mirror of
https://github.com/fwbuilder/fwbuilder
synced 2026-09-14 09:00:01 +02:00
* PIXImporterNat.cpp (buildSNATRule): import of PIX/ASA "global"
and "nat" commands works.
This commit is contained in:
Vadim Kurland
@@ -1,3 +1,8 @@
|
||||
2011-03-31 vadim <vadim@netcitadel.com>
|
||||
|
||||
* PIXImporterNat.cpp (buildSNATRule): import of PIX/ASA "global"
|
||||
and "nat" commands works.
|
||||
|
||||
2011-03-30 vadim <vadim@netcitadel.com>
|
||||
|
||||
* PIXImporterNat.cpp (buildDNATRule): import of PIX/ASA "static"
|
||||
|
||||
@@ -467,7 +467,7 @@ void Importer::newUnidirRuleSet(const string &ruleset_name,
|
||||
{
|
||||
current_ruleset = getUnidirRuleSet(ruleset_name, ruleset_type); // creates if new
|
||||
current_ruleset->created_from_line_number = getCurrentLineNumber();
|
||||
*logger << "Ruleset: " + ruleset_name + "\n";
|
||||
//*logger << "Ruleset: " + ruleset_name + "\n";
|
||||
}
|
||||
|
||||
/*
|
||||
|
||||
@@ -65,7 +65,6 @@ using namespace std;
|
||||
using namespace libfwbuilder;
|
||||
|
||||
|
||||
|
||||
PIXImporter::PIXImporter(FWObject *lib,
|
||||
std::istringstream &input,
|
||||
Logger *log,
|
||||
@@ -80,6 +79,7 @@ PIXImporter::PIXImporter(FWObject *lib,
|
||||
|
||||
PIXImporter::~PIXImporter()
|
||||
{
|
||||
global_pools.clear();
|
||||
}
|
||||
|
||||
/*
|
||||
@@ -118,12 +118,8 @@ void PIXImporter::clear()
|
||||
nat_a = "";
|
||||
nat_nm = "";
|
||||
nat_acl = "";
|
||||
global_pool_num = "";
|
||||
global_pool_interface = "";
|
||||
global_pool_start = "";
|
||||
global_pool_end = "";
|
||||
global_pool_netmask = "";
|
||||
|
||||
tmp_global_pool = GlobalPool();
|
||||
}
|
||||
|
||||
/*
|
||||
|
||||
@@ -41,6 +41,30 @@
|
||||
#include <QString>
|
||||
|
||||
|
||||
struct GlobalPool
|
||||
{
|
||||
int num;
|
||||
std::string str_num;
|
||||
std::string interface;
|
||||
std::string start;
|
||||
std::string end;
|
||||
std::string netmask;
|
||||
|
||||
GlobalPool()
|
||||
{
|
||||
num = -1;
|
||||
str_num = "";
|
||||
interface = "";
|
||||
start = "";
|
||||
end = "";
|
||||
netmask = "";
|
||||
}
|
||||
|
||||
GlobalPool& operator=(const GlobalPool &other);
|
||||
std::string toStdString();
|
||||
QString toString();
|
||||
};
|
||||
|
||||
class PIXImporter : public IOSImporter
|
||||
{
|
||||
public:
|
||||
@@ -76,11 +100,8 @@ class PIXImporter : public IOSImporter
|
||||
std::string nat_nm;
|
||||
std::string nat_acl;
|
||||
|
||||
std::string global_pool_num;
|
||||
std::string global_pool_interface;
|
||||
std::string global_pool_start;
|
||||
std::string global_pool_end;
|
||||
std::string global_pool_netmask;
|
||||
GlobalPool tmp_global_pool;
|
||||
std::map<int, std::list<GlobalPool> > global_pools;
|
||||
|
||||
PIXImporter(libfwbuilder::FWObject *lib,
|
||||
std::istringstream &input,
|
||||
@@ -91,6 +112,8 @@ class PIXImporter : public IOSImporter
|
||||
virtual void clear();
|
||||
|
||||
void clearTempVars();
|
||||
|
||||
void addGlobalPool();
|
||||
|
||||
virtual void run();
|
||||
|
||||
@@ -98,7 +121,6 @@ class PIXImporter : public IOSImporter
|
||||
void pushNATRule();
|
||||
void buildDNATRule();
|
||||
void buildSNATRule();
|
||||
|
||||
virtual void pushRule();
|
||||
|
||||
// this method actually adds interfaces to the firewall object
|
||||
|
||||
+147
-29
@@ -57,39 +57,46 @@ extern int fwbdebug;
|
||||
using namespace libfwbuilder;
|
||||
using namespace std;
|
||||
|
||||
/*
|
||||
|
||||
Variables used to build nat rules
|
||||
QString GlobalPool::toString()
|
||||
{
|
||||
QString l("number %1, interface %2, address range %3-%4, netmask %5 ");
|
||||
return l.arg(num).arg(interface.c_str())
|
||||
.arg(start.c_str()).arg(end.c_str()).arg(netmask.c_str());
|
||||
}
|
||||
|
||||
libfwbuilder::NATRule::NATRuleTypes rule_type;
|
||||
std::string prenat_interface;
|
||||
std::string postnat_interface;
|
||||
string GlobalPool::toStdString()
|
||||
{
|
||||
return toString().toStdString();
|
||||
}
|
||||
|
||||
std::string real_a;
|
||||
std::string real_nm;
|
||||
std::string mapped_a;
|
||||
std::string mapped_nm;
|
||||
std::string real_addr_acl;
|
||||
std::string mapped_port_spec;
|
||||
std::string real_port_spec;
|
||||
std::string static_max_conn;
|
||||
std::string static_max_emb_conn;
|
||||
GlobalPool& GlobalPool::operator=(const GlobalPool &other)
|
||||
{
|
||||
num = other.num;
|
||||
interface = other.interface;
|
||||
start = other.start;
|
||||
end = other.end;
|
||||
netmask = other.netmask;
|
||||
return *this;
|
||||
}
|
||||
|
||||
std::string nat_num;
|
||||
std::string nat_a;
|
||||
std::string nat_nm;
|
||||
std::string nat_acl;
|
||||
|
||||
std::string global_pool_num;
|
||||
std::string global_interface;
|
||||
*/
|
||||
void PIXImporter::addGlobalPool()
|
||||
{
|
||||
bool ok = false;
|
||||
int n;
|
||||
n = QString(tmp_global_pool.str_num.c_str()).toInt(&ok);
|
||||
if (ok)
|
||||
{
|
||||
tmp_global_pool.num = n;
|
||||
global_pools[tmp_global_pool.num].push_back(tmp_global_pool);
|
||||
*logger << "Global address pool: " + tmp_global_pool.toStdString() + "\n";
|
||||
}
|
||||
}
|
||||
|
||||
void PIXImporter::pushNATRule()
|
||||
{
|
||||
assert(current_ruleset!=NULL);
|
||||
assert(current_rule!=NULL);
|
||||
|
||||
NATRule *rule = NATRule::cast(current_rule);
|
||||
|
||||
switch (rule_type)
|
||||
{
|
||||
@@ -105,10 +112,7 @@ void PIXImporter::pushNATRule()
|
||||
assert(rule_type!=NATRule::DNAT && rule_type!=NATRule::SNAT);
|
||||
}
|
||||
|
||||
// then add it to the current ruleset
|
||||
current_ruleset->ruleset->add(current_rule);
|
||||
|
||||
addStandardImportComment(current_rule, QString::fromUtf8(rule_comment.c_str()));
|
||||
assert(current_rule!=NULL);
|
||||
|
||||
current_rule = NULL;
|
||||
rule_comment = "";
|
||||
@@ -125,6 +129,10 @@ void PIXImporter::pushNATRule()
|
||||
*/
|
||||
void PIXImporter::buildDNATRule()
|
||||
{
|
||||
*logger << "Destination translation rule (\"static\" command)\n";
|
||||
|
||||
newNATRule();
|
||||
|
||||
NATRule *rule = NATRule::cast(current_rule);
|
||||
|
||||
Interface *pre_intf = getInterfaceByLabel(prenat_interface);
|
||||
@@ -217,10 +225,120 @@ void PIXImporter::buildDNATRule()
|
||||
RuleElement *itf_o_re = rule->getItfOutb();
|
||||
assert(itf_o_re!=NULL);
|
||||
itf_o_re->addRef(pre_intf);
|
||||
|
||||
// add it to the current ruleset
|
||||
current_ruleset->ruleset->add(rule);
|
||||
addStandardImportComment(rule, QString::fromUtf8(rule_comment.c_str()));
|
||||
}
|
||||
|
||||
/*
|
||||
* SNAT rule. Using rule_type, global_pools, prenat_interface,
|
||||
* nat_num, nat_a, nat_nm, nat_acl, max_conn, max_emb_conn
|
||||
*
|
||||
* Note that there can be multiple global pools with the same number
|
||||
* and same or different interfaces. In that case we should create
|
||||
* multiple SNAT rules.
|
||||
*/
|
||||
void PIXImporter::buildSNATRule()
|
||||
{
|
||||
*logger << "Source translation rule (\"nat\" command)\n";
|
||||
|
||||
bool ok = false;
|
||||
int pool_num = QString(nat_num.c_str()).toInt(&ok);
|
||||
// Parser matches INT_CONST so it can't be anything but integer...
