hsvt Posted August 21, 2024 Posted August 21, 2024 Как решили проблему с Error while getLastDumpDateEx: 308 Permanent Redirect at /opt/zapret/Zapret.pm line 31. ? Пробовал менять на https, но тогда вот так: Error while getLastDumpDateEx: 503 Service Unavailable at Zapret.pm line 32. Retrying... Error while getLastDumpDateEx: 502 Bad Gateway at Zapret.pm line 32. Retrying... Error while getLastDumpDateEx: 502 Bad Gateway at Zapret.pm line 32. Error while getLastDumpDateEx: 500 Can't connect to vigruzki.rkn.gov.ru:443 (certificate verify failed) at /opt/zapret/Zapret.pm line 32. Retrying... Error while getLastDumpDateEx: 500 Can't connect to vigruzki.rkn.gov.ru:443 (certificate verify failed) at /opt/zapret/Zapret.pm line 32. Retrying... Error while getLastDumpDateEx: 500 Can't connect to vigruzki.rkn.gov.ru:443 (certificate verify failed) at /opt/zapret/Zapret.pm line 32. Error while getLastDumpDateEx: 500 Can't connect to vigruzki.rkn.gov.ru:443 at /opt/zapret/Zapret.pm line 32. Retrying... Error while getLastDumpDateEx: 500 Can't connect to vigruzki.rkn.gov.ru:443 at /opt/zapret/Zapret.pm line 32. Retrying... Error while getLastDumpDateEx: 500 Can't connect to vigruzki.rkn.gov.ru:443 at /opt/zapret/Zapret.pm line 32. Вставить ник Quote
myth Posted August 21, 2024 Posted August 21, 2024 Цитата (certificate verify failed) грузи цепочку сертификатов в систему или отключай проверку https там и должно быть Вставить ник Quote
dee Posted August 22, 2024 Posted August 22, 2024 думаю так : my $self={ service => SOAP::Lite->new(proxy => $wsdl, ns => $ns, ssl_opts => [ SSL_verify_mode => 0 ]) }; Вставить ник Quote
AN111 Posted August 22, 2024 Posted August 22, 2024 22 hours ago, hsvt said: Как решили проблему с Error while getLastDumpDateEx: 308 Permanent Redirect at /opt/zapret/Zapret.pm line 31. ? Исходные рецепты пару страниц назад. у меня работает так: zapret.conf --- [API] -url = 'http://vigruzki.rkn.gov.ru/services/OperatorRequest/?wsdl' +url = 'https://vigruzki.rkn.gov.ru/services/OperatorRequest/?wsdl' --- Zapret.pm --- use SOAP::Lite; +$ENV{PERL_LWP_SSL_VERIFY_HOSTNAME}=0; service => SOAP::Lite->new(proxy => $wsdl, ns => $ns) }; bless $self, $class; + my $transport = $self->{service}->transport; + $transport->ssl_opts(SSL_verify_mode => 0x00); return $self; --- Вставить ник Quote
admf Posted August 22, 2024 Posted August 22, 2024 А не кто не модифицировал скрипт Zapret.pl на получение выгрузки по логину и паролю? Вставить ник Quote
asy Posted August 22, 2024 Posted August 22, 2024 Quote Удалил не глядя вообще все переводы строк и табуляции Дело оказалось вот в чём. По умолчанию openssl для текстовых документов преобразует 0A в 0D 0A в момент подписывания. Зачем - не знаю. Сервис Роскомнадзора раньше это устравивало, теперь перестало. Можно в вызов openssl добавить ключик "-binary" Вставить ник Quote
Margulis Posted October 14, 2024 Posted October 14, 2024 (edited) Извините, а как применить этот патч? Вставляю в файл, делаю git apply, и получаю: "fatal: corrupt patch at line 16". Это последняя строка, которая #endif. diff --git a/lib/librte_eal/linuxapp/kni/compat.h b/lib/librte_eal/linuxapp/kni/compat.h index 3f8c0bc..6a6968d 100644 --- a/lib/librte_eal/linuxapp/kni/compat.h +++ b/lib/librte_eal/linuxapp/kni/compat.h @@ -101,6 +101,11 @@ #undef NET_NAME_UNKNOWN #endif +#if (defined(RHEL_RELEASE_CODE) && \ + (RHEL_RELEASE_CODE >= RHEL_RELEASE_VERSION(7, 5))) +#define ndo_change_mtu ndo_change_mtu_rh74 +#endif + #if LINUX_VERSION_CODE >= KERNEL_VERSION(4, 11, 0) #define HAVE_SIGNAL_FUNCTIONS_OWN_HEADER #endif Edited October 14, 2024 by Margulis Вставить ник Quote
nikora27 Posted October 31, 2024 Posted October 31, 2024 Error while getLastDumpDateEx: 503 service unavailable at Zapret.pm line 36. Коллеги подскажите, кто-то решил эту проблему? была ошибка 500 теперь стала 503 и не можем победить. Вставить ник Quote
