KKeine Bearbeitungszusammenfassung |
KKeine Bearbeitungszusammenfassung |
||
| Zeile 68: | Zeile 68: | ||
| QOS }} | | QOS }} | ||
{{var | QOS--desc | {{var | QOS--desc | ||
| Ermöglicht | | Ermöglicht ein ''Quality of Service'' Profil anzugeben, daß die Bandbreite für Datenpakete, auf die diese Regel zutrifft limitiert.<br>Konfiguration der QoS-Profile im Menü {{Menu|Netzwerk|QoS|Profile|class=fs08}} | ||
| Allows you to specify a ''Quality of Service'' profile | | Allows you to specify a ''Quality of Service'' profile that limits the bandwidth for data packets to which this rule applies.<br>Configuration of the QoS profiles in the {{menu|Network|QoS|Profile|class=fs08}} menu. }} | ||
{{var | STATELESS | {{var | STATELESS | ||
| STATELESS | | STATELESS | ||
| Zeile 132: | Zeile 132: | ||
* if applicable, [[#Rule Routing | Rule Routing]] | * if applicable, [[#Rule Routing | Rule Routing]] | ||
* If applicable, a [[#QoS | QoS Profile]] that regulates the bandwidth made available for certain data packets. | * If applicable, a [[#QoS | QoS Profile]] that regulates the bandwidth made available for certain data packets. | ||
* if applicable, a [[# | * if applicable, a [[#Time profile | Time Profile]] at which the rule is to be applied | ||
* an [[#Aktion | Action]] that is to be executed | * an [[#Aktion | Action]] that is to be executed | ||
* details of the [[#Logging|Logging]] | * details of the [[#Logging|Logging]] | ||
| Zeile 163: | Zeile 163: | ||
| Create network objects }} | | Create network objects }} | ||
{{var | Netzwerkobjekte erstellen--Bild | {{var | Netzwerkobjekte erstellen--Bild | ||
| UTM v12. | | UTM v12.2 Netzwerkobjekt Host.png | ||
| UTM v12. | | UTM v12.2 Netzwerkobjekt Host-en.png }} | ||
{{var | Menu--Objekt hinzufügen | {{var | Menu--Objekt hinzufügen | ||
| {{Menu|Firewall|Portfilter|Netzwerkobjekte|Objekt hinzufügen|+}} | | {{Menu|Firewall|Portfilter|Netzwerkobjekte|Objekt hinzufügen|+}} | ||
| Zeile 325: | Zeile 325: | ||
| The name of the service and the protocol must be specified in each case. }} | | The name of the service and the protocol must be specified in each case. }} | ||
{{var | Dienst-any--Bild | {{var | Dienst-any--Bild | ||
| UTM v12. | | UTM v12.2 Portfilter Dienst hinzufügen.png | ||
| UTM v12. | | UTM v12.2 Portfilter Dienst hinzufügen-en.png }} | ||
{{var | Dienst-tcp--hinzufügen--cap | {{var | Dienst-tcp--hinzufügen--cap | ||
| Bei den Protokollen tcp und udp kann die Freigabe auf einen einzelnen Zielport oder auf Portbereiche beschränkt werden. Quellports können beliebig sein (Keine), ein einzelner Port oder ein Portbereich. | | Bei den Protokollen tcp und udp kann die Freigabe auf einen einzelnen Zielport oder auf Portbereiche beschränkt werden. Quellports können beliebig sein (Keine), ein einzelner Port oder ein Portbereich. | ||
| With the tcp and udp protocols, sharing can be restricted to a single destination port or port ranges. Source ports can be any (None), a single port or a port range. }} | | With the tcp and udp protocols, sharing can be restricted to a single destination port or port ranges. Source ports can be any (None), a single port or a port range. }} | ||
{{var | Dienst-tcp--hinzufügen--Bild | {{var | Dienst-tcp--hinzufügen--Bild | ||
| UTM v12. | | UTM v12.2 Portfilter Dienst tcp hinzufügen.png | ||
| UTM v12. | | UTM v12.2 Portfilter Dienst tcp hinzufügen-en.png }} | ||
{{var | Dienst-tcp--bearbeiten--cap | {{var | Dienst-tcp--bearbeiten--cap | ||
| Soll ein bestehender Dienst auf einem anderen Port laufen, kann der Dienst bearbeitet {{Button||w}} und der Port geändert werden. | | Soll ein bestehender Dienst auf einem anderen Port laufen, kann der Dienst bearbeitet {{Button||w}} und der Port geändert werden. | ||