|
||||
assert (ok);
|
||||
|
||||
foreach(GlobalPool pool, global_pools[pool_num])
|
||||
{
|
||||
if (fwbdebug)
|
||||
{
|
||||
qDebug() << "NAT command num=" << pool_num;
|
||||
qDebug() << "nat_a=" << nat_a.c_str()
|
||||
<< "nat_nm=" << nat_nm.c_str();
|
||||
qDebug() << "Using pool " << pool.toString();
|
||||
}
|
||||
|
||||
Interface *post_intf = getInterfaceByLabel(pool.interface);
|
||||
|
||||
newNATRule();
|
||||
|
||||
NATRule *rule = NATRule::cast(current_rule);
|
||||
|
||||
Interface *pre_intf = getInterfaceByLabel(prenat_interface);
|
||||
|
||||
rule->setAction(NATRule::Translate);
|
||||
|
||||
if ( ! nat_a.empty())
|
||||
{
|
||||
src_a = nat_a;
|
||||
src_nm = nat_nm;
|
||||
|
||||
RuleElement* osrc = rule->getOSrc();
|
||||
assert(osrc!=NULL);
|
||||
FWObject *s = makeSrcObj();
|
||||
if (s) osrc->addRef( s );
|
||||
}
|
||||
|
||||
if ( ! nat_acl.empty())
|
||||
{
|
||||
UnidirectionalRuleSet *rs = all_rulesets[nat_acl];
|
||||
if (rs)
|
||||
{
|
||||
RuleElement* osrc = rule->getOSrc();
|
||||
assert(osrc!=NULL);
|
||||
|
||||
PolicyRule *policy_rule = PolicyRule::cast(
|
||||
rs->ruleset->getFirstByType(PolicyRule::TYPENAME));
|
||||
|
||||
if (policy_rule)
|
||||
{
|
||||
RuleElement *src = policy_rule->getSrc();
|
||||
for (FWObject::iterator it=src->begin(); it!=src->end(); ++it)
|
||||
{
|
||||
FWObject *o = FWReference::getObject(*it);
|
||||
osrc->addRef(o);
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
ObjectSignature sig;
|
||||
FWObject *addr = NULL;
|
||||
|
||||
if (pool.start == "interface")
|
||||
{
|
||||
addr = post_intf;
|
||||
} else
|
||||
{
|
||||
if (pool.start == pool.end)
|
||||
{
|
||||
sig.type_name = Address::TYPENAME;
|
||||
sig.address = pool.start.c_str();
|
||||
sig.netmask = pool.netmask.c_str();
|
||||
} else
|
||||
{
|
||||
sig.type_name = AddressRange::TYPENAME;
|
||||
sig.setAddressRangeStart(pool.start.c_str());
|
||||
sig.setAddressRangeEnd(pool.end.c_str());
|
||||
}
|
||||
addr = address_maker->createObject(sig);
|
||||
}
|
||||
|
||||
RuleElement* tsrc = rule->getTSrc();
|
||||
assert(tsrc!=NULL);
|
||||
if (addr) tsrc->addRef( addr );
|
||||
|
||||
RuleElement *itf_i_re = rule->getItfInb();
|
||||
assert(itf_i_re!=NULL);
|
||||
itf_i_re->addRef(post_intf);
|
||||
|
||||
RuleElement *itf_o_re = rule->getItfOutb();
|
||||
assert(itf_o_re!=NULL);
|
||||
itf_o_re->addRef(pre_intf);
|
||||
|
||||
// add it to the current ruleset
|
||||
current_ruleset->ruleset->add(rule);
|
||||
addStandardImportComment(rule, QString::fromUtf8(rule_comment.c_str()));
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
|
||||
+128
-128
@@ -493,11 +493,11 @@ void PIXCfgLexer::mLINE_COMMENT(bool _createToken) {
|
||||
}
|
||||
}
|
||||
else {
|
||||
goto _loop273;
|
||||
goto _loop275;
|
||||
}
|
||||
|
||||
}
|
||||
_loop273:;
|
||||
_loop275:;
|
||||
} // ( ... )*
|
||||
mNEWLINE(false);
|
||||
if ( _createToken && _token==ANTLR_USE_NAMESPACE(antlr)nullToken && _ttype!=ANTLR_USE_NAMESPACE(antlr)Token::SKIP ) {
|
||||
@@ -529,7 +529,7 @@ void PIXCfgLexer::mNEWLINE(bool _createToken) {
|
||||
|
||||
}
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 2317 "pix.g"
|
||||
#line 2327 "pix.g"
|
||||
newline();
|
||||
#line 535 "PIXCfgLexer.cpp"
|
||||
}
|
||||
@@ -555,11 +555,11 @@ void PIXCfgLexer::mCOLON_COMMENT(bool _createToken) {
|
||||
}
|
||||
}
|
||||
else {
|
||||
goto _loop277;
|
||||
goto _loop279;
|
||||
}
|
||||
|
||||
}
|
||||
_loop277:;
|
||||
_loop279:;
|
||||
} // ( ... )*
|
||||
mNEWLINE(false);
|
||||
if ( _createToken && _token==ANTLR_USE_NAMESPACE(antlr)nullToken && _ttype!=ANTLR_USE_NAMESPACE(antlr)Token::SKIP ) {
|
||||
@@ -653,7 +653,7 @@ void PIXCfgLexer::mWhitespace(bool _createToken) {
|
||||
}
|
||||
}
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 2312 "pix.g"
|
||||
#line 2322 "pix.g"
|
||||
_ttype = ANTLR_USE_NAMESPACE(antlr)Token::SKIP;
|
||||
#line 659 "PIXCfgLexer.cpp"
|
||||
}
|
||||
@@ -777,10 +777,10 @@ void PIXCfgLexer::mNUMBER_ADDRESS_OR_WORD(bool _createToken) {
|
||||
ANTLR_USE_NAMESPACE(std)string::size_type _saveIndex;
|
||||
|
||||
{
|
||||
bool synPredMatched338 = false;
|
||||
bool synPredMatched340 = false;
|
||||
if (((LA(1) == 0x6f /* 'o' */ ) && (LA(2) == 0x62 /* 'b' */ ) && (LA(3) == 0x6a /* 'j' */ ))) {
|
||||
int _m338 = mark();
|
||||
synPredMatched338 = true;
|
||||
int _m340 = mark();
|
||||
synPredMatched340 = true;
|
||||
inputState->guessing++;
|
||||
try {
|
||||
{
|
||||
@@ -789,12 +789,12 @@ void PIXCfgLexer::mNUMBER_ADDRESS_OR_WORD(bool _createToken) {
|
||||
}
|
||||
}
|
||||
catch (ANTLR_USE_NAMESPACE(antlr)RecognitionException& pe) {
|
||||
synPredMatched338 = false;
|
||||
synPredMatched340 = false;
|
||||
}
|
||||
rewind(_m338);
|
||||
rewind(_m340);
|
||||
inputState->guessing--;
|
||||
}
|
||||
if ( synPredMatched338 ) {
|
||||
if ( synPredMatched340 ) {
|
||||
{
|
||||
match("object");
|
||||
{
|
||||
@@ -804,7 +804,7 @@ void PIXCfgLexer::mNUMBER_ADDRESS_OR_WORD(bool _createToken) {
|
||||
match("oup");
|
||||
}
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 2369 "pix.g"
|
||||
#line 2379 "pix.g"
|
||||
_ttype = OBJECT_GROUP;
|
||||
#line 810 "PIXCfgLexer.cpp"
|
||||
}
|
||||
@@ -812,7 +812,7 @@ void PIXCfgLexer::mNUMBER_ADDRESS_OR_WORD(bool _createToken) {
|
||||
else {
|
||||
match("");
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 2371 "pix.g"
|
||||
#line 2381 "pix.g"
|
||||
_ttype = OBJECT;
|
||||
#line 818 "PIXCfgLexer.cpp"
|
||||
}
|
||||
@@ -822,15 +822,15 @@ void PIXCfgLexer::mNUMBER_ADDRESS_OR_WORD(bool _createToken) {
|
||||
}
|
||||
}
|
||||
else {
|
||||
bool synPredMatched328 = false;
|
||||
bool synPredMatched330 = false;
|
||||
if (((_tokenSet_2.member(LA(1))) && (_tokenSet_3.member(LA(2))) && (true))) {
|
||||
int _m328 = mark();
|
||||
synPredMatched328 = true;
|
||||
int _m330 = mark();
|
||||
synPredMatched330 = true;
|
||||
inputState->guessing++;
|
||||
try {
|
||||
{
|
||||
{ // ( ... )+
|
||||
int _cnt327=0;
|
||||
int _cnt329=0;
|
||||
for (;;) {
|
||||
switch ( LA(1)) {
|
||||
case 0x61 /* 'a' */ :
|
||||
@@ -859,27 +859,27 @@ void PIXCfgLexer::mNUMBER_ADDRESS_OR_WORD(bool _createToken) {
|
||||
}
|
||||
default:
|
||||
{
|
||||
if ( _cnt327>=1 ) { goto _loop327; } else {throw ANTLR_USE_NAMESPACE(antlr)NoViableAltForCharException(LA(1), getFilename(), getLine(), getColumn());}
|
||||
if ( _cnt329>=1 ) { goto _loop329; } else {throw ANTLR_USE_NAMESPACE(antlr)NoViableAltForCharException(LA(1), getFilename(), getLine(), getColumn());}
|
||||
}
|
||||
}
|
||||
_cnt327++;
|
||||
_cnt329++;
|
||||
}
|
||||
_loop327:;
|
||||
_loop329:;
|
||||
} // ( ... )+
|
||||
mCOLON(false);
|
||||
}
|
||||
}
|
||||
catch (ANTLR_USE_NAMESPACE(antlr)RecognitionException& pe) {
|
||||
synPredMatched328 = false;
|
||||
synPredMatched330 = false;
|
||||
}
|
||||
rewind(_m328);
|
||||
rewind(_m330);
|
||||
inputState->guessing--;
|
||||
}
|
||||
if ( synPredMatched328 ) {
|
||||
if ( synPredMatched330 ) {
|
||||
{
|
||||
{
|
||||
{ // ( ... )+
|
||||
int _cnt332=0;
|
||||
int _cnt334=0;
|
||||
for (;;) {
|
||||
switch ( LA(1)) {
|
||||
case 0x61 /* 'a' */ :
|
||||
@@ -908,15 +908,15 @@ void PIXCfgLexer::mNUMBER_ADDRESS_OR_WORD(bool _createToken) {
|
||||
}
|
||||
default:
|
||||
{
|
||||
if ( _cnt332>=1 ) { goto _loop332; } else {throw ANTLR_USE_NAMESPACE(antlr)NoViableAltForCharException(LA(1), getFilename(), getLine(), getColumn());}
|
||||
if ( _cnt334>=1 ) { goto _loop334; } else {throw ANTLR_USE_NAMESPACE(antlr)NoViableAltForCharException(LA(1), getFilename(), getLine(), getColumn());}
|
||||
}
|
||||
}
|
||||
_cnt332++;
|
||||
_cnt334++;
|
||||
}
|
||||
_loop332:;
|
||||
_loop334:;
|
||||
} // ( ... )+
|
||||
{ // ( ... )+
|
||||
int _cnt336=0;
|
||||
int _cnt338=0;
|
||||
for (;;) {
|
||||
if ((LA(1) == 0x3a /* ':' */ )) {
|
||||
mCOLON(false);
|
||||
@@ -949,34 +949,34 @@ void PIXCfgLexer::mNUMBER_ADDRESS_OR_WORD(bool _createToken) {
|
||||
}
|
||||
default:
|
||||
{
|
||||
goto _loop335;
|
||||
goto _loop337;
|
||||
}
|
||||
}
|
||||
}
|
||||
_loop335:;
|
||||
_loop337:;
|
||||
} // ( ... )*
|
||||
}
|
||||
else {
|
||||
if ( _cnt336>=1 ) { goto _loop336; } else {throw ANTLR_USE_NAMESPACE(antlr)NoViableAltForCharException(LA(1), getFilename(), getLine(), getColumn());}
|
||||
if ( _cnt338>=1 ) { goto _loop338; } else {throw ANTLR_USE_NAMESPACE(antlr)NoViableAltForCharException(LA(1), getFilename(), getLine(), getColumn());}
|
||||
}
|
||||
|
||||
_cnt336++;
|
||||
_cnt338++;
|
||||
}
|
||||
_loop336:;
|
||||
_loop338:;
|
||||
} // ( ... )+
|
||||
}
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 2362 "pix.g"
|
||||
#line 2372 "pix.g"
|
||||
_ttype = IPV6;
|
||||
#line 972 "PIXCfgLexer.cpp"
|
||||
}
|
||||
}
|
||||
}
|
||||
else {
|
||||
bool synPredMatched293 = false;
|
||||
bool synPredMatched295 = false;
|
||||
if ((((LA(1) >= 0x30 /* '0' */ && LA(1) <= 0x39 /* '9' */ )) && (true) && (true))) {
|
||||
int _m293 = mark();
|
||||
synPredMatched293 = true;
|
||||
int _m295 = mark();
|
||||
synPredMatched295 = true;
|
||||
inputState->guessing++;
|
||||
try {
|
||||
{
|
||||
@@ -984,36 +984,21 @@ void PIXCfgLexer::mNUMBER_ADDRESS_OR_WORD(bool _createToken) {
|
||||
}
|
||||
}
|
||||
catch (ANTLR_USE_NAMESPACE(antlr)RecognitionException& pe) {
|
||||
synPredMatched293 = false;
|
||||
synPredMatched295 = false;
|
||||
}
|
||||
rewind(_m293);
|
||||
rewind(_m295);
|
||||
inputState->guessing--;
|
||||
}
|
||||
if ( synPredMatched293 ) {
|
||||
if ( synPredMatched295 ) {
|
||||
{
|
||||
bool synPredMatched302 = false;
|
||||
bool synPredMatched304 = false;
|
||||
if ((((LA(1) >= 0x30 /* '0' */ && LA(1) <= 0x39 /* '9' */ )) && (_tokenSet_4.member(LA(2))) && (_tokenSet_4.member(LA(3))))) {
|
||||
int _m302 = mark();
|
||||
synPredMatched302 = true;
|
||||
int _m304 = mark();
|
||||
synPredMatched304 = true;
|
||||
inputState->guessing++;
|
||||
try {
|
||||
{
|
||||
{ // ( ... )+
|
||||
int _cnt297=0;
|
||||
for (;;) {
|
||||
if (((LA(1) >= 0x30 /* '0' */ && LA(1) <= 0x39 /* '9' */ ))) {
|
||||
mDIGIT(false);
|
||||
}
|
||||
else {
|
||||
if ( _cnt297>=1 ) { goto _loop297; } else {throw ANTLR_USE_NAMESPACE(antlr)NoViableAltForCharException(LA(1), getFilename(), getLine(), getColumn());}
|
||||
}
|
||||
