Запустив на VirtualBox старый образ с Андроид 2.3, мой Agnitum Outpost Security Suite Pro 9.1 стал выдавать запрос на создание нового правила:
Это происходило в тот момент, когда я в виртуальной машине через браузер пытался выйти в интернет.
Создание правила ни к чему не приводило — при следующей попытке выйти в инет опять появлялся запрос на создание правила.
Рекомендации из базы знаний Agnitum не помогали:
This instruction is also valid for Sun Virtual Box v3.0.8
Outpost blocks transit packets, which could prevent virtual machines from accessing the network. To allow virtual machines to access the network, create the Outpost default rules for vmware.exe and then do the following.
First, check whether your virtual machine connects to your computer via bridged mode or NAT mode. To do this:
Open the Virtual Machine Control Panel.
Click the Hardware tab.
Select Ethernet.
Under Connect to the following network one of the following options will be selected: NAT: Used to share the host’s IP address or Bridged: Connected directly to the physical network.Note:If you use NAT mode, you do not need to create additional Outpost rules. Your virtual machines should now be able to access the network.
If you use Bridged mode, create the following global rule to allow traffic from the virtual machine:
Click Settings > Network Rules > System-Wide Rules > Low-Level Rules.
Click Add and create the following rule:Where the protocol is IP
and IP type is TCP, UDP, ICMP and local address is (specify your virtual machine IP address or the subnet to which it belongs, for example, 192.168.5.0 or 192.168.5.0 with subnet mask 255.255.255.0)
Allow
Click OK to save the changes.Note: We do not recommend using dynamic addresses, as in this case you will need to create new rules on each new address. In such cases we advise to specify addresses ranges.
If your virtual machine gets its dynamic IP address via DHCP, it is necessary to create additional low-level rules:
Click Settings > Network Rules > System-Wide Rules > Low-Level Rules.
Click Add and create the following rule:Where the protocol is UDP
and remote port is 67, 68, 546, 547
and local port is 67, 68, 546, 547
Allow
Click OK to save the changes.
Помогло создание глобального правила для приложения:
Настройки -> Брандмауэр -> Сетевые правила -> Системные правила… -> Глобальные правила -> «До правил для приложений…»
Where the Protocol is UDP and Remote Address is ns1.onlime.ru (77.37.251.33) and Remote Port is DOMAIN and Direction is Outbound Allow It
и
Where the Protocol is UDP and Remote Address is ns2.onlime.ru (77.37.255.30) and Remote Port is DOMAIN and Direction is Outbound Allow It