| If an existing service is to run on a different port, the service can be edited {{button||w}} and the port changed. }} | | If an existing service is to run on a different port, the service can be edited {{button||w}} and the port changed. }} | ||
{{var | Dienst-tcp--bearbeiten--Bild | {{var | Dienst-tcp--bearbeiten--Bild | ||
| UTM v12. | | UTM v12.2 Portfilter Dienst https.png | ||
| UTM v12. | | UTM v12.2 Portfilter Dienst https-en.png }} | ||
{{var | Dienste--Bild | {{var | Dienste--Bild | ||
| UTM v12.1 Portfilter Dienste.png | | UTM v12.1 Portfilter Dienste.png | ||
| Zeile 359: | Zeile 359: | ||
In the example shown, the profile takes effect between 3:00 a.m. and 3:59:59 p.m. daily and from 7:00 a.m. to 5:59:59 p.m. on weekdays. }} | In the example shown, the profile takes effect between 3:00 a.m. and 3:59:59 p.m. daily and from 7:00 a.m. to 5:59:59 p.m. on weekdays. }} | ||
{{var | Zeitprofile--Bild | {{var | Zeitprofile--Bild | ||
| UTM v12. | | UTM v12.2 Portfilter Zeitprofile.png | ||
| UTM v12. | | UTM v12.2 Portfilter Zeitprofile-en.png }} | ||
{{var | Zeitprofile--anlegen | {{var | Zeitprofile--anlegen | ||
| Zeitprofile anlegen | | Zeitprofile anlegen | ||
| Zeile 367: | Zeile 367: | ||
| 2=* Anlegen eines Zeitprofils mit der Schaltfläche {{Button|Zeitprofil hinzufügen|+}} | | 2=* Anlegen eines Zeitprofils mit der Schaltfläche {{Button|Zeitprofil hinzufügen|+}} | ||
* Zeiten auswählen | * Zeiten auswählen | ||
** | ** Mit der Maus können einzelne Felder oder Zeitbereiche ausgewählt werden {{Hinweis| § <small>{{c|geändert in v12.2.2|gr}}</small>|12.3}} | ||
** | ** Mit der Taste <span class="key>Strg</span> und der Maus können mehrere Felder und Zeitbereich ausgewählt werden {{Hinweis| § <small>{{c|geändert in v12.2.2|gr}}</small>|12.3}} | ||
* Übernehmen der Zeiteinstellungen mit der Schaltfläche {{Button|Speichern|glyph|glyph-class=floppy-disk}} | * Übernehmen der Zeiteinstellungen mit der Schaltfläche {{Button|Speichern|glyph|glyph-class=floppy-disk}} | ||
| 3=* Create a time profile with the {{Button|Add time profile|+}} button. | | 3=* Create a time profile with the {{Button|Add time profile|+}} button. | ||
| Zeile 409: | Zeile 409: | ||
| Dienst | | Dienst | ||
| Service }} | | Service }} | ||
{{var | Dienst--desc | {{var | Nat-Dienst--desc | ||
| Verwendet im lokalen Zielnetzwerk den ausgewählten Dienst. Dieser Wert ist oft (aber keinesfalls immer) identisch mit dem darüberstehenden Dienst des Datenquellpaketes, auf den die Regel überprüft wird. | | Verwendet im lokalen Zielnetzwerk den ausgewählten Dienst. Dieser Wert ist oft (aber keinesfalls immer) identisch mit dem darüberstehenden Dienst des Datenquellpaketes, auf den die Regel überprüft wird. | ||
| Uses the selected service in the local destination network. This value is often (but by no means always) identical with the service above it in the data source package for which the rule is checked. }} | | Uses the selected service in the local destination network. This value is often (but by no means always) identical with the service above it in the data source package for which the rule is checked. }} | ||
{{var | Dienst--Hinweis | {{var | Nat-Dienst--Hinweis | ||
| Steht nur zur Verfügung, wenn als {{Kasten|Typ|class=Beschriftung}} {{Button|DESTNAT|dr}} oder {{Button|NETMAP|dr}} ausgewählt wurde. | | Steht nur zur Verfügung, wenn als {{Kasten|Typ|class=Beschriftung}} {{Button|DESTNAT|dr}} oder {{Button|NETMAP|dr}} ausgewählt wurde. | ||
| Only available when {{Kasten|Type|class=Beschriftung}} is selected as {{Button|DESTNAT|dr}} or {{Button|NETMAP|dr}}. }} | | Only available when {{Kasten|Type|class=Beschriftung}} is selected as {{Button|DESTNAT|dr}} or {{Button|NETMAP|dr}}. }} | ||
