support for multiple rule sets in PF

This commit is contained in:
Vadim Kurland
2008-05-30 22:00:45 +00:00
parent 2f9e82c5ba
commit 0457709b97
8 changed files with 1903 additions and 1399 deletions
+12
View File
@@ -1,3 +1,15 @@
2008-05-30 Vadim Kurland <vadim@vk.crocodile.org>
* pf.cpp (main): Like compiler for iptables, compiler for PF now
supports multiple rule sets for policy and nat. Each rule set is
translated into corresponding anchor .conf file. If some rule in
another rule set references it via action Branch, corresponding
"anchor" configuration line is generated, but if it is not
references from any rule, the anchor .conf file is still
created. Rule sets "Policy" and "NAT" are configured "main" or
"root" and placed in the main .conf file with the name of the
firewall object.
2008-05-29 Vadim Kurland <vadim@vk.crocodile.org>
* ipt.cpp (main): Compiler for iptables processes all Policy and