Das Problem ist nun wieder aufgetreten: Das Webinterface zeigt weder ein- noch ausgehende Regel an. Setze ich den Haken 'Regelwerk anzeigen', sehe ich nur Highoutput-Regeln, Lowinput-Regeln werden keine angezeigt.
Das ist der Inhalt der /mod/etc/conf/avm-firewall.cfg:
Das erstaunliche ist, dass ich seit vorgestern nichts mehr an der Fritz!Box gemacht habe - und da waren sie noch da.
Firefox meldet jedoch einen Fehler:
ar7.cfg - Auszug
Grüße
smileyman
Das ist der Inhalt der /mod/etc/conf/avm-firewall.cfg:
Code:
export AVM_FIREWALL_DO_ACTIVATE='yes'
export AVM_FIREWALL_GUI='*gui*'
export AVM_FIREWALL_LOG=''
export _cgi_width='1004'
export AVM_FIREWALL_RULESTABLE_LI='deny ip any 242.0.0.0 255.0.0.0 /*AVM*/
deny ip any host 255.255.255.255 /*AVM*/
deny udp any any eq 135 /*AVM*/
deny tcp any any eq 135 /*AVM*/
deny udp any any range 137 139 /*AVM*/
deny tcp any any range 137 139 /*AVM*/
deny udp any any range 161 162 /*AVM*/
deny udp any any eq 520 /*AVM*/
deny udp any any eq 111 /*AVM*/
deny udp any any eq 22289 /*AVM*/
deny udp any any eq 1710 /*AVM*/
deny udp any any eq 1048 /*AVM*/
deny udp any any eq 158 /*AVM*/
deny udp any any eq 515 /*AVM*/'
export AVM_FIREWALL_RULESTABLE_HO='reject ip any 242.0.0.0 255.0.0.0 /*AVM*/
deny ip any host 255.255.255.255 /*AVM*/
reject ip any 169.254.0.0 255.255.0.0 /*AVM*/
reject udp any any eq 135 /*AVM*/
reject tcp any any eq 135 /*AVM*/
reject udp any any range 137 139 /*AVM*/
reject tcp any any range 137 139 /*AVM*/
reject udp any any range 161 162 /*AVM*/
reject udp any any eq 520 /*AVM*/
reject udp any any eq 111 /*AVM*/
reject udp any any eq 22289 /*AVM*/
reject udp any any eq 1710 /*AVM*/
reject udp any any eq 1048 /*AVM*/
reject udp any any eq 158 /*AVM*/
reject udp any any eq 515 /*AVM*/
reject icmp any 149.1.1.0 255.255.255.0 /*AVM*/'
export AVM_FIREWALL_POLICY_LI='permit '
export AVM_FIREWALL_POLICY_HO='permit '
Das erstaunliche ist, dass ich seit vorgestern nichts mehr an der Fritz!Box gemacht habe - und da waren sie noch da.
Firefox meldet jedoch einen Fehler:
Code:
Fehler: document.getElementById(tmpid) is null
Quelldatei: http://fritz.box:81/cgi-bin/pkgconf.cgi?pkg=avm-firewall
Zeile: 399
ar7.cfg - Auszug
Code:
ar7cfg {
name = "eth0";
dhcp = no;
ipaddr = 192.168.0.1;
netmask = 255.255.255.0;
dstipaddr = 0.0.0.0;
dhcpenabled = no;
dhcpstart = 192.168.0.20;
dhcpend = 192.168.0.200;
} {
name = "eth0:0";
dhcp = no;
ipaddr = 169.254.1.1;
netmask = 255.255.0.0;
dstipaddr = 0.0.0.0;
dhcpenabled = yes;
dhcpstart = 0.0.0.0;
dhcpend = 0.0.0.0;
} {
name = "usbrndis";
dhcp = no;
ipaddr = 192.168.179.1;
netmask = 255.255.255.0;
dstipaddr = 0.0.0.0;
dhcpenabled = yes;
dhcpstart = 0.0.0.0;
dhcpend = 0.0.0.0;
} {
name = "wlan";
dhcp = no;
ipaddr = 192.168.182.1;
netmask = 255.255.255.0;
dstipaddr = 0.0.0.0;
interfaces = "tiwlan0", "wdsup0", "wdsdw0", "wdsdw1",
"wdsdw2", "wdsdw3";
dhcpenabled = yes;
dhcpstart = 0.0.0.0;
dhcpend = 0.0.0.0;
}
brinterfaces {
name = "lan";
dhcp = no;
ipaddr = 192.168.0.1;
netmask = 255.255.255.0;
dstipaddr = 0.0.0.0;
interfaces = "eth0", "usbrndis", "tiwlan0", "wdsup0",
"wdsdw0", "wdsdw1", "wdsdw2", "wdsdw3";
dhcpenabled = no;
dhcpstart = 192.168.0.20;
dhcpend = 192.168.0.200;
} {
name = "lan:0";
dhcp = no;
ipaddr = 169.254.1.1;
netmask = 255.255.0.0;
dstipaddr = 0.0.0.0;
dhcpenabled = yes;
dhcpstart = 0.0.0.0;
dhcpend = 0.0.0.0;
}
dslinterface {
name = "dsl";
dhcp = no;
ipaddr = 169.254.2.1;
netmask = 255.255.255.255;
dstipaddr = 169.254.2.1;
dhcpenabled = yes;
dhcpstart = 0.0.0.0;
dhcpend = 0.0.0.0;
}
dslinterface_metric = 2;
ipbridge {
enabled = no;
}
pppoefw {
interfaces = "usbrndis", "eth0", "wlan", "lan";
nofirewall = yes;
ipnetbiosfilter = yes;
dnsfilter_for_active_directory = yes;
hostuniq_filter = "";
dpconfig {
security = dpsec_host;
lowinput {
policy = "reject";
accesslist =
"permit ip any any connection outgoing-related",
"permit ip any any connection incoming-related",
"permit icmp any any";
}
lowoutput {