| Zeile 454: | Zeile 454: | ||
The standard case is data traffic from an internal network with private IP addresses to the Internet. <br>The IP from the local network is masked with the IP of the interface that establishes access to the Internet. }} | The standard case is data traffic from an internal network with private IP addresses to the Internet. <br>The IP from the local network is masked with the IP of the interface that establishes access to the Internet. }} | ||
{{var | Hide NAT--Bild | {{var | Hide NAT--Bild | ||
| UTM v12. | | UTM v12.2 Portfilter Hidenat-Regel.png | ||
| UTM v12. | | UTM v12.2 Portfilter Hidenat-Regel-en.png }} | ||
{{var | Hide NAT--cap | {{var | Hide NAT--cap | ||
| HideNat Regel | | HideNat Regel | ||
| Zeile 473: | Zeile 473: | ||
| Destination NAT Rule }} | | Destination NAT Rule }} | ||
{{var | Dest. NAT--Bild | {{var | Dest. NAT--Bild | ||
| UTM v12. | | UTM v12.2 Portfilter Destnat-Regel.png | ||
| UTM v12. | | UTM v12.2 Portfilter Destnat-Regel-en.png }} | ||
{{var | Full Cone NAT | {{var | Full Cone NAT | ||
| Full Cone NAT | | Full Cone NAT | ||
| Zeile 482: | Zeile 482: | ||
| With Full Cone NAT, the same port is set for the sender as for the recipient. However, IPs other than the originally addressed IP are also permitted as senders. This can be helpful with VOIP. }} | | With Full Cone NAT, the same port is set for the sender as for the recipient. However, IPs other than the originally addressed IP are also permitted as senders. This can be helpful with VOIP. }} | ||
{{var | Full Cone NAT--Bild | {{var | Full Cone NAT--Bild | ||
| UTM v12. | | UTM v12.2 Portfilter FullconeNat-Regel.png | ||
| UTM v12. | | UTM v12.2 Portfilter FullconeNat-Regel-en.png }} | ||
{{var | Full Cone NAT--cap | {{var | Full Cone NAT--cap | ||
| Full Cone NAT Regel | | Full Cone NAT Regel | ||
| Zeile 496: | Zeile 496: | ||
Otherwise, these would be masked with the public WAN IP address like all other packets in the direction of the Internet and, since they are sent with a private destination address, would be discarded at the next Internet router.<br>See also the [[UTM/RULE/Hidenat_Exclude | Wiki article Hidenat Exclude]]. }} | Otherwise, these would be masked with the public WAN IP address like all other packets in the direction of the Internet and, since they are sent with a private destination address, would be discarded at the next Internet router.<br>See also the [[UTM/RULE/Hidenat_Exclude | Wiki article Hidenat Exclude]]. }} | ||
{{var | HideNAT Exclude--Bild | {{var | HideNAT Exclude--Bild | ||
| UTM v12. | | UTM v12.2 Portfilter Hidenat Exclude-Regel.png | ||
| UTM v12. | | UTM v12.2 Portfilter Hidenat Exclude-Regel-en.png }} | ||
{{var | HideNAT Exclude--Regelübersicht--Bild | {{var | HideNAT Exclude--Regelübersicht--Bild | ||
| UTM v12.1 Portfilter Hidenat Exclude-Regelübersicht.png | | UTM v12.1 Portfilter Hidenat Exclude-Regelübersicht.png | ||
| Zeile 513: | Zeile 513: | ||
Using auxiliary networks (mapnet), which are not set up on either of the remote sites to be connected, these connections can be created collision-free without completely changing the subnet on either side. Instructions for connecting two networks can be found in a dedicated [[UTM/VPN/Netmap | Wiki article NetMap]] }} | Using auxiliary networks (mapnet), which are not set up on either of the remote sites to be connected, these connections can be created collision-free without completely changing the subnet on either side. Instructions for connecting two networks can be found in a dedicated [[UTM/VPN/Netmap | Wiki article NetMap]] }} | ||
