SecpathWeb地址、内容过滤及SQL攻击防范功能

¡º×éÍøÐèÇ󡻣º

ÒªÇó"192.168.1.100"²»¿É·ÃÎÊÍⲿµÄwww.163.com¡¢www.sohu.comÍøÖ·£¬¶øÇÒÔØÈë"123.txt"Îļþ¹ýÂ˵ôÍøÒ³ÄÚÈÝ£¬²¢½«È±Ê¡µÄSQL¹¥»÷·À·¶¿ªÆô¡£

¡ºÅäÖÃʵÀý¡»£º

1£®ÒªÇó²Î¿¼"ASPFÅäÖÃ"£¬¿ªÆô"HTTP¡¢TCP"¼ì²â£¬²¢ÔÚ"trustºÍuntrust"ÓòÖпªÆô±¨ÎÄͳ¼Æ¹¦ÄÜ¡£

2£®ÔÚϵͳÊÓͼ·Ö±ð¿ªÆôWebµØÖ·¡¢ÄÚÈݹýÂ˹¦Äܼ°SQL×¢Èë¹¥»÷·À·¶¡£

[Secpath]firewall url-filter host enable
[Secpath]firewall webdata-filter enable
[Secpath]firewall url-filter parameter enable

3£®ÔÚϵͳÊÓͼÏÂÅäÖÃÍøÖ·¹ýÂË¡£

[Secpath]firewall url-filter host add deny www.163.com

[Secpath]firewall url-filter host add deny www.sohu.com

[Secpath]dis firewall url-filter host item-all

SN Match-Times Keywords

----------------------------------------------

1 0 www.163.com

2 0 www.sohu.com

4£®ÔÚϵͳÊÓͼÏÂÅäÖÃWEBÄÚÈݹýÂË¡£

[Secpath]firewall webdata-filter load-file 123.txt

[Secpath]dis fir webdata-filter item-all

SN Match-Times Keywords

----------------------------------------------

1 0 gogo

2 0 °²È«

5£®ÔÚϵͳÊÓͼÏÂÅäÖÃȱʡµÄSQL¹¥»÷·À·¶¿ªÆô£¬Ò²¿ÉÊÖ¶¯Ìí¼Ó¡£

[Secpath]firewall url-filter parameter add-default

[Secpath]dis firewall url-filter parameter item-all

SN Match-Times Keywords

----------------------------------------------

1 0 ^select^

2 0 ^insert^

3 0 ^update^

4 0 ^delete^

5 0 ^drop^

6 0 --

7 0 "

8 0 ^exec^

9 0 %27

¡º×¢ÒâÊÂÏî¡»£º

1¡¢¿ªÆôWebµØÖ·¡¢ÄÚÈݹýÂ˹¦Äܼ°SQL×¢Èë¹¥»÷·À·¶¹¦ÄÜ֮ǰ£¬ÒªÏÈÅäÖÃASPF²ßÂÔ£¬detect http£¬detect tcp£¬²ÅÄÜʹWebµØÖ·ºÍWebÄÚÈݹýÂ˹¦ÄÜÉúЧ¡£

2¡¢ÔÚÅäÖÃWebµØÖ·¹ýÂËʱ£¬¿ÉÒÔÉèÖÃĬÈϹæÔò£¬Èç¹û¹æÔòÊÇ"permit"£¬ÔòÅäÖõĹýÂ˱íÏÊÇ"deny"£¬·´Ö®ÒàÈ»¡£

3¡¢Ä¿Ç°SECPATH²úÆ·Ö§³ÖÖÐÓ¢ÎĹýÂË£¬¶ÔÓÚÖÐÎıØÐëͨ¹ýÎļþ·½Ê½ÔØÈë¡£

4¡¢·À»ðǽ»¹ÌṩÁ˶ÔWebÖÐSQL£¨Structure Query Language£¬½á¹¹»¯²éѯÓïÑÔ£©×¢Èë¹¥»÷½øÐзÀ·¶µÄ¹¦ÄÜ¡£Ä¿Ç°È±Ê¡Çé¿öÏ£¬ÏµÍ³Ô¤¶¨ÒåÁËÒÔϹؼü×Ö£º^select^¡¢^insert^¡¢^update^¡¢^delete^¡¢^drop^¡¢--¡¢"¡¢^exec^ºÍ%27¡£

5¡¢Ä¿Ç°SECPATHϵÁвúÆ·£¬Â·ÓɺÍ͸Ã÷ģʽ¾ùÖ§³ÖÄÚÈݹýÂË¡£¶ÔÓÚweb£­filter¹æÔò£¬Ä¿Ç°¿ÉÅäÖÃ2K¸ö£¬¶ø"£ª"¿ÉÆ¥Åä0¡«4¸ö×Ö·û»ò2¸öºº×Ö¡£