policy = "permit";
}
highinput {
policy = "permit";
}
highoutput {
policy = "permit";
accesslist =
"reject ip any 242.0.0.0 255.0.0.0",
"deny ip any host 255.255.255.255",
"reject ip any 169.254.0.0 255.255.0.0",
"reject udp any any range 161 162",
"reject udp any any eq 111";
}
shaper = "globalshaper";
}
}
budget {
Enabled = no;
Period = 2;
VolumeLow = 0;
VolumeHigh = 0;
ConnectionTime = 0;
WarnOnly = yes;
}
vccs {
VPI = 1;
VCI = 32;
traffic_class = atm_traffic_class_UBR;
pcr = 0;
scr = 0;
priority = 0;
dsl_encap = dslencap_ether;
ipbridgeing = no;
ipbridgeing_igmp = no;
pppoeforwarding = no;
connections = "internet", "voip";
}
mcupstream = "internet";
voip_forwardrules = "udp 0.0.0.0:5060 0.0.0.0:5060",
"tcp 0.0.0.0:5060 0.0.0.0:5060",
"udp 0.0.0.0:7078+32 0.0.0.0:7078";
tr069_forwardrules = "tcp 0.0.0.0:8089 0.0.0.0:8089";
dslifaces {
enabled = yes;
name = "internet";
dsl_encap = dslencap_inherit;
dslinterfacename = "dsl";
no_masquerading = no;
no_firewall = no;
pppoevlanauto = no;
pppoevlanauto_startwithvlan = no;
ppptarget = "internet";
etherencapcfg {
use_dhcp = yes;
ipaddr = 0.0.0.0;
netmask = 0.0.0.0;
gateway = 0.0.0.0;
dns1 = 212.113.0.3;
dns2 = 83.169.185.33;
mtu = 0;
}
is_mcupstream = yes;
stay_always_online = yes;
only_route_when_connected = no;
redial_delay_after_auth_failure = 1m;
redial_limit = 3;
redial_after_limit_reached = 1h;
redial_after_limit_reached_variance = 5m;
redial_delay_after_low_error = 10s;
routes_only_for_local = no;
ripv2receiver_enabled = no;
dsldpconfig {
security = dpsec_firewall;
lowinput {
policy = "permit";
accesslist =
"deny ip any 242.0.0.0 255.0.0.0",
"deny ip any host 255.255.255.255",
"deny udp any any eq 135",
"deny tcp any any eq 135",
"deny udp any any range 137 139",
"deny tcp any any range 137 139",
"deny udp any any range 161 162",
"deny udp any any eq 520",
"deny udp any any eq 111",
"deny udp any any eq 22289",
"deny udp any any eq 1710",
"deny udp any any eq 1048",
"deny udp any any eq 158",
"deny udp any any eq 515";
}
lowoutput {
policy = "permit";
}
highinput {
policy = "permit";
}
highoutput {
policy = "permit";
accesslist =
"reject ip any 242.0.0.0 255.0.0.0",
"deny ip any host 255.255.255.255",
"reject ip any 169.254.0.0 255.255.0.0",
"reject udp any any eq 135",
"reject tcp any any eq 135",
"reject udp any any range 137 139",
"reject tcp any any range 137 139",
"reject udp any any range 161 162",
"reject udp any any eq 520",
"reject udp any any eq 111",
"reject udp any any eq 22289",
"reject udp any any eq 1710",
"reject udp any any eq 1048",
"reject udp any any eq 158",
"reject udp any any eq 515",
"reject icmp any 149.1.1.0 255.255.255.0";
}
forwardrules = "tcp 0.0.0.0:499 0.0.0.0:499 0",
"udp 0.0.0.0:5060 0.0.0.0:5060";
shaper = "globalshaper";
}
} {
enabled = yes;
name = "voip";
dsl_encap = dslencap_inherit;
dslinterfacename = "dsl";
no_masquerading = no;
no_firewall = no;
pppoevlanauto = no;
pppoevlanauto_startwithvlan = no;
ppptarget = "voip";
etherencapcfg {
use_dhcp = yes;
ipaddr = 0.0.0.0;
netmask = 0.0.0.0;
gateway = 0.0.0.0;
dns1 = 0.0.0.0;
dns2 = 0.0.0.0;
mtu = 0;
}
is_mcupstream = no;
stay_always_online = yes;
only_route_when_connected = no;
redial_delay_after_auth_failure = 1m;
redial_limit = 3;
redial_after_limit_reached = 1h;
redial_after_limit_reached_variance = 5m;
redial_delay_after_low_error = 10s;
routes_only_for_local = no;
tcclassroutes = "sipdns", "sip", "rtp";
ripv2receiver_enabled = no;
dsldpconfig {
security = dpsec_firewall;
lowinput {
policy = "permit";
accesslist = "permit udp any any",
"permit icmp any any",
"deny ip any host 255.255.255.255",
"reject ip any any";
}
lowoutput {
policy = "permit";
}
highinput {
policy = "permit";
}
highoutput {
policy = "permit";
accesslist = "permit udp any any",
"reject ip any any";
}
forwardrules = "udp 0.0.0.0:5060 0.0.0.0:5060";
shaper = "globalshaper";
}
}
targets {
type = pppcfg_target_internet;
name = "internet";
only_crypt_auth = no;
local {
Grüße
smileyman