Kato Posted November 20, 2024 Posted November 20, 2024 (edited) Подскажите, пожалуйста, я может чего-то не понимаю но как должен работать inline режим? У меня сейчас в сервер заходит два интерфейса во влане 1 и 2 без тэга. Во влане 1 есть устройство с айпи. Я включаю extFilter и должен по идее пинговать устройство во влане 1 устройством во влане 2 прозрачно проходя через extFilter если там нет запреток. Причём extFilter работает, пакеты на портах показывает, ошибок вообще нет. Но как будто бридж не включается. [port 0] queues = 0,1;1,1 type = network mapto = 1 [port 1] queues = 0,2;1,2 type = subscriber mapto = 0 Скрытый текст ===================== Infos for port 0 ===================== MAC address: 00:50:56:B2:AB:68 Link status: up Link speed: 10000 Mbps Link duplex: full-duplex Promiscuous mode: enabled Allmulticast mode: disabled VLAN offload: strip off filter off qinq(extend) off extfilter> extfilter> show port info 1 show port info 1 ===================== Infos for port 1 ===================== MAC address: 00:50:56:B2:85:7E Link status: up Link speed: 10000 Mbps Link duplex: full-duplex Promiscuous mode: enabled Allmulticast mode: disabled VLAN offload: strip off filter off qinq(extend) off extfilter> show port xstats 0 show port xstats 0 ===== NIC extended statistics for port 0 rx_good_packets: 27 tx_good_packets: 2 rx_good_bytes: 1620 tx_good_bytes: 120 rx_errors: 0 tx_errors: 0 rx_mbuf_allocation_errors: 0 rx_q0packets: 27 rx_q0bytes: 1620 rx_q0errors: 0 rx_q1packets: 0 rx_q1bytes: 0 rx_q1errors: 0 tx_q0packets: 0 tx_q0bytes: 0 tx_q1packets: 0 tx_q1bytes: 0 tx_q2packets: 2 tx_q2bytes: 120 extfilter> extfilter> show port xstats 1 show port xstats 1 ===== NIC extended statistics for port 1 rx_good_packets: 2 tx_good_packets: 30 rx_good_bytes: 120 tx_good_bytes: 1800 rx_errors: 0 tx_errors: 0 rx_mbuf_allocation_errors: 0 rx_q0packets: 2 rx_q0bytes: 120 rx_q0errors: 0 rx_q1packets: 0 rx_q1bytes: 0 rx_q1errors: 0 tx_q0packets: 0 tx_q0bytes: 0 tx_q1packets: 30 tx_q1bytes: 1800 tx_q2packets: 0 tx_q2bytes: 0 extfilter> Edited November 20, 2024 by Kato Вставить ник Quote
myth Posted November 22, 2024 Posted November 22, 2024 Цитата queues = 0,1;1,1 2 очереди на одно ядро? Мб потому и не работает Вставить ник Quote
Kato Posted November 22, 2024 Posted November 22, 2024 (edited) 1 час назад, myth сказал: 2 очереди на одно ядро? Мб потому и не работает Если сделать по одной очереди то результат тот же. Скрытый текст 2024-11-22 12:45:42.455 [4755] Debug Application - DPDK command line: extFilter 2024-11-22 12:45:42.455 [4755] Debug Application - DPDK command line: -n 2024-11-22 12:45:42.455 [4755] Debug Application - DPDK command line: 2 2024-11-22 12:45:42.455 [4755] Debug Application - DPDK command line: -c 2024-11-22 12:45:42.455 [4755] Debug Application - DPDK command line: 0x07 2024-11-22 12:45:42.455 [4755] Debug Application - DPDK command line: --master-lcore 2024-11-22 12:45:42.455 [4755] Debug Application - DPDK command line: 0 2024-11-22 12:45:42.797 [4755] Information ACL - Memory usage before acl read: realmem 10516 peakrealmem: 16424 curVirtMem: 1645508 peakVirtMem: 3198768 2024-11-22 12:45:42.797 [4755] Information ACL - Building ACL from file /usr/local/etc/extfilter/hosts 2024-11-22 12:45:42.797 [4755] Information ACL - Used 128 bytes of memory for acl4 rules (2 entries) 2024-11-22 12:45:42.797 [4755] Information ACL - Used 0 bytes of memory for acl6 rules (0 entries) 2024-11-22 12:45:42.797 [4755] Information ACL - Memory usage after acl read: realmem 10516 peakrealmem: 16424 curVirtMem: 1645508 peakVirtMem: 3198768 2024-11-22 12:45:42.797 [4755] Information ACL - Memory usage bedore acl setup: realmem 10516 peakrealmem: 16424 curVirtMem: 1645508 peakVirtMem: 3198768 2024-11-22 12:45:42.797 [4755] Information ACL - Memory usage after acl setup: realmem 10524 peakrealmem: 16424 curVirtMem: 