|
||||
_cnt297++;
|
||||
}
|
||||
_loop297:;
|
||||
} // ( ... )+
|
||||
mDOT(false);
|
||||
{ // ( ... )+
|
||||
int _cnt299=0;
|
||||
for (;;) {
|
||||
if (((LA(1) >= 0x30 /* '0' */ && LA(1) <= 0x39 /* '9' */ ))) {
|
||||
@@ -1042,32 +1027,32 @@ void PIXCfgLexer::mNUMBER_ADDRESS_OR_WORD(bool _createToken) {
|
||||
}
|
||||
_loop301:;
|
||||
} // ( ... )+
|
||||
mDOT(false);
|
||||
{ // ( ... )+
|
||||
int _cnt303=0;
|
||||
for (;;) {
|
||||
if (((LA(1) >= 0x30 /* '0' */ && LA(1) <= 0x39 /* '9' */ ))) {
|
||||
mDIGIT(false);
|
||||
}
|
||||
else {
|
||||
if ( _cnt303>=1 ) { goto _loop303; } else {throw ANTLR_USE_NAMESPACE(antlr)NoViableAltForCharException(LA(1), getFilename(), getLine(), getColumn());}
|
||||
}
|
||||
|
||||
_cnt303++;
|
||||
}
|
||||
_loop303:;
|
||||
} // ( ... )+
|
||||
}
|
||||
}
|
||||
catch (ANTLR_USE_NAMESPACE(antlr)RecognitionException& pe) {
|
||||
synPredMatched302 = false;
|
||||
synPredMatched304 = false;
|
||||
}
|
||||
rewind(_m302);
|
||||
rewind(_m304);
|
||||
inputState->guessing--;
|
||||
}
|
||||
if ( synPredMatched302 ) {
|
||||
if ( synPredMatched304 ) {
|
||||
{
|
||||
{ // ( ... )+
|
||||
int _cnt305=0;
|
||||
for (;;) {
|
||||
if (((LA(1) >= 0x30 /* '0' */ && LA(1) <= 0x39 /* '9' */ ))) {
|
||||
mDIGIT(false);
|
||||
}
|
||||
else {
|
||||
if ( _cnt305>=1 ) { goto _loop305; } else {throw ANTLR_USE_NAMESPACE(antlr)NoViableAltForCharException(LA(1), getFilename(), getLine(), getColumn());}
|
||||
}
|
||||
|
||||
_cnt305++;
|
||||
}
|
||||
_loop305:;
|
||||
} // ( ... )+
|
||||
mDOT(false);
|
||||
{ // ( ... )+
|
||||
int _cnt307=0;
|
||||
for (;;) {
|
||||
if (((LA(1) >= 0x30 /* '0' */ && LA(1) <= 0x39 /* '9' */ ))) {
|
||||
@@ -1111,37 +1096,37 @@ void PIXCfgLexer::mNUMBER_ADDRESS_OR_WORD(bool _createToken) {
|
||||
}
|
||||
_loop311:;
|
||||
} // ( ... )+
|
||||
mDOT(false);
|
||||
{ // ( ... )+
|
||||
int _cnt313=0;
|
||||
for (;;) {
|
||||
if (((LA(1) >= 0x30 /* '0' */ && LA(1) <= 0x39 /* '9' */ ))) {
|
||||
mDIGIT(false);
|
||||
}
|
||||
else {
|
||||
if ( _cnt313>=1 ) { goto _loop313; } else {throw ANTLR_USE_NAMESPACE(antlr)NoViableAltForCharException(LA(1), getFilename(), getLine(), getColumn());}
|
||||
}
|
||||
|
||||
_cnt313++;
|
||||
}
|
||||
_loop313:;
|
||||
} // ( ... )+
|
||||
}
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 2350 "pix.g"
|
||||
#line 2360 "pix.g"
|
||||
_ttype = IPV4;
|
||||
#line 1119 "PIXCfgLexer.cpp"
|
||||
}
|
||||
}
|
||||
else {
|
||||
bool synPredMatched317 = false;
|
||||
bool synPredMatched319 = false;
|
||||
if ((((LA(1) >= 0x30 /* '0' */ && LA(1) <= 0x39 /* '9' */ )) && (_tokenSet_4.member(LA(2))) && (_tokenSet_4.member(LA(3))))) {
|
||||
int _m317 = mark();
|
||||
synPredMatched317 = true;
|
||||
int _m319 = mark();
|
||||
synPredMatched319 = true;
|
||||
inputState->guessing++;
|
||||
try {
|
||||
{
|
||||
{ // ( ... )+
|
||||
int _cnt314=0;
|
||||
for (;;) {
|
||||
if (((LA(1) >= 0x30 /* '0' */ && LA(1) <= 0x39 /* '9' */ ))) {
|
||||
mDIGIT(false);
|
||||
}
|
||||
else {
|
||||
if ( _cnt314>=1 ) { goto _loop314; } else {throw ANTLR_USE_NAMESPACE(antlr)NoViableAltForCharException(LA(1), getFilename(), getLine(), getColumn());}
|
||||
}
|
||||
|
||||
_cnt314++;
|
||||
}
|
||||
_loop314:;
|
||||
} // ( ... )+
|
||||
mDOT(false);
|
||||
{ // ( ... )+
|
||||
int _cnt316=0;
|
||||
for (;;) {
|
||||
if (((LA(1) >= 0x30 /* '0' */ && LA(1) <= 0x39 /* '9' */ ))) {
|
||||
@@ -1155,32 +1140,32 @@ void PIXCfgLexer::mNUMBER_ADDRESS_OR_WORD(bool _createToken) {
|
||||
}
|
||||
_loop316:;
|
||||
} // ( ... )+
|
||||
mDOT(false);
|
||||
{ // ( ... )+
|
||||
int _cnt318=0;
|
||||
for (;;) {
|
||||
if (((LA(1) >= 0x30 /* '0' */ && LA(1) <= 0x39 /* '9' */ ))) {
|
||||
mDIGIT(false);
|
||||
}
|
||||
else {
|
||||
if ( _cnt318>=1 ) { goto _loop318; } else {throw ANTLR_USE_NAMESPACE(antlr)NoViableAltForCharException(LA(1), getFilename(), getLine(), getColumn());}
|
||||
}
|
||||
|
||||
_cnt318++;
|
||||
}
|
||||
_loop318:;
|
||||
} // ( ... )+
|
||||
}
|
||||
}
|
||||
catch (ANTLR_USE_NAMESPACE(antlr)RecognitionException& pe) {
|
||||
synPredMatched317 = false;
|
||||
synPredMatched319 = false;
|
||||
}
|
||||
rewind(_m317);
|
||||
rewind(_m319);
|
||||
inputState->guessing--;
|
||||
}
|
||||
if ( synPredMatched317 ) {
|
||||
if ( synPredMatched319 ) {
|
||||
{
|
||||
{ // ( ... )+
|
||||
int _cnt320=0;
|
||||
for (;;) {
|
||||
if (((LA(1) >= 0x30 /* '0' */ && LA(1) <= 0x39 /* '9' */ ))) {
|
||||
mDIGIT(false);
|
||||
}
|
||||
else {
|
||||
if ( _cnt320>=1 ) { goto _loop320; } else {throw ANTLR_USE_NAMESPACE(antlr)NoViableAltForCharException(LA(1), getFilename(), getLine(), getColumn());}
|
||||
}
|
||||
|
||||
_cnt320++;
|
||||
}
|
||||
_loop320:;
|
||||
} // ( ... )+
|
||||
mDOT(false);
|
||||
{ // ( ... )+
|
||||
int _cnt322=0;
|
||||
for (;;) {
|
||||
if (((LA(1) >= 0x30 /* '0' */ && LA(1) <= 0x39 /* '9' */ ))) {
|
||||
@@ -1194,14 +1179,7 @@ void PIXCfgLexer::mNUMBER_ADDRESS_OR_WORD(bool _createToken) {
|
||||
}
|
||||
_loop322:;
|
||||
} // ( ... )+
|
||||
}
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 2353 "pix.g"
|
||||
_ttype = NUMBER;
|
||||
#line 1202 "PIXCfgLexer.cpp"
|
||||
}
|
||||
}
|
||||
else if (((LA(1) >= 0x30 /* '0' */ && LA(1) <= 0x39 /* '9' */ )) && (true) && (true)) {
|
||||
mDOT(false);
|
||||
{ // ( ... )+
|
||||
int _cnt324=0;
|
||||
for (;;) {
|
||||
@@ -1216,8 +1194,30 @@ void PIXCfgLexer::mNUMBER_ADDRESS_OR_WORD(bool _createToken) {
|
||||
}
|
||||
_loop324:;
|
||||
} // ( ... )+
|
||||
}
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 2355 "pix.g"
|
||||
#line 2363 "pix.g"
|
||||
_ttype = NUMBER;
|
||||
#line 1202 "PIXCfgLexer.cpp"
|
||||
}
|
||||
}
|
||||
else if (((LA(1) >= 0x30 /* '0' */ && LA(1) <= 0x39 /* '9' */ )) && (true) && (true)) {
|
||||
{ // ( ... )+
|
||||
int _cnt326=0;
|
||||
for (;;) {
|
||||
if (((LA(1) >= 0x30 /* '0' */ && LA(1) <= 0x39 /* '9' */ ))) {
|
||||
mDIGIT(false);
|
||||
}
|
||||
else {
|
||||
if ( _cnt326>=1 ) { goto _loop326; } else {throw ANTLR_USE_NAMESPACE(antlr)NoViableAltForCharException(LA(1), getFilename(), getLine(), getColumn());}
|
||||
}
|
||||
|
||||
_cnt326++;
|
||||
}
|
||||
_loop326:;
|
||||
} // ( ... )+
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 2365 "pix.g"
|
||||
_ttype = INT_CONST;
|
||||
#line 1223 "PIXCfgLexer.cpp"
|
||||
}
|
||||
@@ -1472,14 +1472,14 @@ void PIXCfgLexer::mNUMBER_ADDRESS_OR_WORD(bool _createToken) {
|
||||
}
|
||||
default:
|
||||
{
|
||||
goto _loop344;
|
||||
goto _loop346;
|
||||
}
|
||||
}
|
||||
}
|
||||
_loop344:;
|
||||
_loop346:;
|
||||
} // ( ... )*
|
||||
if ( inputState->guessing==0 ) {
|
||||
#line 2380 "pix.g"
|
||||
#line 2390 "pix.g"
|
||||
_ttype = WORD;
|
||||
#line 1485 "PIXCfgLexer.cpp"
|
||||
}
|
||||
@@ -1523,11 +1523,11 @@ void PIXCfgLexer::mSTRING(bool _createToken) {
|
||||
matchNot('\"' /* charlit */ );
|
||||
}
|
||||
else {
|
||||
goto _loop347;
|
||||
goto _loop349;
|
||||
}
|
||||
|
||||
}
|
||||
_loop347:;
|
||||
_loop349:;
|
||||
} // ( ... )*
|
||||
match('\"' /* charlit */ );
|
||||
if ( _createToken && _token==ANTLR_USE_NAMESPACE(antlr)nullToken && _ttype!=ANTLR_USE_NAMESPACE(antlr)Token::SKIP ) {
|
||||
|
||||
+633
-575
File diff suppressed because it is too large
Load Diff
@@ -311,6 +311,8 @@ private:
|
||||
static const ANTLR_USE_NAMESPACE(antlr)BitSet _tokenSet_41;
|
||||
static const unsigned long _tokenSet_42_data_[];
|
||||
static const ANTLR_USE_NAMESPACE(antlr)BitSet _tokenSet_42;
|
||||
static const unsigned long _tokenSet_43_data_[];
|
||||
static const ANTLR_USE_NAMESPACE(antlr)BitSet _tokenSet_43;
|
||||
};
|
||||
|
||||
#endif /*INC_PIXCfgParser_hpp_*/
|
||||
|
||||
+50
-41
@@ -285,16 +285,6 @@ named_object_nat : nat_top_level_command
|
||||
}
|
||||
;
|
||||
|
||||
// named_object_nat : NAT OPENING_PAREN interface_label
|
||||
// {
|
||||
// importer->addMessageToLog(
|
||||
// "Parser warning: "
|
||||
// "Import of named objects with \"nat\" command "
|
||||
// "is not supported at this time");
|
||||
// consumeUntil(NEWLINE);
|
||||
// }
|
||||
// ;
|
||||
|
||||
named_object_description : DESCRIPTION
|
||||
{
|
||||
importer->setCurrentLineNumber(LT(0)->getLine());
|
||||
@@ -1836,19 +1826,23 @@ comment : (LINE_COMMENT | COLON_COMMENT) ;
|
||||
|
||||
nat_top_level_command :
|
||||
NAT OPENING_PAREN
|
||||
{
|
||||
importer->clear();
|
||||
}
|
||||
( nat_old_top_level_command | nat_new_top_level_command )
|
||||
;
|
||||
|
||||
nat_old_top_level_command :
|
||||
interface_label { importer->prenat_interface = LT(0)->getText(); }
|
||||
interface_label
|
||||
{
|
||||
importer->prenat_interface = LT(0)->getText();
|
||||
}
|
||||
CLOSING_PAREN
|
||||
{
|
||||
importer->clear();
|
||||
importer->setCurrentLineNumber(LT(0)->getLine());
|
||||
importer->newUnidirRuleSet("nat", libfwbuilder::NAT::TYPENAME );
|
||||
*dbg << " SNAT rule " << std::endl;
|
||||
*dbg << " SNAT rule ";
|
||||
importer->rule_type = libfwbuilder::NATRule::SNAT;
|
||||
|
||||
}
|
||||
|
||||
// <0-2147483647> The <nat_id> of this group of hosts/networks.
|
||||
@@ -1862,27 +1856,34 @@ nat_old_top_level_command :
|
||||
|
||||
nat_addr_match
|
||||
|
||||
nat_command_last_parameters
|
||||
( nat_command_last_parameters )*
|
||||
|
||||
NEWLINE
|
||||
{
|
||||
importer->pushNATRule();
|
||||
*dbg << std::endl;
|
||||
}
|
||||
;
|
||||
|
||||
nat_addr_match :
|
||||
(
|
||||
host_addr // real
|
||||
single_addr // real
|
||||
{
|
||||
importer->nat_a = importer->tmp_a;
|
||||
}
|
||||
|
||||
// A.B.C.D IP netmask to apply to the local IP address
|
||||
// <cr>
|
||||
(
|
||||
single_addr
|
||||
{
|
||||
importer->nat_a = importer->tmp_a;
|
||||
importer->nat_nm = importer->tmp_nm;
|
||||
importer->nat_nm = importer->tmp_a;
|
||||
}
|
||||
|
|
||||
ACCESS_LIST acl_name:WORD
|
||||
{
|
||||
importer->nat_acl = acl_name->getText();
|
||||
}
|
||||
)
|
||||
)?
|
||||
|
|
||||
ACCESS_LIST acl_name:WORD
|
||||
{
|
||||
importer->nat_acl = acl_name->getText();
|
||||
}
|
||||
;
|
||||
|
||||
nat_command_last_parameters :
|
||||
@@ -1892,6 +1893,8 @@ nat_command_last_parameters :
|
||||
// outside Enable Outside NAT
|
||||
// tcp Configure TCP specific parameters
|
||||
// udp Configure UDP specific parameters
|
||||
// <cr>
|
||||
|
||||
(DNS)?
