Download Innominate mGuard Version 5 - Innominate Security Technologies AG
Transcript
mGuard Version 5 – Firewall Logging Table of Contents 1 Disclaimer____________________________________________________________________________________ 2 2 Log Abbreviations ____________________________________________________________________________ 3 3 Firewall Traversal ____________________________________________________________________________ 5 4 Log Prefixes __________________________________________________________________________________ 7 5 4.1 Consistancy Check and TCP Flags (fw-invalid-input-…, fw-invalid-forward-…, fw-invalid-output-…) ____ 7 4.2 Remote Access Rules (fw-ssh-access-…, fw-https-access-…, fw-snmp-access-…) ___________________ 7 4.3 Port Forwarding (fw-portforwarding-…) _______________________________________________________ 7 4.4 User Firewall (ufw-…) _______________________________________________________________________ 8 4.5 Firewall, Anti-Spoofing and Connection Tracking (fw-incoming-…, fw-outgoing-…) __________________ 8 4.6 VPN Firewall (fw-vpn-<name>-in-…, fw-vpn-<name>-out-…)____________________________________ 8 4.7 SYN Flood Protection (SYN-flood) ____________________________________________________________ 9 4.8 ICMP Flood Protection (ICMP-flood) __________________________________________________________ 9 Related Documentation _____________________________________________________________________ 10 Document ID: AN205002A07-005 Page 1 of 11