1645508 peakVirtMem: 3198768 2024-11-22 12:45:42.797 [4755] Information TriesControl - Loaded 1 lines from the domains file '/usr/local/etc/extfilter/domains' 2024-11-22 12:45:42.797 [4755] Information TriesControl - Loaded 0 lines from the urls file '/usr/local/etc/extfilter/urls' 2024-11-22 12:45:42.798 [4755] Information TriesControl - URLS: #keys 1, #nodes 2 2024-11-22 12:45:42.798 [4755] Information TriesControl - Set active trie in the slot 0 2024-11-22 12:45:42.798 [4755] Information TriesControl - Loaded 0 lines from the domains file '/usr/local/etc/extfilter/ssl_host' 2024-11-22 12:45:42.798 [4755] Information Application - Setting mbuf size to 16384 2024-11-22 12:45:42.804 [4755] Information Application - Allocated mbuf pool (16384 entries) on socket 0 2024-11-22 12:45:42.804 [4755] Information Application - Set number of entries of the sender buffer to 8192 2024-11-22 12:45:42.808 [4755] Information Application - Port 0 creating queues: rx queue=1, tx queue=3 2024-11-22 12:45:42.808 [4755] Information Application - port=0 tx_queueid=0 nb_txd=512 core=0 2024-11-22 12:45:42.808 [4755] Information Application - port=0 rx_queueid=0 nb_rxd=256 core=1 2024-11-22 12:45:42.808 [4755] Information Application - port=0 tx_queueid=1 nb_txd=512 core=1 2024-11-22 12:45:42.808 [4755] Information Application - port=0 tx_queueid=2 nb_txd=512 core=2 2024-11-22 12:45:42.809 [4755] Information Application - Port 0 MAC: 00:50:56:b2:ab:68 2024-11-22 12:45:42.809 [4755] Information Application - Port 1 creating queues: rx queue=1, tx queue=3 2024-11-22 12:45:42.809 [4755] Information Application - port=1 tx_queueid=0 nb_txd=512 core=0 2024-11-22 12:45:42.809 [4755] Information Application - port=1 tx_queueid=1 nb_txd=512 core=1 2024-11-22 12:45:42.809 [4755] Information Application - port=1 rx_queueid=0 nb_rxd=256 core=2 2024-11-22 12:45:42.809 [4755] Information Application - port=1 tx_queueid=2 nb_txd=512 core=2 2024-11-22 12:45:42.810 [4755] Information Application - Port 1 MAC: 00:50:56:b2:85:7e 2024-11-22 12:45:42.810 [4755] Information Application - Create pool 'DPIHTTPPool' for the http dissector with number of entries: 100000, element size 960 size: 96000000 bytes 2024-11-22 12:45:42.822 [4755] Information Application - Create pool 'DPISSLPool' for the ssl dissector with number of entries: 170000, element size 320 size: 54400000 bytes 2024-11-22 12:45:42.841 [4755] Information Application - Allocating 224000000 bytes (500000 entries) for ipv4 flow pool 2024-11-22 12:45:42.898 [4755] Information Application - Allocating 8960000 bytes (20000 entries) for ipv6 flow pool 2024-11-22 12:45:42.901 [4755] Information FlowStorageIPV4 - Allocate 1500000 bytes (93750 entries, element size 16) for flow hash ipv4 2024-11-22 12:45:42.901 [4755] Information FlowStorageIPV4 - Allocating 750000 bytes (93750 entries) for ipv4_flows 2024-11-22 12:45:42.903 [4755] Information FlowStorageIPV4 - Allocate 1500000 bytes (93750 entries, element size 16) for flow hash ipv4 2024-11-22 12:45:42.903 [4755] Information FlowStorageIPV4 - Allocating 750000 bytes (93750 entries) for ipv4_flows 2024-11-22 12:45:42.905 [4755] Information FlowStorageIPV4 - Allocate 1500000 bytes (93750 entries, element size 16) for flow hash ipv4 2024-11-22 12:45:42.905 [4755] Information FlowStorageIPV4 - Allocating 750000 bytes (93750 entries) for ipv4_flows 2024-11-22 12:45:42.907 [4755] Information FlowStorageIPV4 - Allocate 1500000 bytes (93750 entries, element size 16) for flow hash ipv4 2024-11-22 12:45:42.907 [4755] Information FlowStorageIPV4 - Allocating 750000 bytes (93750 entries) for ipv4_flows 2024-11-22 12:45:42.909 [4755] Information FlowStorageIPV6 - Allocate 360000 bytes (7500 entries, element size 48) for flow hash ipv6 2024-11-22 12:45:42.909 [4755] Information FlowStorageIPV6 - Allocating 60000 bytes (7500 entries) for ipv6_flows 2024-11-22 