{{var | NetMap--Bild | {{var | NetMap--Bild | ||
| UTM v12. | | UTM v12.2 Portfilter NetMap-Regel.png | ||
| UTM v12. | | UTM v12.2 Portfilter NetMap-Regel-en.png }} | ||
{{var | NetMap--cap | {{var | NetMap--cap | ||
| NetMap Regel | | NetMap Regel | ||
| Zeile 525: | Zeile 525: | ||
| Rule Routing }} | | Rule Routing }} | ||
{{var | Rule Routing--desc | {{var | Rule Routing--desc | ||
| Im Abschnitt {{Kasten|1=<small><nowiki>[-]</nowiki></small> Extras}} wird im Feld {{Kasten|Rule Routing}} regelbasiert festgelegt, welche Route IP-Pakete nehmen sollen.<br>Im nebenstehenden Beispiel werden alle VOIP-Pakete über die Schnittstelle | | Im Abschnitt {{Kasten|1=<small><nowiki>[-]</nowiki></small> Extras}} wird im Feld {{Kasten|Rule Routing}} regelbasiert festgelegt, welche Route IP-Pakete nehmen sollen.<br>Im nebenstehenden Beispiel werden alle VOIP-Pakete über die Schnittstelle wan0 geleitet. | ||
| In the {{Kasten|1=<small><nowiki>[-]</nowiki></small> Extras}} section, the {{Kasten|Rule Routing}} field is used to specify, based on rules, which route IP packets should take.<br>In the example opposite, all VOIP packets are routed via the | | In the {{Kasten|1=<small><nowiki>[-]</nowiki></small> Extras}} section, the {{Kasten|Rule Routing}} field is used to specify, based on rules, which route IP packets should take.<br>In the example opposite, all VOIP packets are routed via the wan0 interface. }} | ||
{{var | Rule Routing--Bild | {{var | Rule Routing--Bild | ||
| UTM v12. | | UTM v12.2 Portfilter Rule Routing.png | ||
| UTM v12. | | UTM v12.2 Portfilter Rule Routing-en.png }} | ||
{{var | Rule Routing--cap | {{var | Rule Routing--cap | ||
| | | | ||
| Zeile 552: | Zeile 552: | ||
| Reduces the available bandwidth for data packets to which this rule applies to the value configured for the Selected Profile in the {{Menu|Network|QoS|Profile|class=fs08}} menu. }} | | Reduces the available bandwidth for data packets to which this rule applies to the value configured for the Selected Profile in the {{Menu|Network|QoS|Profile|class=fs08}} menu. }} | ||
{{var | QOS-Extras--Hinweis | {{var | QOS-Extras--Hinweis | ||
| Steht nur zur Verfügung, wenn als {{ | | Steht nur zur Verfügung, wenn als {{b|{{#var:Aktion}} }} {{Button|QOS|dr}} ausgewählt wurde. | ||
| Only available when {{Button|QOS|dr}} is selected as {{Box|Action|class=Label}}. }} | | Only available when {{Button|QOS|dr}} is selected as {{Box|Action|class=Label}}. }} | ||
{{var | Zeitprofil | {{var | Zeitprofil | ||
| Zeile 599: | Zeile 599: | ||
| Regeln aktualisieren | | Regeln aktualisieren | ||
| Update Rules }} | | Update Rules }} | ||
{{var | neu--Auswahl von Zeiträumen | |||
| Auswahl von [[#Zeitprofile | Zeiträumen in den Zeitprofilen]] wurde vereinfacht | |||
| Selection of [[#Time profiles | Time periods in the time profiles]] has been simplified }} | |||
{{var | Allgemein | |||
| Allgemein | |||
| General }} | |||
{{var | Dienst | |||
| Dienst | |||
| Service }} | |||
{{var | Dienst--desc | |||
| Gewünschter Dienst mit hinterlegtem Port (siehe Reiter {{Reiter|[[#Dienste | Dienste]]}}) | |||
| Desired service with stored port (see tab {{Reiter|[[#Services | Services]]}}) }} | |||
{{var | hinzufügen | |||
| hinzufügen | |||
| add }} | |||
{{var | hinzufügen--desc | |||
| Fügt ein Netzwerkobjekt oder einen Dienst hinzu | |||
| Adds a network object or service }} | |||
{{var | None--desc | |||
| Es wird kein NAT durchgeführt | |||
| No NAT is performed }} | |||
{{var | | {{var | | ||
| | |||
| }} | |||
{{var | | |||
| | |||
| }} | |||
{{var | | |||
| | |||
| }} | |||
UTM/RULE/Portfilter.lang: Unterschied zwischen den Versionen
Aus Securepoint Wiki