|
||||
(OUTSIDE)?
|
||||
(TCP | UDP)?
|
||||
@@ -1916,32 +1919,38 @@ nat_new_top_level_command :
|
||||
global_top_level_command :
|
||||
GLOBAL
|
||||
OPENING_PAREN
|
||||
interface_label { importer->global_pool_interface = LT(0)->getText(); }
|
||||
CLOSING_PAREN
|
||||
num:INT_CONST
|
||||
{
|
||||
importer->clear();
|
||||
importer->setCurrentLineNumber(LT(0)->getLine());
|
||||
importer->global_pool_num = num->getText();
|
||||
*dbg << " global address pool "
|
||||
<< importer->global_pool_num
|
||||
}
|
||||
interface_label
|
||||
{
|
||||
importer->tmp_global_pool.interface = LT(0)->getText();
|
||||
}
|
||||
CLOSING_PAREN
|
||||
num:INT_CONST
|
||||
{
|
||||
importer->tmp_global_pool.str_num = num->getText();
|
||||
importer->tmp_global_pool.netmask = "255.255.255.255";
|
||||
*dbg << " GLOBAL POOL "
|
||||
<< importer->tmp_global_pool.str_num
|
||||
<< " "
|
||||
<< importer->global_pool_interface;
|
||||
<< importer->tmp_global_pool.interface;
|
||||
}
|
||||
|
||||
// WORD Enter IP address or a range of IP addresses <start_ip>[-<end_ip>]
|
||||
// interface Specifies PAT using the IP address at the interface
|
||||
(INTRFACE | single_addr)
|
||||
{
|
||||
importer->global_pool_start = LT(0)->getText();
|
||||
importer->global_pool_end = LT(0)->getText();
|
||||
importer->tmp_global_pool.start = LT(0)->getText();
|
||||
importer->tmp_global_pool.end = LT(0)->getText();
|
||||
}
|
||||
|
||||
(
|
||||
MINUS
|
||||
single_addr
|
||||
{
|
||||
importer->global_pool_end = LT(0)->getText();
|
||||
importer->tmp_global_pool.end = LT(0)->getText();
|
||||
}
|
||||
)?
|
||||
|
||||
@@ -1950,25 +1959,26 @@ global_top_level_command :
|
||||
(
|
||||
NETMASK IPV4
|
||||
{
|
||||
importer->global_pool_netmask = LT(0)->getText();
|
||||
importer->tmp_global_pool.netmask = LT(0)->getText();
|
||||
}
|
||||
)?
|
||||
|
||||
NEWLINE
|
||||
{
|
||||
*dbg << " " << importer->global_pool_start
|
||||
<< " " << importer->global_pool_end
|
||||
<< " " << importer->global_pool_netmask
|
||||
importer->addGlobalPool();
|
||||
*dbg << " " << importer->tmp_global_pool.start
|
||||
<< " " << importer->tmp_global_pool.end
|
||||
<< " " << importer->tmp_global_pool.netmask
|
||||
<< std::endl;
|
||||
}
|
||||
;
|
||||
|
||||
static_top_level_command :
|
||||
STATIC
|
||||
OPENING_PAREN
|
||||
{
|
||||
importer->clear();
|
||||
}
|
||||
OPENING_PAREN
|
||||
interface_label { importer->prenat_interface = LT(0)->getText(); }
|
||||
COMMA
|
||||
interface_label { importer->postnat_interface = LT(0)->getText(); }
|
||||
@@ -1976,7 +1986,6 @@ static_top_level_command :
|
||||
{
|
||||
importer->setCurrentLineNumber(LT(0)->getLine());
|
||||
importer->newUnidirRuleSet("nat", libfwbuilder::NAT::TYPENAME );
|
||||
importer->newNATRule();
|
||||
*dbg << " DNAT rule ";
|
||||
importer->rule_type = libfwbuilder::NATRule::DNAT;
|
||||
}
|
||||
|
||||
@@ -36,37 +36,20 @@ Object Group (protocol) proto-pptp
|
||||
Object Group (protocol) proto-snp
|
||||
Object Group (protocol) proto-tcp
|
||||
Object Group (protocol) proto-udp
|
||||
Ruleset: icmp_commands_outside
|
||||
Interface Ethernet1 ruleset icmp_commands_outside direction 'in'
|
||||
Ruleset: icmp_commands_outside
|
||||
Interface Ethernet1 ruleset icmp_commands_outside direction 'in'
|
||||
Ruleset: icmp_commands_outside
|
||||
Interface Ethernet1 ruleset icmp_commands_outside direction 'in'
|
||||
Ruleset: icmp_commands_outside
|
||||
Interface Ethernet1 ruleset icmp_commands_outside direction 'in'
|
||||
Ruleset: icmp_commands_outside
|
||||
Interface Ethernet1 ruleset icmp_commands_outside direction 'in'
|
||||
Ruleset: icmp_commands_outside
|
||||
Interface Ethernet1 ruleset icmp_commands_outside direction 'in'
|
||||
Ruleset: icmp_commands_inside
|
||||
Interface Ethernet0 ruleset icmp_commands_inside direction 'in'
|
||||
Ruleset: icmp_commands_inside
|
||||
Interface Ethernet0 ruleset icmp_commands_inside direction 'in'
|
||||
Ruleset: icmp_commands_inside
|
||||
Interface Ethernet0 ruleset icmp_commands_inside direction 'in'
|
||||
Ruleset: icmp_commands_inside
|
||||
Interface Ethernet0 ruleset icmp_commands_inside direction 'in'
|
||||
Ruleset: icmp_commands_inside
|
||||
Interface Ethernet0 ruleset icmp_commands_inside direction 'in'
|
||||
Ruleset: icmp_commands_inside
|
||||
Interface Ethernet0 ruleset icmp_commands_inside direction 'in'
|
||||
Ruleset: icmp_commands_inside
|
||||
Interface Ethernet0 ruleset icmp_commands_inside direction 'in'
|
||||
Ruleset: icmp_commands_inside
|
||||
Interface Ethernet0 ruleset icmp_commands_inside direction 'in'
|
||||
Ruleset: icmp_commands_inside
|
||||
Interface Ethernet0 ruleset icmp_commands_inside direction 'in'
|
||||
Ruleset: telnet_commands_inside
|
||||
Interface Ethernet0 ruleset telnet_commands_inside direction 'in'
|
||||
Ruleset: ssh_commands_inside
|
||||
Interface Ethernet0 ruleset ssh_commands_inside direction 'in'
|
||||
|
||||
@@ -20,30 +20,4 @@ Named object (service) ip2
|
||||
Object Group (protocol) pg1
|
||||
Object Group (network) src-network-group-1
|
||||
Object Group (network) dst-network-group-1
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Interface Vlan1 ruleset inside_in direction 'in'
|
||||
|
||||
@@ -20,66 +20,8 @@ Named object (service) ip2
|
||||
Object Group (protocol) pg1
|
||||
Object Group (network) src-network-group-1
|
||||
Object Group (network) dst-network-group-1
|
||||
Ruleset: inside_in
|
||||
Rule comment: 0 ( global )
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Rule comment: 3 ( global )
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_out
|
||||
Ruleset: inside_out
|
||||
Ruleset: inside_out
|
||||
Ruleset: inside_out
|
||||
Ruleset: inside_out
|
||||
Ruleset: inside_out
|
||||
Ruleset: inside_out
|
||||
Ruleset: inside_out
|
||||
Ruleset: inside_out
|
||||
Ruleset: inside_out
|
||||
Ruleset: inside_out
|
||||
Ruleset: inside_out
|
||||
Ruleset: inside_out
|
||||
Ruleset: inside_out
|
||||
Ruleset: outside_out
|
||||
Ruleset: outside_out
|
||||
Ruleset: outside_out
|
||||
Interface Vlan1 ruleset inside_in direction 'in'
|
||||
Interface Vlan1 ruleset inside_out direction 'out'
|
||||
Interface Vlan2 ruleset outside_in direction 'in'
|
||||
|
||||
@@ -105,5 +105,4 @@ Object Group (icmp) ig2
|
||||
Object Group (icmp) ig3
|
||||
Object Group (service) id5102X14531.srv.tcp.0
|
||||
Object Group (service) tcp-udp-1
|
||||
Ruleset: inside_in
|
||||
Interface Vlan1 ruleset inside_in direction 'in'
|
||||
|
||||
@@ -37,8 +37,5 @@ Named object (address) internal_subnet_1
|
||||
Named object (address) internal_subnet_2
|
||||
Named object (address) Internal_net
|
||||
Named object (address) hostA:eth0
|
||||
Ruleset: outside_acl_in
|
||||
Ruleset: ssh_commands_inside
|
||||
Interface Vlan1 ruleset ssh_commands_inside direction 'in'
|
||||
Ruleset: ssh_commands_inside
|
||||
Interface Vlan1 ruleset ssh_commands_inside direction 'in'
|
||||
|
||||
@@ -10,122 +10,47 @@ Object Group (icmp) outside.id12363X2458.srv.icmp.0
|
||||
Object Group (service) outside.id12376X2458.srv.udp.0
|
||||
Object Group (service) outside.id12438X2458.srv.tcp.0
|
||||
Object Group (service) outside.id12466X2458.srv.tcp.0
|
||||
Ruleset: outside_acl_in
|
||||
Rule comment: 0 ( ethernet0 )
|
||||
Ruleset: outside_acl_in
|
||||
Ruleset: outside_acl_in
|
||||
Ruleset: outside_acl_in
|
||||
Rule comment: 3 ( global )
|
||||
Ruleset: outside_acl_in
|
||||
Ruleset: outside_acl_in
|
||||
Rule comment: 4 ( global )
|
||||
Ruleset: outside_acl_in
|
||||
Rule comment: fw uses DHCP
|
||||
Ruleset: outside_acl_in
|
||||
Rule comment: plus many DHCP requests
|
||||
Ruleset: outside_acl_in
|
||||
Rule comment: from cable modem
|
||||
Ruleset: outside_acl_in
|
||||
Rule comment: 6 ( global )
|
||||
Ruleset: outside_acl_in
|
||||
Ruleset: outside_acl_in
|
||||
Rule comment: 7 ( global )
|
||||
Ruleset: outside_acl_in
|
||||
Ruleset: outside_acl_in
|
||||
Rule comment: 10 ( global )
|
||||
Ruleset: outside_acl_in
|
||||
Rule comment: using swatch to automatically
|
||||
Ruleset: outside_acl_in
|
||||
Rule comment: block probing ssh connections , so no
|
||||
Ruleset: outside_acl_in
|
||||
Rule comment: need to limit
|
||||
Ruleset: outside_acl_in
|
||||
Ruleset: outside_acl_in
|
||||
Ruleset: outside_acl_in
|
||||
Rule comment: 11 ( global )
|
||||
Ruleset: outside_acl_in
|
||||
Ruleset: outside_acl_in
|
||||
Ruleset: outside_acl_in
|
||||
Rule comment: 17 ( global )
|
||||
Ruleset: outside_acl_in
|
||||
Ruleset: outside_acl_in
|
||||
Ruleset: outside_acl_in
|
||||
Rule comment: 19 ( global )
|
||||
Ruleset: outside_acl_in
|
||||
Rule comment: ' catch all' rule
|
||||
Ruleset: outside_acl_in
|
||||
Ruleset: inside_acl_in
|
||||
Rule comment: 1 ( global )
|
||||
Ruleset: inside_acl_in
|
||||
Ruleset: inside_acl_in
|
||||
Ruleset: inside_acl_in
|
||||
Rule comment: 5 ( global )
|
||||
Ruleset: inside_acl_in
|
||||
Ruleset: inside_acl_in
|
||||
Rule comment: 6 ( global )
|
||||
Ruleset: inside_acl_in
|
||||
Ruleset: inside_acl_in
|
||||
Rule comment: 7 ( global )
|
||||
Ruleset: inside_acl_in
|
||||
Ruleset: inside_acl_in
|
||||
Rule comment: 17 ( global )
|
||||
Ruleset: inside_acl_in
|
||||
Ruleset: inside_acl_in
|
||||
Ruleset: inside_acl_in
|
||||
Rule comment: 18 ( global )
|
||||
Ruleset: inside_acl_in
|
||||
Ruleset: inside_acl_in
|
||||
Rule comment: 19 ( global )
|
||||
Ruleset: inside_acl_in
|
||||
Rule comment: ' catch all' rule
|
||||
Ruleset: inside_acl_in
|
||||
Ruleset: id12594X2458.0
|
||||
Ruleset: id12594X2458.1
|
||||
Ruleset: id12594X2458.2
|
||||
Ruleset: id12594X2458.3
|
||||
Ruleset: id12626X2458.0
|
||||
Ruleset: id12626X2458.1
|
||||
Ruleset: id12626X2458.2
|
||||
Ruleset: id12642X2458.0
|
||||
Ruleset: id12656X2458.0
|
||||
Ruleset: id12670X2458.0
|
||||
Ruleset: id12684X2458.0
|
||||
Ruleset: id12743X2458.0
|
||||
Interface ethernet0 ruleset outside_acl_in direction 'in'
|
||||
Interface ethernet1 ruleset inside_acl_in direction 'in'
|
||||
Ruleset: icmp_commands_outside
|
||||
Interface ethernet0 ruleset icmp_commands_outside direction 'in'