12:45:42.909 [4755] Information FlowStorageIPV6 - Allocate 360000 bytes (7500 entries, element size 48) for flow hash ipv6 2024-11-22 12:45:42.909 [4755] Information FlowStorageIPV6 - Allocating 60000 bytes (7500 entries) for ipv6_flows 2024-11-22 12:45:42.909 [4755] Information FlowStorageIPV4 - Allocate 1500000 bytes (93750 entries, element size 16) for flow hash ipv4 2024-11-22 12:45:42.909 [4755] Information FlowStorageIPV4 - Allocating 750000 bytes (93750 entries) for ipv4_flows 2024-11-22 12:45:42.911 [4755] Information FlowStorageIPV4 - Allocate 1500000 bytes (93750 entries, element size 16) for flow hash ipv4 2024-11-22 12:45:42.911 [4755] Information FlowStorageIPV4 - Allocating 750000 bytes (93750 entries) for ipv4_flows 2024-11-22 12:45:42.913 [4755] Information FlowStorageIPV4 - Allocate 1500000 bytes (93750 entries, element size 16) for flow hash ipv4 2024-11-22 12:45:42.913 [4755] Information FlowStorageIPV4 - Allocating 750000 bytes (93750 entries) for ipv4_flows 2024-11-22 12:45:42.915 [4755] Information FlowStorageIPV4 - Allocate 1500000 bytes (93750 entries, element size 16) for flow hash ipv4 2024-11-22 12:45:42.915 [4755] Information FlowStorageIPV4 - Allocating 750000 bytes (93750 entries) for ipv4_flows 2024-11-22 12:45:42.917 [4755] Information FlowStorageIPV6 - Allocate 360000 bytes (7500 entries, element size 48) for flow hash ipv6 2024-11-22 12:45:42.917 [4755] Information FlowStorageIPV6 - Allocating 60000 bytes (7500 entries) for ipv6_flows 2024-11-22 12:45:42.918 [4755] Information FlowStorageIPV6 - Allocate 360000 bytes (7500 entries, element size 48) for flow hash ipv6 2024-11-22 12:45:42.918 [4755] Information FlowStorageIPV6 - Allocating 60000 bytes (7500 entries) for ipv6_flows 2024-11-22 12:45:42.918 [4755] Debug Application - Preparing thread 'WorkerThrd_0' 2024-11-22 12:45:42.918 [4755] Debug Application - Preparing thread 'WorkerThrd_1' 2024-11-22 12:45:42.918 [4755] Information WorkerThrd_0 - Output port for the worker 0 is 1 (tx_queue_id 1) n_tx_port 2 2024-11-22 12:45:42.918 [4755] Debug WorkerThrd_0 - Starting bridge working thread on core 1 2024-11-22 12:45:42.918 [4755] Information WorkerThrd_0 - -- lcoreid=1 portid=0 rxqueueid=0 2024-11-22 12:45:42.918 [4755] Information WorkerThrd_1 - Output port for the worker 1 is 0 (tx_queue_id 2) n_tx_port 2 2024-11-22 12:45:42.918 [4755] Debug WorkerThrd_1 - Starting bridge working thread on core 2 2024-11-22 12:45:42.918 [4755] Debug Application - Starting statistic task... 2024-11-22 12:45:42.918 [4755] Debug ReloadTask - Starting reload task... 2024-11-22 12:45:42.918 [4755] Information WorkerThrd_1 - -- lcoreid=2 portid=1 rxqueueid=0 2024-11-22 12:45:42.918 [4755] Debug CmdLineTask - Running CmdLineTask... 2024-11-22 12:50:42.918 [4755] Information Application - Port 0 input packets 51, input errors: 0, mbuf errors: 0, missed packets: 0 2024-11-22 12:50:42.919 [4755] Information Application - Port 1 input packets 2, input errors: 0, mbuf errors: 0, missed packets: 0 2024-11-22 12:50:42.919 [4755] Information Application - Worker thread on core 1 statistics: 2024-11-22 12:50:42.919 [4755] Information Application - Thread seen packets: 51, IP packets: 0 (IPv4 packets: 0, IPv6 packets: 0), seen bytes: 0, Average packet size: 0 bytes, Traffic throughput: 0.17 pps 2024-11-22 12:50:42.919 [4755] Information Application - Thread IPv4 fragments: 0, IPv6 fragments: 0, IPv4 short packets: 0 2024-11-22 12:50:42.919 [4755] Information Application - Thread matched by ip/port: 0, ssl SNI: 0, ssl/ip: 0, http IPv4: 0, http IPv6: 0 2024-11-22 12:50:42.919 [4755] Information Application - Thread redirected blocked http IPv4: 0, redirected http IPv6: 0, sended forbidden IPv4: 0, sended forbidden IPv6: 0, rst sended IPv4: 0, rst sended IPv6: 0 2024-11-22 12:50:42.919 [4755] Information Application - Worker thread on core 2 statistics: 