{"id":1098,"date":"2010-09-17T09:07:02","date_gmt":"2010-09-17T07:07:02","guid":{"rendered":"http:\/\/www.ewig-drohendes-versagen.de\/?p=1098"},"modified":"2010-09-17T09:11:31","modified_gmt":"2010-09-17T07:11:31","slug":"isa-2006-und-bidirektionaler-udp-traffic","status":"publish","type":"post","link":"https:\/\/www.ewig-drohendes-versagen.de\/?p=1098","title":{"rendered":"ISA 2006 und bidirektionaler UDP Traffic"},"content":{"rendered":"\n<!-- google_ad_section_start -->\n<p>Wenn man mal was kaputt machen will geht das ganz einfach *g<\/p>\n<p>Man definiert am ISA Server einfach mal ein UDP Protokoll OHNE es einer Firewall Regel zuzuweisen.<br \/>\n<!--more--><br \/>\nDiesem Protokoll gibt mal als Richtung einfach &#8222;nur&#8220; <em>senden<\/em> (receive) [default].<\/p>\n<p>Das sorgt daf\u00fcr das jeglicher bidirektionaler Traffic der \u00fcber den ISA mit diesem UDP Port geht NICHT mehr funktioniert.<\/p>\n<p>Und jetzt viel Spa\u00df beim suchen &#8211; weil eine FW Regel die direkt dieses Protokoll verwendet gibt es nicht. Selbst eine explizite ANY ANY Regel funktioniert nicht mehr.<\/p>\n<p>Was lernen wir daraus:<br \/>\nBidirektionaler ausgehender UDP Traffic muss immer mit der Richtung &#8222;<em>Senden Empfangen<\/em>&#8220; (Send Receive) angelegt werden, da nur dann der ISA auch die &#8222;passenden&#8220; eingehenden UDP Pakete verarbeitet.<\/p>\n<p><a href=\"http:\/\/de.wikipedia.org\/wiki\/Stateful_Packet_Inspection#Stateful_Inspection_bei_UDP-Paketen\" target=\"_blank\">Wikipedia Artikel<\/a> zu diesem Thema<\/p>\n\n<!-- google_ad_section_end -->\n","protected":false},"excerpt":{"rendered":"<p>Wenn man mal was kaputt machen will geht das ganz einfach *g Man definiert am ISA Server einfach mal ein UDP Protokoll OHNE es einer Firewall Regel zuzuweisen.<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"enabled":false},"version":2}},"categories":[16],"tags":[27],"class_list":["post-1098","post","type-post","status-publish","format-standard","hentry","category-edv-probleme","tag-isa"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/peux2-hI","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www.ewig-drohendes-versagen.de\/index.php?rest_route=\/wp\/v2\/posts\/1098","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ewig-drohendes-versagen.de\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ewig-drohendes-versagen.de\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ewig-drohendes-versagen.de\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ewig-drohendes-versagen.de\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1098"}],"version-history":[{"count":0,"href":"https:\/\/www.ewig-drohendes-versagen.de\/index.php?rest_route=\/wp\/v2\/posts\/1098\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.ewig-drohendes-versagen.de\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1098"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ewig-drohendes-versagen.de\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1098"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ewig-drohendes-versagen.de\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1098"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}