|
||||
Ruleset: icmp_commands_outside
|
||||
Interface ethernet0 ruleset icmp_commands_outside direction 'in'
|
||||
Ruleset: icmp_commands_outside
|
||||
Interface ethernet0 ruleset icmp_commands_outside direction 'in'
|
||||
Ruleset: icmp_commands_outside
|
||||
Interface ethernet0 ruleset icmp_commands_outside direction 'in'
|
||||
Ruleset: icmp_commands_outside
|
||||
Interface ethernet0 ruleset icmp_commands_outside direction 'in'
|
||||
Ruleset: icmp_commands_outside
|
||||
Interface ethernet0 ruleset icmp_commands_outside direction 'in'
|
||||
Ruleset: icmp_commands_inside
|
||||
Interface ethernet1 ruleset icmp_commands_inside direction 'in'
|
||||
Ruleset: icmp_commands_inside
|
||||
Interface ethernet1 ruleset icmp_commands_inside direction 'in'
|
||||
Ruleset: icmp_commands_inside
|
||||
Interface ethernet1 ruleset icmp_commands_inside direction 'in'
|
||||
Ruleset: icmp_commands_inside
|
||||
Interface ethernet1 ruleset icmp_commands_inside direction 'in'
|
||||
Ruleset: icmp_commands_inside
|
||||
Interface ethernet1 ruleset icmp_commands_inside direction 'in'
|
||||
Ruleset: icmp_commands_inside
|
||||
Interface ethernet1 ruleset icmp_commands_inside direction 'in'
|
||||
Ruleset: icmp_commands_inside
|
||||
Interface ethernet1 ruleset icmp_commands_inside direction 'in'
|
||||
Ruleset: icmp_commands_inside
|
||||
Interface ethernet1 ruleset icmp_commands_inside direction 'in'
|
||||
Ruleset: icmp_commands_inside
|
||||
Interface ethernet1 ruleset icmp_commands_inside direction 'in'
|
||||
Ruleset: telnet_commands_inside
|
||||
Interface ethernet1 ruleset telnet_commands_inside direction 'in'
|
||||
Ruleset: ssh_commands_inside
|
||||
Interface ethernet1 ruleset ssh_commands_inside direction 'in'
|
||||
Ruleset: ssh_commands_inside
|
||||
Interface ethernet1 ruleset ssh_commands_inside direction 'in'
|
||||
|
||||
@@ -1,6 +1,6 @@
|
||||
<?xml version="1.0" encoding="utf-8"?>
|
||||
<!DOCTYPE FWObjectDatabase SYSTEM "fwbuilder.dtd">
|
||||
<FWObjectDatabase xmlns="http://www.fwbuilder.org/1.0/" version="18" lastModified="1301538587" id="root">
|
||||
<FWObjectDatabase xmlns="http://www.fwbuilder.org/1.0/" version="18" lastModified="1301598505" id="root">
|
||||
<Library id="syslib000" color="#d4f8ff" name="Standard" comment="Standard objects" ro="True">
|
||||
<AnyNetwork id="sysid0" name="Any" comment="Any Network" ro="False" address="0.0.0.0" netmask="0.0.0.0"/>
|
||||
<AnyIPService id="sysid1" protocol_num="0" name="Any" comment="Any IP Service" ro="False"/>
|
||||
@@ -441,78 +441,335 @@
|
||||
<IPv4 id="id9" name="h-10.0.0.253" comment="Created during import of line 80" ro="False" address="10.0.0.253" netmask="255.255.255.255"/>
|
||||
<IPv4 id="id10" name="h-10.0.0.254" comment="Created during import of line 81" ro="False" address="10.0.0.254" netmask="255.255.255.255"/>
|
||||
<IPv4 id="id11" name="h-10.1.1.43" comment="Created during import of line 106" ro="False" address="10.1.1.43" netmask="255.255.255.255"/>
|
||||
<IPv4 id="id12" name="h-10.0.0.16" comment="Created during import of line 136" ro="False" address="10.0.0.16" netmask="255.255.255.255"/>
|
||||
<IPv4 id="id13" name="h-10.1.1.16" comment="Created during import of line 136" ro="False" address="10.1.1.16" netmask="255.255.255.255"/>
|
||||
<IPv4 id="id14" name="h-10.0.0.100" comment="Created during import of line 137" ro="False" address="10.0.0.100" netmask="255.255.255.255"/>
|
||||
<IPv4 id="id15" name="h-10.1.1.100" comment="Created during import of line 137" ro="False" address="10.1.1.100" netmask="255.255.255.255"/>
|
||||
<IPv4 id="id16" name="h-10.1.1.111" comment="Created during import of line 138" ro="False" address="10.1.1.111" netmask="255.255.255.255"/>
|
||||
<IPv4 id="id17" name="h-10.5.80.16" comment="Created during import of line 139" ro="False" address="10.5.80.16" netmask="255.255.255.255"/>
|
||||
<IPv4 id="id18" name="h-10.5.80.200" comment="Created during import of line 140" ro="False" address="10.5.80.200" netmask="255.255.255.255"/>
|
||||
<IPv4 id="id19" name="h-10.10.1.200" comment="Created during import of line 140" ro="False" address="10.10.1.200" netmask="255.255.255.255"/>
|
||||
<IPv4 id="id20" name="h-192.0.2.100" comment="Created during import of line 193" ro="False" address="192.0.2.100" netmask="255.255.255.255"/>
|
||||
<IPv4 id="id12" name="h-192.0.2.10" comment="Created during import of line 136" ro="False" address="192.0.2.10" netmask="255.255.255.255"/>
|
||||
<IPv4 id="id13" name="h-192.0.2.11" comment="Created during import of line 137" ro="False" address="192.0.2.11" netmask="255.255.255.255"/>
|
||||
<IPv4 id="id14" name="h-192.0.2.15" comment="Created during import of line 137" ro="False" address="192.0.2.15" netmask="255.255.255.255"/>
|
||||
<IPv4 id="id15" name="h-192.0.2.128" comment="Created during import of line 138" ro="False" address="192.0.2.128" netmask="255.255.255.255"/>
|
||||
<IPv4 id="id16" name="h-10.0.0.128" comment="Created during import of line 139" ro="False" address="10.0.0.128" netmask="255.255.255.255"/>
|
||||
<IPv4 id="id17" name="h-10.1.1.1" comment="Created during import of line 141" ro="False" address="10.1.1.1" netmask="255.255.255.255"/>
|
||||
<IPv4 id="id18" name="h-255.255.255.255" comment="Created during import of line 141" ro="False" address="255.255.255.255" netmask="255.255.255.255"/>
|
||||
<IPv4 id="id19" name="h-10.1.1.32" comment="Created during import of line 142" ro="False" address="10.1.1.32" netmask="255.255.255.255"/>
|
||||
<IPv4 id="id20" name="h-255.255.255.240" comment="Created during import of line 142" ro="False" address="255.255.255.240" netmask="255.255.255.255"/>
|
||||
<IPv4 id="id21" name="h-10.0.0.16" comment="Created during import of line 145" ro="False" address="10.0.0.16" netmask="255.255.255.255"/>
|
||||
<IPv4 id="id22" name="h-10.1.1.16" comment="Created during import of line 145" ro="False" address="10.1.1.16" netmask="255.255.255.255"/>
|
||||
<IPv4 id="id23" name="h-10.0.0.100" comment="Created during import of line 146" ro="False" address="10.0.0.100" netmask="255.255.255.255"/>
|
||||
<IPv4 id="id24" name="h-10.1.1.100" comment="Created during import of line 146" ro="False" address="10.1.1.100" netmask="255.255.255.255"/>
|
||||
<IPv4 id="id25" name="h-10.1.1.111" comment="Created during import of line 147" ro="False" address="10.1.1.111" netmask="255.255.255.255"/>
|
||||
<IPv4 id="id26" name="h-10.5.80.16" comment="Created during import of line 148" ro="False" address="10.5.80.16" netmask="255.255.255.255"/>
|
||||
<IPv4 id="id27" name="h-10.5.80.200" comment="Created during import of line 149" ro="False" address="10.5.80.200" netmask="255.255.255.255"/>
|
||||
<IPv4 id="id28" name="h-10.10.1.200" comment="Created during import of line 149" ro="False" address="10.10.1.200" netmask="255.255.255.255"/>
|
||||
<IPv4 id="id29" name="h-192.0.2.100" comment="Created during import of line 202" ro="False" address="192.0.2.100" netmask="255.255.255.255"/>
|
||||
</ObjectGroup>
|
||||
<ObjectGroup id="id21" name="DNS Names" comment="" ro="False"/>
|
||||
<ObjectGroup id="id22" name="Address Tables" comment="" ro="False"/>
|
||||
<ObjectGroup id="id23" name="Groups" comment="" ro="False">
|
||||
<ObjectGroup id="id24" name="outside.id12051X6282.src.net.0" comment="Created during import of line 71" ro="False">
|
||||
<ObjectGroup id="id30" name="DNS Names" comment="" ro="False"/>
|
||||
<ObjectGroup id="id31" name="Address Tables" comment="" ro="False"/>
|
||||
<ObjectGroup id="id32" name="Groups" comment="" ro="False">
|
||||
<ObjectGroup id="id33" name="outside.id12051X6282.src.net.0" comment="Created during import of line 71" ro="False">
|
||||
<ObjectRef ref="id3"/>
|
||||
<ObjectRef ref="id4"/>
|
||||
</ObjectGroup>
|
||||
<ObjectGroup id="id27" name="outside.id12051X6282.src.net.1" comment="Created during import of line 74" ro="False">
|
||||
<ObjectGroup id="id36" name="outside.id12051X6282.src.net.1" comment="Created during import of line 74" ro="False">
|
||||
<ObjectRef ref="id5"/>
|
||||
<ObjectRef ref="id6"/>
|
||||
<ObjectRef ref="id7"/>
|
||||
<ObjectRef ref="id8"/>
|
||||
</ObjectGroup>
|
||||
<ObjectGroup id="id32" name="outside.id12051X6282.src.net.2" comment="Created during import of line 79" ro="False">
|
||||
<ObjectGroup id="id41" name="outside.id12051X6282.src.net.2" comment="Created during import of line 79" ro="False">
|
||||
<ObjectRef ref="id9"/>
|
||||
<ObjectRef ref="id10"/>
|
||||
</ObjectGroup>
|
||||
<ObjectGroup id="id35" name="network-zone-inside" comment="Created during import of line 83" ro="False">
|
||||
<ObjectRef ref="id41"/>
|
||||
<ObjectGroup id="id44" name="network-zone-inside" comment="Created during import of line 83" ro="False">
|
||||
<ObjectRef ref="id50"/>
|
||||
</ObjectGroup>
|
||||
<ObjectGroup id="id37" name="network-zone-dmz20" comment="Created during import of line 85" ro="False">
|
||||
<ObjectRef ref="id42"/>
|
||||
<ObjectGroup id="id46" name="network-zone-dmz20" comment="Created during import of line 85" ro="False">
|
||||
<ObjectRef ref="id51"/>
|
||||
</ObjectGroup>
|
||||
</ObjectGroup>
|
||||
<ObjectGroup id="id39" name="Hosts" comment="" ro="False"/>
|
||||
<ObjectGroup id="id40" name="Networks" comment="" ro="False">
|
||||
<Network id="id41" name="net-10.1.1.0/255.255.255.0" comment="Created during import of line 84" ro="False" address="10.1.1.0" netmask="255.255.255.0"/>
|
||||
<Network id="id42" name="net-10.0.0.0/255.255.255.0" comment="Created during import of line 86" ro="False" address="10.0.0.0" netmask="255.255.255.0"/>
|
||||
<Network id="id43" name="net-10.0.0.16/255.255.255.240" comment="Created during import of line 136" ro="False" address="10.0.0.16" netmask="255.255.255.240"/>
|
||||
<Network id="id44" name="net-10.5.80.16/255.255.255.240" comment="Created during import of line 139" ro="False" address="10.5.80.16" netmask="255.255.255.240"/>
|
||||
<Network id="id45" name="net-10.1.2.0/255.255.255.0" comment="Created during import of line 192" ro="False" address="10.1.2.0" netmask="255.255.255.0"/>