2024-11-22 12:50:42.919 [4755] Information Application - Thread seen packets: 2, IP packets: 0 (IPv4 packets: 0, IPv6 packets: 0), seen bytes: 0, Average packet size: 0 bytes, Traffic throughput: 0.01 pps 2024-11-22 12:50:42.919 [4755] Information Application - Thread IPv4 fragments: 0, IPv6 fragments: 0, IPv4 short packets: 0 2024-11-22 12:50:42.919 [4755] Information Application - Thread matched by ip/port: 0, ssl SNI: 0, ssl/ip: 0, http IPv4: 0, http IPv6: 0 2024-11-22 12:50:42.919 [4755] Information Application - Thread redirected blocked http IPv4: 0, redirected http IPv6: 0, sended forbidden IPv4: 0, sended forbidden IPv6: 0, rst sended IPv4: 0, rst sended IPv6: 0 2024-11-22 12:50:42.919 [4755] Information Application - All worker threads seen packets: 53, IP packets: 0 (IPv4 packets: 0, IPv6 packets: 0), seen bytes: 0, traffic throughtput: 0.18 pps 2024-11-22 12:50:42.919 [4755] Information Application - All worker IPv4 fragments: 0, IPv6 fragments: 0, IPv4 short packets: 0 2024-11-22 12:50:42.919 [4755] Information Application - All worker threads matched by ip/port: 0, matched by ssl SNI: 0, matched by ssl/ip: 0, matched by HTTP: 0 2024-11-22 12:50:42.919 [4755] Information Application - All worker threads redirected blocked http: 0, sended forbidden IPv4: 0, sended forbidden IPv6: 0, rst sended IPv4: 0, rst sended IPv6: 0 Edited November 22, 2024 by Kato Вставить ник Quote
myth Posted November 22, 2024 Posted November 22, 2024 А вход с выходом не перепутан? Вставить ник Quote
Kato Posted November 23, 2024 Posted November 23, 2024 (edited) В 22.11.2024 в 19:40, myth сказал: А вход с выходом не перепутан? Судя по макам - нет. Но как это работает? это же бридж. Или не бридж? Я думал бридж это когда всё прозрачно. Как в режиме бриджа оно понимает кто сабскрайбер а кто сеть? Edited November 23, 2024 by Kato Вставить ник Quote
myth Posted November 24, 2024 Posted November 24, 2024 GET запросы будут обрабатываться только с subscriber порта. В остальном должен быть бридж show port Stats 0 что скажет? Вставить ник Quote
Kato Posted November 25, 2024 Posted November 25, 2024 В 24.11.2024 в 09:30, myth сказал: GET запросы будут обрабатываться только с subscriber порта. В остальном должен быть бридж show port Stats 0 что скажет? Скрытый текст extfilter> show port stats 0 show port stats 0 ======================= NIC statistics for port 0 ======================= RX-packets: 7 RX-errors: 0 RX-bytes: 420 RX-nombuf: 0 RX-missed: 0 TX-packets: 28 TX-errors: 0 TX-bytes: 1680 Stats reg 0 RX-packets: 7 RX-errors: 0 RX-bytes: 420 Stats reg 1 RX-packets: 0 RX-errors: 0 RX-bytes: 0 Stats reg 2 RX-packets: 0 RX-errors: 0 RX-bytes: 0 Stats reg 3 RX-packets: 0 RX-errors: 0 RX-bytes: 0 Stats reg 4 RX-packets: 0 RX-errors: 0 RX-bytes: 0 Stats reg 5 RX-packets: 0 RX-errors: 0 RX-bytes: 0 Stats reg 6 RX-packets: 0 RX-errors: 0 RX-bytes: 0 Stats reg 7 RX-packets: 0 RX-errors: 0 RX-bytes: 0 Stats reg 8 RX-packets: 0 RX-errors: 0 RX-bytes: 0 Stats reg 9 RX-packets: 0 RX-errors: 0 RX-bytes: 0 Stats reg 10 RX-packets: 0 RX-errors: 0 RX-bytes: 0 Stats reg 11 RX-packets: 0 RX-errors: 0 RX-bytes: 0 Stats reg 12 RX-packets: 0 RX-errors: 0 RX-bytes: 0 Stats reg 13 RX-packets: 0 RX-errors: 0 RX-bytes: 0 Stats reg 14 RX-packets: 0 RX-errors: 0 RX-bytes: 0 Stats reg 15 RX-packets: 0 RX-errors: 0 RX-bytes: 0 Stats reg 0 TX-packets: 0 TX-bytes: 0 Stats reg 1 TX-packets: 0 TX-bytes: 0 Stats reg 2 TX-packets: 28 TX-bytes: 1680 Stats reg 3 TX-packets: 0 TX-bytes: 0 Stats reg 4 TX-packets: 0 TX-bytes: 0 Stats reg 5 TX-packets: 0 TX-bytes: 0 Stats reg 6 TX-packets: 0 TX-bytes: 0 Stats reg 7 TX-packets: 0 TX-bytes: 0 Stats reg 8 TX-packets: 0 TX-bytes: 0 Stats reg 9 TX-packets: 0 TX-bytes: 0 Stats reg 10 TX-packets: 0 TX-bytes: 0 Stats reg 11 TX-packets: 0 TX-bytes: 0 Stats reg 12 TX-packets: 0 TX-bytes: 0 Stats reg 13 TX-packets: 0 TX-bytes: 0 Stats reg 14 TX-packets: 0 TX-bytes: 0 Stats reg 15 TX-packets: 0 TX-bytes: 0 ===================================================================== Вставить ник Quote
