="Bild" rowspan="1" | {{Bild| {{#var:Loggingschaltfläche long--Bild}} |Logging: Long}}
|-
| {{b|{{#var:Gruppe}}:}} || {{Button|default|dr|class=available}} || {{#var:Gruppe--desc}}
|- class="Leerzeile"
|
|- class="Leerzeile"
| {{h5|NAT|{{Reiter|[ - ] NAT}} }}
| colspan="2" | {{#var:NAT--desc}}
|-
| rowspan="6" | {{b|{{#var:Typ}}:}} || {{Button|NONE|dr|class=available}} 
| {{#var:None--desc}}
|-
| {{Button|FULLCONENAT|dr|class=available}}
| {{#var:Full Cone NAT--desc}}
| class="Bild" rowspan="1" | {{Bild| {{#var:Full Cone NAT--Bild}} |Full Cone NAT}}
|-
| {{Button|HIDENAT|dr|class=available}}
| {{#var:Hide NAT--desc}} 
| class="Bild" rowspan="1" | {{Bild| {{#var:Hide NAT--Bild}} |HideNat}}
|-
| {{Button|HIDENAT_EXCLUDE|dr|class=available}}
| {{#var:HideNAT Exclude--desc}}<br><li class="list--element__alert list--element__hint">{{#var:HideNAT Exclude--Hinweis}}</li>{{Bild|{{#var:HideNAT Exclude--Regelübersicht--Bild}} }}
| class="Bild" rowspan="1" | {{Bild| {{#var:HideNAT Exclude--Bild}} |HidNAT Exclude}}
|-
| {{Button|DESTNAT|dr|class=available}}
| {{#var:Dest. NAT--desc}}
| class="Bild" rowspan="1" | {{Bild| {{#var:Dest. NAT--Bild}} |Destination NAT}}
|-
| {{Button|NETMAP|dr|class=available}}
| {{#var:NetMap--desc}}
| class="Bild" rowspan="1" | {{Bild|{{#var:NetMap--Bild}} |NetMap}}
|- class="Leerzeile"
|
|-
| {{b|{{#var:Netzwerkobjekt}}:}} || {{ic| {{spc|interface|o|external-interface}} |dr|class=available}}
| {{#var:Netzwerkobjekt--desc}}
|-
| {{b|{{#var:Dienst}}:}} || {{ic| {{spc|tcp|o|ssh}} |dr|class=available}}
| {{#var:Nat-Dienst--desc}}<br> <li class="list--element__alert list--element__hint">{{#var:Nat-Dienst--Hinweis}}</li>
|- class="Leerzeile" 
| colspan="2" | {{h5|Extras|{{Reiter|[ - ] Extras}} }}
|-
| {{h6|Rule Routing}}{{b|Rule Routing}}
| {{ic|wan0|dr|class=available}}
| {{#var:Rule Routing--desc}} <li class="list--element__alert list--element__hint">{{#var:Rule Routing--Hinweis}}</li>
| class="Bild" rowspan="4" | {{Bild|{{#var:Rule Routing--Bild}} |{{#var:Rule Routing--cap}} }}
|-
| {{h6|QoS}}{{b|QOS}}
| {{Button|QOS|dr|class=available}} 
| {{#var:QOS--desc}}<br> <li class="list--element__alert list--element__hint">{{#var:QOS-Extras--Hinweis}}</li>
|-
| {{b|{{#var:Zeitprofil}} }}
| {{Button|{{#var:Zeitprofil}}|dr|class=available}} 
| {{#var:Zeitprofil--desc}}
|- class="Leerzeile"
| 
|-
| {{Kasten|{{#var:Beschreibung}}|class=Beschriftung}}
| {{ic|{{#var:Beschreibung--val}} {{ButtonAn|{{#var:ein}} }} 
| {{#var:Beschreibung--desc}}
| class="Bild" rowspan="2" | {{Bild| {{#var:Beschreibung--Bild}} |{{#var:Beschreibung-cap}}||{{#var:Paketfilter}}|Firewall|icon=fa-play|icon-text={{#var:Regeln aktualisieren}} }}
|- class="Leerzeile"
| colspan="3" | <br>{{Hinweis-box|{{#var:Regeln aktualisieren--Hinweis}}<br>{{Button||w}} / {{Button|{{#var:Regel hinzufügen}}|+}} →  {{Button-dialog|{{#var:Regeln aktualisieren}}|fa-play}} |g|fs__icon=em3}}
|}
----


{{:UTM/RULE/Netzwerkobjekte}}
----


{{:UTM/RULE/Dienste}}
----


{{:UTM/RULE/Zeitprofile}}
----