|
||||
<ObjectGroup id="id48" name="Hosts" comment="" ro="False"/>
|
||||
<ObjectGroup id="id49" name="Networks" comment="" ro="False">
|
||||
<Network id="id50" name="net-10.1.1.0/255.255.255.0" comment="Created during import of line 84" ro="False" address="10.1.1.0" netmask="255.255.255.0"/>
|
||||
<Network id="id51" name="net-10.0.0.0/255.255.255.0" comment="Created during import of line 86" ro="False" address="10.0.0.0" netmask="255.255.255.0"/>
|
||||
<Network id="id52" name="net-192.0.2.128/255.255.255.240" comment="" ro="False" address="192.0.2.128" netmask="255.255.255.240"/>
|
||||
<Network id="id53" name="net-10.0.0.128/255.255.255.240" comment="" ro="False" address="10.0.0.128" netmask="255.255.255.240"/>
|
||||
<Network id="id54" name="net-10.1.1.32/255.255.255.240" comment="Created during import of line 142" ro="False" address="10.1.1.32" netmask="255.255.255.240"/>
|
||||
<Network id="id55" name="net-10.0.0.16/255.255.255.240" comment="Created during import of line 145" ro="False" address="10.0.0.16" netmask="255.255.255.240"/>
|
||||
<Network id="id56" name="net-10.5.80.16/255.255.255.240" comment="Created during import of line 148" ro="False" address="10.5.80.16" netmask="255.255.255.240"/>
|
||||
<Network id="id57" name="net-10.1.2.0/255.255.255.0" comment="Created during import of line 201" ro="False" address="10.1.2.0" netmask="255.255.255.0"/>
|
||||
</ObjectGroup>
|
||||
<ObjectGroup id="id58" name="Address Ranges" comment="" ro="False">
|
||||
<AddressRange id="id59" name="range-192.0.2.11-192.0.2.15" comment="" ro="False" start_address="192.0.2.11" end_address="192.0.2.15"/>
|
||||
</ObjectGroup>
|
||||
<ObjectGroup id="id46" name="Address Ranges" comment="" ro="False"/>
|
||||
</ObjectGroup>
|
||||
<ServiceGroup id="id47" name="Services" comment="" ro="False">
|
||||
<ServiceGroup id="id48" name="Groups" comment="" ro="False"/>
|
||||
<ServiceGroup id="id49" name="ICMP" comment="" ro="False"/>
|
||||
<ServiceGroup id="id50" name="IP" comment="" ro="False">
|
||||
<IPService id="id51" any_opt="False" dscp="" fragm="False" lsrr="False" protocol_num="0" rr="False" rtralt="False" rtralt_value="False" short_fragm="False" ssrr="False" tos="" ts="False" name="ip" comment="Created during import of line 89" ro="False"/>
|
||||
<ServiceGroup id="id60" name="Services" comment="" ro="False">
|
||||
<ServiceGroup id="id61" name="Groups" comment="" ro="False"/>
|
||||
<ServiceGroup id="id62" name="ICMP" comment="" ro="False"/>
|
||||
<ServiceGroup id="id63" name="IP" comment="" ro="False">
|
||||
<IPService id="id64" any_opt="False" dscp="" fragm="False" lsrr="False" protocol_num="0" rr="False" rtralt="False" rtralt_value="False" short_fragm="False" ssrr="False" tos="" ts="False" name="ip" comment="Created during import of line 89" ro="False"/>
|
||||
</ServiceGroup>
|
||||
<ServiceGroup id="id52" name="TCP" comment="" ro="False">
|
||||
<TCPService id="id53" ack_flag="False" ack_flag_mask="False" established="False" fin_flag="False" fin_flag_mask="False" psh_flag="False" psh_flag_mask="False" rst_flag="False" rst_flag_mask="False" syn_flag="False" syn_flag_mask="False" urg_flag="False" urg_flag_mask="False" name="tcp 80:80 / 0:0" comment="Created during import of line 106" ro="False" src_range_start="80" src_range_end="80" dst_range_start="0" dst_range_end="0"/>
|
||||
<TCPService id="id54" ack_flag="False" ack_flag_mask="False" established="False" fin_flag="False" fin_flag_mask="False" psh_flag="False" psh_flag_mask="False" rst_flag="False" rst_flag_mask="False" syn_flag="False" syn_flag_mask="False" urg_flag="False" urg_flag_mask="False" name="tcp 0:0 / 80:80" comment="Created during import of line 139" ro="False" src_range_start="0" src_range_end="0" dst_range_start="80" dst_range_end="80"/>
|
||||
<TCPService id="id55" ack_flag="False" ack_flag_mask="False" established="False" fin_flag="False" fin_flag_mask="False" psh_flag="False" psh_flag_mask="False" rst_flag="False" rst_flag_mask="False" syn_flag="False" syn_flag_mask="False" urg_flag="False" urg_flag_mask="False" name="tcp 0:0 / 8080:8080" comment="Created during import of line 139" ro="False" src_range_start="0" src_range_end="0" dst_range_start="8080" dst_range_end="8080"/>
|
||||
<TCPService id="id56" ack_flag="False" ack_flag_mask="False" established="False" fin_flag="False" fin_flag_mask="False" psh_flag="False" psh_flag_mask="False" rst_flag="False" rst_flag_mask="False" syn_flag="False" syn_flag_mask="False" urg_flag="False" urg_flag_mask="False" name="tcp 0:0 / 0:0" comment="Created during import of line 142" ro="False" src_range_start="0" src_range_end="0" dst_range_start="0" dst_range_end="0"/>
|
||||
<ServiceGroup id="id65" name="TCP" comment="" ro="False">
|
||||
<TCPService id="id66" ack_flag="False" ack_flag_mask="False" established="False" fin_flag="False" fin_flag_mask="False" psh_flag="False" psh_flag_mask="False" rst_flag="False" rst_flag_mask="False" syn_flag="False" syn_flag_mask="False" urg_flag="False" urg_flag_mask="False" name="tcp 80:80 / 0:0" comment="Created during import of line 106" ro="False" src_range_start="80" src_range_end="80" dst_range_start="0" dst_range_end="0"/>
|
||||
<TCPService id="id67" ack_flag="False" ack_flag_mask="False" established="False" fin_flag="False" fin_flag_mask="False" psh_flag="False" psh_flag_mask="False" rst_flag="False" rst_flag_mask="False" syn_flag="False" syn_flag_mask="False" urg_flag="False" urg_flag_mask="False" name="tcp 0:0 / 80:80" comment="Created during import of line 148" ro="False" src_range_start="0" src_range_end="0" dst_range_start="80" dst_range_end="80"/>
|
||||
<TCPService id="id68" ack_flag="False" ack_flag_mask="False" established="False" fin_flag="False" fin_flag_mask="False" psh_flag="False" psh_flag_mask="False" rst_flag="False" rst_flag_mask="False" syn_flag="False" syn_flag_mask="False" urg_flag="False" urg_flag_mask="False" name="tcp 0:0 / 8080:8080" comment="Created during import of line 148" ro="False" src_range_start="0" src_range_end="0" dst_range_start="8080" dst_range_end="8080"/>
|
||||
<TCPService id="id69" ack_flag="False" ack_flag_mask="False" established="False" fin_flag="False" fin_flag_mask="False" psh_flag="False" psh_flag_mask="False" rst_flag="False" rst_flag_mask="False" syn_flag="False" syn_flag_mask="False" urg_flag="False" urg_flag_mask="False" name="tcp 0:0 / 0:0" comment="Created during import of line 151" ro="False" src_range_start="0" src_range_end="0" dst_range_start="0" dst_range_end="0"/>
|
||||
</ServiceGroup>
|
||||
<ServiceGroup id="id57" name="UDP" comment="" ro="False">
|
||||
<UDPService id="id58" name="udp 0:0 / 53:53" comment="Created during import of line 93" ro="False" src_range_start="0" src_range_end="0" dst_range_start="53" dst_range_end="53"/>
|
||||
<ServiceGroup id="id70" name="UDP" comment="" ro="False">
|
||||
<UDPService id="id71" name="udp 0:0 / 53:53" comment="Created during import of line 93" ro="False" src_range_start="0" src_range_end="0" dst_range_start="53" dst_range_end="53"/>
|
||||
</ServiceGroup>
|
||||
<ServiceGroup id="id59" name="Users" comment="" ro="False"/>
|
||||
<ServiceGroup id="id60" name="Custom" comment="" ro="False"/>
|
||||
<ServiceGroup id="id61" name="TagServices" comment="" ro="False"/>
|
||||
<ServiceGroup id="id72" name="Users" comment="" ro="False"/>
|
||||
<ServiceGroup id="id73" name="Custom" comment="" ro="False"/>
|
||||
<ServiceGroup id="id74" name="TagServices" comment="" ro="False"/>
|
||||
</ServiceGroup>
|
||||
<ObjectGroup id="id62" name="Firewalls" comment="" ro="False">
|
||||
<Firewall id="id63" host_OS="pix_os" lastCompiled="0" lastInstalled="0" lastModified="0" platform="pix" version="7.0" name="pix1" comment="Created during import of line 6" ro="False">
|
||||
<NAT id="id271" name="NAT" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="True">
|
||||
<NATRule id="id274" disabled="False" group="" position="0" action="Translate" comment="Created during import of line 136">
|
||||
<ObjectGroup id="id75" name="Firewalls" comment="" ro="False">
|
||||
<Firewall id="id76" host_OS="pix_os" lastCompiled="0" lastInstalled="0" lastModified="0" platform="pix" version="7.0" name="pix1" comment="Created during import of line 6" ro="False">
|
||||
<NAT id="id284" name="NAT" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="True">
|
||||
<NATRule id="id287" disabled="False" group="" position="0" action="Translate" comment="Created during import of line 134">
|
||||
<OSrc neg="False">
|
||||
<ObjectRef ref="id50"/>
|
||||
</OSrc>
|
||||
<ODst neg="False">
|
||||
<ObjectRef ref="sysid0"/>
|
||||
</ODst>
|
||||
<OSrv neg="False">
|
||||
<ServiceRef ref="sysid1"/>
|
||||
</OSrv>
|
||||
<TSrc neg="False">
|
||||
<ObjectRef ref="id597"/>
|
||||
</TSrc>
|
||||
<TDst neg="False">
|
||||
<ObjectRef ref="sysid0"/>
|
||||
</TDst>
|
||||
<TSrv neg="False">
|
||||
<ServiceRef ref="sysid1"/>
|
||||
</TSrv>
|
||||
<ItfInb neg="False">
|
||||
<ObjectRef ref="id597"/>
|
||||
</ItfInb>
|
||||
<ItfOutb neg="False">
|
||||
<ObjectRef ref="id603"/>
|
||||
</ItfOutb>
|
||||
<NATRuleOptions/>
|
||||
</NATRule>
|
||||
<NATRule id="id305" disabled="False" group="" position="1" action="Translate" comment="Created during import of line 141">
|
||||
<OSrc neg="False">
|
||||
<ObjectRef ref="id17"/>
|
||||
</OSrc>
|
||||
<ODst neg="False">
|
||||
<ObjectRef ref="sysid0"/>
|
||||
</ODst>
|
||||
<OSrv neg="False">
|
||||
<ServiceRef ref="sysid1"/>
|
||||
</OSrv>
|
||||
<TSrc neg="False">
|
||||
<ObjectRef ref="id12"/>
|
||||
</TSrc>
|
||||
<TDst neg="False">
|
||||
<ObjectRef ref="sysid0"/>
|
||||
</TDst>
|
||||
<TSrv neg="False">
|
||||
<ServiceRef ref="sysid1"/>
|
||||
</TSrv>
|
||||
<ItfInb neg="False">
|
||||
<ObjectRef ref="id597"/>
|
||||
</ItfInb>
|
||||
<ItfOutb neg="False">
|
||||
<ObjectRef ref="id603"/>
|
||||
</ItfOutb>
|
||||
<NATRuleOptions/>
|
||||
</NATRule>
|
||||
<NATRule id="id323" disabled="False" group="" position="2" action="Translate" comment="Created during import of line 141">
|
||||
<OSrc neg="False">
|