myth Posted November 26, 2024 Posted November 26, 2024 missed 0. Всё, что в фильтр попало, всё прошло дальше. vlan offload может отключить попробовать Цитата Во влане 1 есть устройство с айпи. Я включаю extFilter и должен по идее пинговать устройство во влане 1 устройством во влане 2 прозрачно проходя через extFilter если там нет запреток. и я не до конца понял что это значит. Бриджа между вланами тут нет. Всё прозрачно - влан1 видит влан1, влан2 видит влан2. Я бы для начала 2 компа взял и на столе наладил между ними связь через фильтр, чтобы исключить проблемы в настройке свитчей и прочего Вставить ник Quote
nevsik Posted December 5, 2024 Posted December 5, 2024 Добрейшего всем. Ни кто случайно не переделывал, или знает как переделать скрипт от max197616, на работу по логину/паролю? Вставить ник Quote
Piyoz Posted July 31, 2025 Posted July 31, 2025 (edited) del Edited August 20, 2025 by Piyoz del Вставить ник Quote
phisto Posted August 30, 2025 Posted August 30, 2025 (edited) extFilter установленный в разрыв не блокирует url в зависимости от того чем проверять wget или curl. При этом nfqfilter блокирует проверку и wget и curl . Пропусков всего пара на весь реестр. Debian 10.13 4.19.0-27-amd64 #1 SMP Debian 4.19.316-1 (2024-06-25) x86_64 GNU/Linux dpdk-stable-17.05.1 Poco-1.6.1 конфигурация Spoiler domainlist = /usr/local/etc/extfilter/domains urllist = /usr/local/etc/extfilter/urls ssllist = /usr/local/etc/extfilter/ssl_host hostlist = /usr/local/etc/extfilter/hosts sslips = /usr/local/etc/extfilter/ssl_ips http_redirect = true # если в конце url будет указан символ ? иди &, то после этого символа будет добавлен блокированный url: redirect_url[?|&]uri=http://... redirect_url = http://blocked.xxx.ru rst_to_server = true statistic_interval = 30 block_ssl_no_sni = false core_mask = 7 statisticsfile = /var/run/extFilter_stat cli_port = 9999 cli_address = 127.0.0.1 memory_channels = 2 answer_duplication = 2 operation_mode = inline jumbo_frames = false max_pkt_len = 9600 [port 0] type = sender mac = 00:50:56:b7:4c:17 [port 1] type = network mapto = 2 queues = 0,1 [port 2] type = subscriber mapto = 1 queues = 0,2 [dpi] scale = 1 fragmentation_ipv6_state = true fragmentation_ipv4_state = true fragmentation_ipv4_table_size = 512 fragmentation_ipv6_table_size = 512 tcp_reordering = true [logging] loggers.root.level = information loggers.root.channel = fileChannel channels.fileChannel.class = FileChannel channels.fileChannel.path = /var/log/extFilter.log channels.fileChannel.rotation = 1 M channels.fileChannel.purgeCount = 4 channels.fileChannel.archive = timestamp channels.fileChannel.formatter.class = PatternFormatter channels.fileChannel.formatter.pattern = %Y-%m-%d %H:%M:%S.%i [%P] %p %s - %t channels.fileChannel.formatter.times = local Проверяемый url http://religion.lilithezine.com/images/Suicide-01.jpg из списка urls сформированного extfilter_maker.pl Если проверять wget то результат "HTTP/1.1 200 OK". Сайт открывается. wget -q -nv -t 1 -T 5 --no-check-certificate --spider -S http://religion.lilithezine.com/images/Suicide-01.jpg Spoiler HTTP/1.1 200 OK Date: Sat, 30 Aug 2025 08:43:33 GMT Server: Apache Last-Modified: Thu, 17 Sep 2009 22:32:14 GMT Accept-Ranges: bytes Content-Length: 105214 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: image/jpeg tcpdump -i eth0 -en host 104.129.135.98 Spoiler tcpdump: verbose output suppressed, use -v[v]... for full protocol decode listening on eth0, link-type EN10MB (Ethernet), snapshot length 262144 bytes 11:48:19.668709 00:50:56:b7:2a:5e > 00:50:56:b7:4c:17, ethertype IPv4 (0x0800), length 74: 192.168.200.101.41668 > 104.129.135.98.80: Flags [S], seq 3272437593, win 64240, options [mss 1460,sackOK,TS