||||
<ObjectRef ref="id17"/>
|
||||
</OSrc>
|
||||
<ODst neg="False">
|
||||
<ObjectRef ref="sysid0"/>
|
||||
</ODst>
|
||||
<OSrv neg="False">
|
||||
<ServiceRef ref="sysid1"/>
|
||||
</OSrv>
|
||||
<TSrc neg="False">
|
||||
<ObjectRef ref="id59"/>
|
||||
</TSrc>
|
||||
<TDst neg="False">
|
||||
<ObjectRef ref="sysid0"/>
|
||||
</TDst>
|
||||
<TSrv neg="False">
|
||||
<ServiceRef ref="sysid1"/>
|
||||
</TSrv>
|
||||
<ItfInb neg="False">
|
||||
<ObjectRef ref="id597"/>
|
||||
</ItfInb>
|
||||
<ItfOutb neg="False">
|
||||
<ObjectRef ref="id603"/>
|
||||
</ItfOutb>
|
||||
<NATRuleOptions/>
|
||||
</NATRule>
|
||||
<NATRule id="id341" disabled="False" group="" position="3" action="Translate" comment="Created during import of line 141">
|
||||
<OSrc neg="False">
|
||||
<ObjectRef ref="id17"/>
|
||||
</OSrc>
|
||||
<ODst neg="False">
|
||||
<ObjectRef ref="sysid0"/>
|
||||
</ODst>
|
||||
<OSrv neg="False">
|
||||
<ServiceRef ref="sysid1"/>
|
||||
</OSrv>
|
||||
<TSrc neg="False">
|
||||
<ObjectRef ref="id52"/>
|
||||
</TSrc>
|
||||
<TDst neg="False">
|
||||
<ObjectRef ref="sysid0"/>
|
||||
</TDst>
|
||||
<TSrv neg="False">
|
||||
<ServiceRef ref="sysid1"/>
|
||||
</TSrv>
|
||||
<ItfInb neg="False">
|
||||
<ObjectRef ref="id597"/>
|
||||
</ItfInb>
|
||||
<ItfOutb neg="False">
|
||||
<ObjectRef ref="id603"/>
|
||||
</ItfOutb>
|
||||
<NATRuleOptions/>
|
||||
</NATRule>
|
||||
<NATRule id="id359" disabled="False" group="" position="4" action="Translate" comment="Created during import of line 141">
|
||||
<OSrc neg="False">
|
||||
<ObjectRef ref="id17"/>
|
||||
</OSrc>
|
||||
<ODst neg="False">
|
||||
<ObjectRef ref="sysid0"/>
|
||||
</ODst>
|
||||
<OSrv neg="False">
|
||||
<ServiceRef ref="sysid1"/>
|
||||
</OSrv>
|
||||
<TSrc neg="False">
|
||||
<ObjectRef ref="id53"/>
|
||||
</TSrc>
|
||||
<TDst neg="False">
|
||||
<ObjectRef ref="sysid0"/>
|
||||
</TDst>
|
||||
<TSrv neg="False">
|
||||
<ServiceRef ref="sysid1"/>
|
||||
</TSrv>
|
||||
<ItfInb neg="False">
|
||||
<ObjectRef ref="id600"/>
|
||||
</ItfInb>
|
||||
<ItfOutb neg="False">
|
||||
<ObjectRef ref="id603"/>
|
||||
</ItfOutb>
|
||||
<NATRuleOptions/>
|
||||
</NATRule>
|
||||
<NATRule id="id377" disabled="False" group="" position="5" action="Translate" comment="Created during import of line 142">
|
||||
<OSrc neg="False">
|
||||
<ObjectRef ref="id54"/>
|
||||
</OSrc>
|
||||
<ODst neg="False">
|
||||
<ObjectRef ref="sysid0"/>
|
||||
</ODst>
|
||||
<OSrv neg="False">
|
||||
<ServiceRef ref="sysid1"/>
|
||||
</OSrv>
|
||||
<TSrc neg="False">
|
||||
<ObjectRef ref="id12"/>
|
||||
</TSrc>
|
||||
<TDst neg="False">
|
||||
<ObjectRef ref="sysid0"/>
|
||||
</TDst>
|
||||
<TSrv neg="False">
|
||||
<ServiceRef ref="sysid1"/>
|
||||
</TSrv>
|
||||
<ItfInb neg="False">
|
||||
<ObjectRef ref="id597"/>
|
||||
</ItfInb>
|
||||
<ItfOutb neg="False">
|
||||
<ObjectRef ref="id603"/>
|
||||
</ItfOutb>
|
||||
<NATRuleOptions/>
|
||||
</NATRule>
|
||||
<NATRule id="id395" disabled="False" group="" position="6" action="Translate" comment="Created during import of line 142">
|
||||
<OSrc neg="False">
|
||||
<ObjectRef ref="id54"/>
|
||||
</OSrc>
|
||||
<ODst neg="False">
|
||||
<ObjectRef ref="sysid0"/>
|
||||
</ODst>
|
||||
<OSrv neg="False">
|
||||
<ServiceRef ref="sysid1"/>
|
||||
</OSrv>
|
||||
<TSrc neg="False">
|
||||
<ObjectRef ref="id59"/>
|
||||
</TSrc>
|
||||
<TDst neg="False">
|
||||
<ObjectRef ref="sysid0"/>
|
||||
</TDst>
|
||||
<TSrv neg="False">
|
||||
<ServiceRef ref="sysid1"/>
|
||||
</TSrv>
|
||||
<ItfInb neg="False">
|
||||
<ObjectRef ref="id597"/>
|
||||
</ItfInb>
|
||||
<ItfOutb neg="False">
|
||||
<ObjectRef ref="id603"/>
|
||||
</ItfOutb>
|
||||
<NATRuleOptions/>
|
||||
</NATRule>
|
||||
<NATRule id="id413" disabled="False" group="" position="7" action="Translate" comment="Created during import of line 142">
|
||||
<OSrc neg="False">
|
||||
<ObjectRef ref="id54"/>
|
||||
</OSrc>
|
||||
<ODst neg="False">
|
||||
<ObjectRef ref="sysid0"/>
|
||||
</ODst>
|
||||
<OSrv neg="False">
|
||||
<ServiceRef ref="sysid1"/>
|
||||
</OSrv>
|
||||
<TSrc neg="False">
|
||||
<ObjectRef ref="id52"/>
|
||||
</TSrc>
|
||||
<TDst neg="False">
|
||||
<ObjectRef ref="sysid0"/>
|
||||
</TDst>
|
||||
<TSrv neg="False">
|
||||
<ServiceRef ref="sysid1"/>
|
||||
</TSrv>
|
||||
<ItfInb neg="False">
|
||||
<ObjectRef ref="id597"/>
|
||||
</ItfInb>
|
||||
<ItfOutb neg="False">
|
||||
<ObjectRef ref="id603"/>
|
||||
</ItfOutb>
|
||||
<NATRuleOptions/>
|
||||
</NATRule>
|
||||
<NATRule id="id431" disabled="False" group="" position="8" action="Translate" comment="Created during import of line 142">
|
||||
<OSrc neg="False">
|
||||
<ObjectRef ref="id54"/>
|
||||
</OSrc>
|
||||
<ODst neg="False">
|
||||
<ObjectRef ref="sysid0"/>
|
||||
</ODst>
|
||||
<OSrv neg="False">
|
||||
<ServiceRef ref="sysid1"/>
|
||||
</OSrv>
|
||||
<TSrc neg="False">
|
||||
<ObjectRef ref="id53"/>
|
||||
</TSrc>
|
||||
<TDst neg="False">
|
||||
<ObjectRef ref="sysid0"/>
|
||||
</TDst>
|
||||
<TSrv neg="False">
|
||||
<ServiceRef ref="sysid1"/>
|
||||
</TSrv>
|
||||
<ItfInb neg="False">
|
||||
<ObjectRef ref="id600"/>
|
||||
</ItfInb>
|
||||
<ItfOutb neg="False">
|
||||
<ObjectRef ref="id603"/>
|
||||
</ItfOutb>
|
||||
<NATRuleOptions/>
|
||||
</NATRule>
|
||||
<NATRule id="id449" disabled="False" group="" position="9" action="Translate" comment="Created during import of line 145">
|
||||
<OSrc neg="False">
|
||||
<ObjectRef ref="sysid0"/>
|
||||
</OSrc>
|
||||
<ODst neg="False">
|
||||
<ObjectRef ref="id43"/>
|
||||
<ObjectRef ref="id55"/>
|
||||
</ODst>
|
||||
<OSrv neg="False">
|
||||
<ServiceRef ref="sysid1"/>
|
||||
@@ -521,25 +778,25 @@
|
||||
<ObjectRef ref="sysid0"/>
|
||||
</TSrc>
|
||||
<TDst neg="False">
|
||||
<ObjectRef ref="id13"/>
|
||||
<ObjectRef ref="id22"/>
|
||||
</TDst>
|
||||
<TSrv neg="False">
|
||||
<ServiceRef ref="sysid1"/>
|
||||
</TSrv>
|
||||
<ItfInb neg="False">
|
||||
<ObjectRef ref="id425"/>
|
||||
<ObjectRef ref="id600"/>
|
||||
</ItfInb>
|
||||
<ItfOutb neg="False">
|
||||
<ObjectRef ref="id428"/>
|
||||
<ObjectRef ref="id603"/>
|
||||
</ItfOutb>
|
||||
<NATRuleOptions/>
|
||||
</NATRule>
|
||||
<NATRule id="id292" disabled="False" group="" position="1" action="Translate" comment="Created during import of line 137">
|
||||
<NATRule id="id467" disabled="False" group="" position="10" action="Translate" comment="Created during import of line 146">
|
||||
<OSrc neg="False">
|
||||
<ObjectRef ref="sysid0"/>
|
||||
</OSrc>
|
||||
<ODst neg="False">
|
||||
<ObjectRef ref="id14"/>
|
||||
<ObjectRef ref="id23"/>
|
||||
</ODst>
|
||||
<OSrv neg="False">
|
||||
<ServiceRef ref="sysid1"/>
|
||||
@@ -548,25 +805,25 @@
|
||||
<ObjectRef ref="sysid0"/>
|
||||
</TSrc>
|
||||
<TDst neg="False">
|
||||
<ObjectRef ref="id15"/>
|
||||
<ObjectRef ref="id24"/>
|
||||
</TDst>
|
||||
<TSrv neg="False">
|
||||
<ServiceRef ref="sysid1"/>
|
||||
</TSrv>
|
||||
<ItfInb neg="False">
|
||||
<ObjectRef ref="id425"/>
|
||||
<ObjectRef ref="id600"/>
|
||||
</ItfInb>
|
||||
<ItfOutb neg="False">
|
||||
<ObjectRef ref="id428"/>
|
||||
<ObjectRef ref="id603"/>
|
||||
</ItfOutb>
|
||||
<NATRuleOptions/>
|
||||
</NATRule>
|
||||
<NATRule id="id310" disabled="False" group="" position="2" action="Translate" comment="Created during import of line 138">
|
||||
<NATRule id="id485" disabled="False" group="" position="11" action="Translate" comment="Created during import of line 147">
|
||||
<OSrc neg="False">
|
||||
<ObjectRef ref="sysid0"/>
|
||||
</OSrc>
|
||||
<ODst neg="False">
|
||||
<ObjectRef ref="id425"/>
|
||||
<ObjectRef ref="id600"/>
|
||||
</ODst>
|
||||
<OSrv neg="False">
|
||||
<ServiceRef ref="sysid1"/>
|
||||
@@ -575,82 +832,82 @@
|
||||
<ObjectRef ref="sysid0"/>
|
||||
</TSrc>
|
||||
<TDst neg="False">
|
||||
<ObjectRef ref="id16"/>
|
||||
<ObjectRef ref="id25"/>
|
||||
</TDst>
|
||||
<TSrv neg="False">
|
||||
<ServiceRef ref="sysid1"/>
|
||||
</TSrv>
|
||||
<ItfInb neg="False">
|
||||
<ObjectRef ref="id425"/>
|
||||
<ObjectRef ref="id600"/>
|
||||
</ItfInb>
|
||||
<ItfOutb neg="False">
|
||||
<ObjectRef ref="id428"/>
|
||||
<ObjectRef ref="id603"/>
|
||||
</ItfOutb>
|
||||
<NATRuleOptions/>
|
||||
</NATRule>
|
||||
<NATRule id="id328" disabled="False" group="" position="3" action="Translate" comment="Created during import of line 139">
|
||||
<NATRule id="id503" disabled="False" group="" position="12" action="Translate" comment="Created during import of line 148">
|
||||
<OSrc neg="False">
|
||||
<ObjectRef ref="sysid0"/>
|
||||
</OSrc>
|
||||
<ODst neg="False">
|
||||
<ObjectRef ref="id44"/>
|
||||
<ObjectRef ref="id56"/>
|
||||
</ODst>
|
||||
<OSrv neg="False">
|
||||
<ServiceRef ref="id54"/>
|
||||
<ServiceRef ref="id67"/>
|
||||
</OSrv>
|
||||
<TSrc neg="False">
|
||||
<ObjectRef ref="sysid0"/>
|
||||
</TSrc>
|
||||
<TDst neg="False">
|
||||
<ObjectRef ref="id13"/>
|
||||
<ObjectRef ref="id22"/>
|
||||
</TDst>
|
||||
<TSrv neg="False">
|
||||
<ServiceRef ref="id55"/>
|
||||
<ServiceRef ref="id68"/>
|
||||
</TSrv>
|
||||
<ItfInb neg="False">
|
||||
<ObjectRef ref="id422"/>
|
||||
<ObjectRef ref="id597"/>
|
||||
</ItfInb>
|
||||
<ItfOutb neg="False">
|
||||
<ObjectRef ref="id428"/>
|
||||
<ObjectRef ref="id603"/>
|
||||
</ItfOutb>
|
||||
<NATRuleOptions/>
|
||||
</NATRule>
|
||||
<NATRule id="id346" disabled="False" group="" position="4" action="Translate" comment="Created during import of line 140">
|
||||
<NATRule id="id521" disabled="False" group="" position="13" action="Translate" comment="Created during import of line 149">
|
||||
<OSrc neg="False">
|
||||
<ObjectRef ref="sysid0"/>
|
||||
</OSrc>
|
||||
<ODst neg="False">
|
||||
<ObjectRef ref="id18"/>
|
||||
<ObjectRef ref="id27"/>
|
||||
</ODst>
|
||||
<OSrv neg="False">
|
||||
<ServiceRef ref="id54"/>
|
||||
<ServiceRef ref="id67"/>
|
||||
</OSrv>
|
||||
<TSrc neg="False">
|
||||
<ObjectRef ref="sysid0"/>
|
||||
</TSrc>
|
||||
<TDst neg="False">
|
||||
<ObjectRef ref="id19"/>
|
||||
<ObjectRef ref="id28"/>
|
||||
</TDst>
|
||||
<TSrv neg="False">
|
||||
<ServiceRef ref="id55"/>
|
||||
<ServiceRef ref="id68"/>