val 2964325161 ecr 0,nop,wscale 7], length 0 11:48:19.787894 00:50:56:b7:4c:17 > 00:50:56:b7:2a:5e, ethertype IPv4 (0x0800), length 74: 104.129.135.98.80 > 192.168.200.101.41668: Flags [S.], seq 2502771987, ack 3272437594, win 65160, options [mss 1460,sackOK,TS val 1385493849 ecr 2964325161,nop,wscale 7], length 0 11:48:19.787933 00:50:56:b7:2a:5e > 00:50:56:b7:4c:17, ethertype IPv4 (0x0800), length 66: 192.168.200.101.41668 > 104.129.135.98.80: Flags [.], ack 1, win 502, options [nop,nop,TS val 2964325280 ecr 1385493849], length 0 11:48:19.788051 00:50:56:b7:2a:5e > 00:50:56:b7:4c:17, ethertype IPv4 (0x0800), length 225: 192.168.200.101.41668 > 104.129.135.98.80: Flags [P.], seq 1:160, ack 1, win 502, options [nop,nop,TS val 2964325280 ecr 1385493849], length 159: HTTP: HEAD /images/Suicide-01.jpg HTTP/1.1 11:48:19.907020 00:50:56:b7:4c:17 > 00:50:56:b7:2a:5e, ethertype IPv4 (0x0800), length 66: 104.129.135.98.80 > 192.168.200.101.41668: Flags [.], ack 160, win 508, options [nop,nop,TS val 1385493969 ecr 2964325280], length 0 11:48:19.909323 00:50:56:b7:4c:17 > 00:50:56:b7:2a:5e, ethertype IPv4 (0x0800), length 312: 104.129.135.98.80 > 192.168.200.101.41668: Flags [P.], seq 1:247, ack 160, win 508, options [nop,nop,TS val 1385493970 ecr 2964325280], length 246: HTTP: HTTP/1.1 200 OK 11:48:19.909333 00:50:56:b7:2a:5e > 00:50:56:b7:4c:17, ethertype IPv4 (0x0800), length 66: 192.168.200.101.41668 > 104.129.135.98.80: Flags [.], ack 247, win 501, options [nop,nop,TS val 2964325401 ecr 1385493970], length 0 11:48:19.912601 00:50:56:b7:2a:5e > 00:50:56:b7:4c:17, ethertype IPv4 (0x0800), length 66: 192.168.200.101.41668 > 104.129.135.98.80: Flags [F.], seq 160, ack 247, win 501, options [nop,nop,TS val 2964325405 ecr 1385493970], length 0 11:48:20.031527 00:50:56:b7:4c:17 > 00:50:56:b7:2a:5e, ethertype IPv4 (0x0800), length 66: 104.129.135.98.80 > 192.168.200.101.41668: Flags [F.], seq 247, ack 161, win 508, options [nop,nop,TS val 1385494093 ecr 2964325405], length 0 11:48:20.031549 00:50:56:b7:2a:5e > 00:50:56:b7:4c:17, ethertype IPv4 (0x0800), length 66: 192.168.200.101.41668 > 104.129.135.98.80: Flags [.], ack 248, win 501, options [nop,nop,TS val 2964325524 ecr 1385494093], length 0 А если проверять curl, то все блокируется "HTTP: HTTP/1.1 302 Moved Temporarily" curl -v http://religion.lilithezine.com/images/Suicide-01.jpg Spoiler * Trying 104.129.135.98:80... * Connected to religion.lilithezine.com (104.129.135.98) port 80 (#0) > GET /images/Suicide-01.jpg HTTP/1.1 > Host: religion.lilithezine.com > User-Agent: curl/7.74.0 > Accept: */* > * Mark bundle as not supporting multiuse < HTTP/1.1 302 Moved Temporarily < Location: http://blocked.xxx.ru < Content-Length: 0 < Connection: close < * Closing connection 0 tcpdump -i eth0 -en host 104.129.135.98 Spoiler 11:49:27.048314 00:50:56:b7:2a:5e > 00:50:56:b7:4c:17, ethertype IPv4 (0x0800), length 74: 192.168.200.101.56550 > 104.129.135.98.80: Flags [S], seq 1691620023, win 64240, options [mss 1460,sackOK,TS val 2964392540 ecr 0,nop,wscale 7], length 0 11:49:27.167550 00:50:56:b7:4c:17 > 00:50:56:b7:2a:5e, ethertype IPv4 (0x0800), length 74: 104.129.135.98.80 > 192.168.200.101.56550: Flags [S.], seq 320434066, ack 1691620024, win 65160, options [mss 1460,sackOK,TS val 1385561229 ecr 2964392540,nop,wscale 7], length 0 11:49:27.167586 00:50:56:b7:2a:5e > 00:50:56:b7:4c:17, ethertype IPv4 (0x0800), length 66: 192.168.200.101.56550 > 104.129.135.98.80: Flags [.], ack 1, win 502, options [nop,nop,TS val 2964392660 ecr 1385561229], length 0 11:49:27.167744 00:50:56:b7:2a:5e > 00:50:56:b7:4c:17, ethertype IPv4 (0x0800), length 175: 192.168.200.101.56550 > 104.129.135.98.80: Flags [P.], seq 1:110, ack 1, win 502, options [nop,nop,TS val 2964392660 ecr 1385561229], length 109: HTTP: GET /images/Suicide-01.jpg HTTP/1.1 11:49:27.167895 00:50:56:b7:4c:17 > 00:50:56:b7:2a:5e, ethertype IPv4 (0x0800), length 162: 104.129.135.98.80 > 192.168.200.101.56550: Flags [P.], seq 1:109, ack 110, win 502, length 108: HTTP: HTTP/1.1 302 Moved Temporarily 11:49:27.167909 00:50:56:b7:2a:5e > 00:50:56:b7:4c:17, ethertype IPv4 (0x0800), length 66: 192.168.200.101.56550 > 104.129.135.98.80: Flags [.], ack 109, win 502, options [nop,nop,TS val 2964392660 ecr 1385561229], length 0 11:49:27.168144 00:50:56:b7:2a:5e > 00:50:56:b7:4c:17, ethertype IPv4 (0x0800), length 66: 192.168.200.101.56550 > 104.129.135.98.80: Flags [F.], seq 110, ack 109, win 502, options [nop,nop,TS val 2964392660 ecr 1385561229], length 0 11:49:27.543488 00:50:56:b7:2a:5e > 00:50:56:b7:4c:17, ethertype IPv4 (0x0800), length 66: 192.168.200.101.56550 > 104.129.135.98.80: Flags [F.], seq 110, ack 109, win 502, options [nop,nop,TS val 2964393036 ecr 1385561229], length 0 11:49:27.927510 00:50:56:b7:2a:5e > 00:50:56:b7:4c:17, ethertype IPv4 (0x0800), length 66: 192.168.200.101.56550 > 104.129.135.98.80: Flags [F.], seq 110, ack 109, win 502, options [nop,nop,TS val 2964393420 ecr 1385561229], length 0 11:49:28.663497 00:50:56:b7:2a:5e > 00:50:56:b7:4c:17, ethertype IPv4 (0x0800), length 66: 192.168.200.101.56550 > 104.129.135.98.80: Flags [F.], seq 110, ack 109, win 502, options [nop,nop,TS val 2964394156 ecr 1385561229], length 0 11:49:30.103501 00:50:56:b7:2a:5e > 00:50:56:b7:4c:17, ethertype IPv4 (0x0800), length 66: 192.168.200.101.56550 > 104.129.135.98.80: Flags [F.], seq 110, ack 109, win 502, options [nop,nop,TS val 2964395596 ecr 1385561229], length 0 11:49:33.143498 00:50:56:b7:2a:5e > 00:50:56:b7:4c:17, ethertype IPv4 (0x0800), length 66: 192.168.200.101.56550 > 104.129.135.98.80: Flags [F.], seq 110, ack 109, win 502, options [nop,nop,TS val 2964398636 ecr 1385561229], length 0 11:49:39.031515 00:50:56:b7:2a:5e > 00:50:56:b7:4c:17, ethertype IPv4 (0x0800), length 66: 192.168.200.101.56550 > 104.129.135.98.80: Flags [F.], seq 110, ack 109, win 502, options [nop,nop,TS val 2964404524 ecr 1385561229], length 0 Это ожидаемое поведение extFilter ? Edited August 30, 2025 by phisto Вставить ник Quote
Умник Posted August 30, 2025 Posted August 30, 2025 Вы wget-ом отправляете HTTP HEAD, а curl-ом HTTP GET-запрос. Может быть это как-то влияет? HEAD-запросы вообще должны блокироваться? Вставить ник Quote
phisto Posted August 30, 2025 Posted August 30, 2025 (edited) Quote Вы wget-ом отправляете HTTP HEAD, а curl-ом HTTP GET-запрос. Может быть это как-то влияет? HEAD-запросы вообще должны блокироваться? Я вот и не знаю если честно. nfqfilter же блокирует. Ключи к wget взяты были из скрипта для проверки блокировок, который в этой теме выкладывался не однократно. Я его без изменений запускал для сравнения nfqfilter и для extFilter. Неужели никто до меня с подобным не сталкивался ? Edited August 30, 2025 by phisto Вставить ник Quote
Умник Posted August 30, 2025 Posted August 30, 2025 Если вы работаете с версией, которая собрана из этого исходного кода, то разбирается только HTTP GET. Строка 29, в которой условие с POST и HEAD, по какой-то причине закомментирована: https://github.com/max197616/extfilter/blob/d3fbde6e9bf254b7c25cc2c476388da70022c4a2/src/http.cpp#L29 Вставить ник Quote
phisto Posted August 30, 2025 Posted August 30, 2025 (edited) Похоже вы попали в точку. Почему закомментирована строчка наверное сам автор может только ответить. Возможно причина в том, что он следовал стандартам. СКАТ кстати тоже не блокирует HEAD. Исходный код взял командой "git clone https://github.com/max197616/extfilter" Есть еще какой то способ получить актуальный код ? Edited August 30, 2025 by phisto Вставить ник Quote
myth Posted September 1, 2025 Posted September 1, 2025 Уж если очень хочется, можно пропатчить самостоятельно Вставить ник Quote
.png.5d2afa2996cc6a85d0f2c09b92dd0a28.png)
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.