|
||||
</TSrv>
|
||||
<ItfInb neg="False">
|
||||
<ObjectRef ref="id422"/>
|
||||
<ObjectRef ref="id597"/>
|
||||
</ItfInb>
|
||||
<ItfOutb neg="False">
|
||||
<ObjectRef ref="id428"/>
|
||||
<ObjectRef ref="id603"/>
|
||||
</ItfOutb>
|
||||
<NATRuleOptions/>
|
||||
</NATRule>
|
||||
<NATRule id="id364" disabled="False" group="" position="5" action="Translate" comment="Created during import of line 142">
|
||||
<NATRule id="id539" disabled="False" group="" position="14" action="Translate" comment="Created during import of line 151">
|
||||
<OSrc neg="False">
|
||||
<ObjectRef ref="sysid0"/>
|
||||
</OSrc>
|
||||
<ODst neg="False">
|
||||
<ObjectRef ref="id422"/>
|
||||
<ObjectRef ref="id597"/>
|
||||
</ODst>
|
||||
<OSrv neg="False">
|
||||
<ServiceRef ref="id54"/>
|
||||
<ServiceRef ref="id67"/>
|
||||
</OSrv>
|
||||
<TSrc neg="False">
|
||||
<ObjectRef ref="sysid0"/>
|
||||
@@ -659,25 +916,25 @@
|
||||
<ObjectRef ref="id11"/>
|
||||
</TDst>
|
||||
<TSrv neg="False">
|
||||
<ServiceRef ref="id56"/>
|
||||
<ServiceRef ref="id69"/>
|
||||
</TSrv>
|
||||
<ItfInb neg="False">
|
||||
<ObjectRef ref="id422"/>
|
||||
<ObjectRef ref="id597"/>
|
||||
</ItfInb>
|
||||
<ItfOutb neg="False">
|
||||
<ObjectRef ref="id428"/>
|
||||
<ObjectRef ref="id603"/>
|
||||
</ItfOutb>
|
||||
<NATRuleOptions/>
|
||||
</NATRule>
|
||||
<NATRule id="id382" disabled="False" group="" position="6" action="Translate" comment="Created during import of line 143">
|
||||
<NATRule id="id557" disabled="False" group="" position="15" action="Translate" comment="Created during import of line 152">
|
||||
<OSrc neg="False">
|
||||
<ObjectRef ref="sysid0"/>
|
||||
</OSrc>
|
||||
<ODst neg="False">
|
||||
<ObjectRef ref="id422"/>
|
||||
<ObjectRef ref="id597"/>
|
||||
</ODst>
|
||||
<OSrv neg="False">
|
||||
<ServiceRef ref="id54"/>
|
||||
<ServiceRef ref="id67"/>
|
||||
</OSrv>
|
||||
<TSrc neg="False">
|
||||
<ObjectRef ref="sysid0"/>
|
||||
@@ -686,22 +943,22 @@
|
||||
<ObjectRef ref="id11"/>
|
||||
</TDst>
|
||||
<TSrv neg="False">
|
||||
<ServiceRef ref="id56"/>
|
||||
<ServiceRef ref="id69"/>
|
||||
</TSrv>
|
||||
<ItfInb neg="False">
|
||||
<ObjectRef ref="id422"/>
|
||||
<ObjectRef ref="id597"/>
|
||||
</ItfInb>
|
||||
<ItfOutb neg="False">
|
||||
<ObjectRef ref="id428"/>
|
||||
<ObjectRef ref="id603"/>
|
||||
</ItfOutb>
|
||||
<NATRuleOptions/>
|
||||
</NATRule>
|
||||
<NATRule id="id400" disabled="False" group="" position="7" action="Translate" comment="Created during import of line 144">
|
||||
<NATRule id="id575" disabled="False" group="" position="16" action="Translate" comment="Created during import of line 153">
|
||||
<OSrc neg="False">
|
||||
<ObjectRef ref="sysid0"/>
|
||||
</OSrc>
|
||||
<ODst neg="False">
|
||||
<ObjectRef ref="id422"/>
|
||||
<ObjectRef ref="id597"/>
|
||||
</ODst>
|
||||
<OSrv neg="False">
|
||||
<ServiceRef ref="sysid1"/>
|
||||
@@ -716,28 +973,28 @@
|
||||
<ServiceRef ref="sysid1"/>
|
||||
</TSrv>
|
||||
<ItfInb neg="False">
|
||||
<ObjectRef ref="id422"/>
|
||||
<ObjectRef ref="id597"/>
|
||||
</ItfInb>
|
||||
<ItfOutb neg="False">
|
||||
<ObjectRef ref="id428"/>
|
||||
<ObjectRef ref="id603"/>
|
||||
</ItfOutb>
|
||||
<NATRuleOptions/>
|
||||
</NATRule>
|
||||
<RuleSetOptions/>
|
||||
</NAT>
|
||||
<Policy id="id65" name="Policy" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="True">
|
||||
<PolicyRule id="id67" disabled="False" group="" log="False" position="0" action="Accept" direction="Inbound" comment="Imported from ssh_commands_outside Created during import of line 193">
|
||||
<Policy id="id78" name="Policy" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="True">
|
||||
<PolicyRule id="id80" disabled="False" group="" log="False" position="0" action="Accept" direction="Inbound" comment="Imported from ssh_commands_outside Created during import of line 202">
|
||||
<Src neg="False">
|
||||
<ObjectRef ref="id20"/>
|
||||
<ObjectRef ref="id29"/>
|
||||
</Src>
|
||||
<Dst neg="False">
|
||||
<ObjectRef ref="id63"/>
|
||||
<ObjectRef ref="id76"/>
|
||||
</Dst>
|
||||
<Srv neg="False">
|
||||
<ServiceRef ref="sysid1"/>
|
||||
</Srv>
|
||||
<Itf neg="False">
|
||||
<ObjectRef ref="id422"/>
|
||||
<ObjectRef ref="id597"/>
|
||||
</Itf>
|
||||
<When neg="False">
|
||||
<IntervalRef ref="sysid2"/>
|
||||
@@ -746,18 +1003,18 @@
|
||||
<Option name="stateless">False</Option>
|
||||
</PolicyRuleOptions>
|
||||
</PolicyRule>
|
||||
<PolicyRule id="id79" disabled="False" group="" log="False" position="1" action="Accept" direction="Inbound" comment="Imported from ssh_commands_inside Created during import of line 191">
|
||||
<PolicyRule id="id92" disabled="False" group="" log="False" position="1" action="Accept" direction="Inbound" comment="Imported from ssh_commands_inside Created during import of line 200">
|
||||
<Src neg="False">
|
||||
<ObjectRef ref="id41"/>
|
||||
<ObjectRef ref="id50"/>
|
||||
</Src>
|
||||
<Dst neg="False">
|
||||
<ObjectRef ref="id63"/>
|
||||
<ObjectRef ref="id76"/>
|
||||
</Dst>
|
||||
<Srv neg="False">
|
||||
<ServiceRef ref="sysid1"/>
|
||||
</Srv>
|
||||
<Itf neg="False">
|
||||
<ObjectRef ref="id428"/>
|
||||
<ObjectRef ref="id603"/>
|
||||
</Itf>
|
||||
<When neg="False">
|
||||
<IntervalRef ref="sysid2"/>
|
||||
@@ -766,18 +1023,18 @@
|
||||
<Option name="stateless">False</Option>
|
||||
</PolicyRuleOptions>
|
||||
</PolicyRule>
|
||||
<PolicyRule id="id91" disabled="False" group="" log="False" position="2" action="Accept" direction="Inbound" comment="Imported from ssh_commands_inside Created during import of line 192">
|
||||
<PolicyRule id="id104" disabled="False" group="" log="False" position="2" action="Accept" direction="Inbound" comment="Imported from ssh_commands_inside Created during import of line 201">
|
||||
<Src neg="False">
|
||||
<ObjectRef ref="id45"/>
|
||||
<ObjectRef ref="id57"/>
|
||||
</Src>
|
||||
<Dst neg="False">
|
||||
<ObjectRef ref="id63"/>
|
||||
<ObjectRef ref="id76"/>
|
||||
</Dst>
|
||||
<Srv neg="False">
|
||||
<ServiceRef ref="sysid1"/>
|
||||
</Srv>
|
||||
<Itf neg="False">
|
||||
<ObjectRef ref="id428"/>
|
||||
<ObjectRef ref="id603"/>
|
||||
</Itf>
|
||||
<When neg="False">
|
||||
<IntervalRef ref="sysid2"/>
|
||||
@@ -786,18 +1043,18 @@
|
||||
<Option name="stateless">False</Option>
|
||||
</PolicyRuleOptions>
|
||||
</PolicyRule>
|
||||
<PolicyRule id="id103" disabled="False" group="" log="True" position="3" action="Deny" direction="Inbound" comment="Imported from inside_in Created during import of line 98">
|
||||
<PolicyRule id="id116" disabled="False" group="" log="True" position="3" action="Deny" direction="Inbound" comment="Imported from inside_in Created during import of line 98">
|
||||
<Src neg="False">
|
||||
<ObjectRef ref="sysid0"/>
|
||||
</Src>
|
||||
<Dst neg="False">
|
||||
<ObjectRef ref="id24"/>
|
||||
<ObjectRef ref="id33"/>
|
||||
</Dst>
|
||||
<Srv neg="False">
|
||||
<ServiceRef ref="id51"/>
|
||||
<ServiceRef ref="id64"/>
|
||||
</Srv>
|
||||
<Itf neg="False">
|
||||
<ObjectRef ref="id428"/>
|
||||
<ObjectRef ref="id603"/>
|
||||
</Itf>
|
||||
<When neg="False">
|
||||
<IntervalRef ref="sysid2"/>
|
||||
@@ -807,18 +1064,18 @@
|
||||
<Option name="stateless">True</Option>
|
||||
</PolicyRuleOptions>
|
||||
</PolicyRule>
|
||||
<PolicyRule id="id115" disabled="False" group="" log="True" position="4" action="Deny" direction="Inbound" comment="Imported from inside_in Created during import of line 99">
|
||||
<PolicyRule id="id128" disabled="False" group="" log="True" position="4" action="Deny" direction="Inbound" comment="Imported from inside_in Created during import of line 99">
|
||||
<Src neg="False">
|
||||
<ObjectRef ref="sysid0"/>
|
||||
</Src>
|
||||
<Dst neg="False">
|
||||
<ObjectRef ref="id27"/>
|
||||
<ObjectRef ref="id36"/>
|
||||
</Dst>
|
||||
<Srv neg="False">
|
||||
<ServiceRef ref="id51"/>
|
||||
<ServiceRef ref="id64"/>
|
||||
</Srv>
|
||||
<Itf neg="False">
|
||||
<ObjectRef ref="id428"/>
|
||||
<ObjectRef ref="id603"/>
|
||||
</Itf>
|
||||
<When neg="False">
|
||||
<IntervalRef ref="sysid2"/>
|
||||
@@ -828,39 +1085,39 @@
|
||||
<Option name="stateless">True</Option>
|
||||
</PolicyRuleOptions>
|
||||
</PolicyRule>
|
||||
<PolicyRule id="id127" disabled="False" group="" log="True" position="5" action="Deny" direction="Inbound" comment="Imported from inside_in Created during import of line 100">
|
||||
<PolicyRule id="id140" disabled="False" group="" log="True" position="5" action="Deny" direction="Inbound" comment="Imported from inside_in Created during import of line 100">
|
||||
<Src neg="False">
|
||||
<ObjectRef ref="sysid0"/>
|
||||
</Src>
|
||||
<Dst neg="False">
|
||||
<ObjectRef ref="id32"/>
|
||||
</Dst>
|
||||
<Srv neg="False">
|
||||
<ServiceRef ref="id51"/>
|
||||
</Srv>
|
||||
<Itf neg="False">
|
||||
<ObjectRef ref="id428"/>
|
||||
</Itf>
|
||||
<When neg="False">
|
||||
<IntervalRef ref="sysid2"/>
|
||||
</When>
|
||||
<PolicyRuleOptions>
|
||||
<Option name="log_level">warning</Option>
|
||||
<Option name="stateless">True</Option>
|
||||
</PolicyRuleOptions>
|
||||
</PolicyRule>
|
||||
<PolicyRule id="id139" disabled="False" group="" log="False" position="6" action="Accept" direction="Inbound" comment="Imported from inside_in Created during import of line 101">
|
||||
<Src neg="False">
|
||||
<ObjectRef ref="id41"/>
|
||||
</Dst>
|
||||
<Srv neg="False">
|
||||
<ServiceRef ref="id64"/>
|
||||
</Srv>
|
||||
<Itf neg="False">
|
||||
<ObjectRef ref="id603"/>
|
||||
</Itf>
|
||||
<When neg="False">
|
||||
<IntervalRef ref="sysid2"/>
|
||||
</When>
|
||||
<PolicyRuleOptions>
|
||||
<Option name="log_level">warning</Option>
|
||||
<Option name="stateless">True</Option>
|
||||
</PolicyRuleOptions>
|
||||
</PolicyRule>
|
||||
<PolicyRule id="id152" disabled="False" group="" log="False" position="6" action="Accept" direction="Inbound" comment="Imported from inside_in Created during import of line 101">
|
||||
<Src neg="False">
|
||||
<ObjectRef ref="id50"/>
|
||||
</Src>
|
||||
<Dst neg="False">
|
||||
<ObjectRef ref="sysid0"/>
|
||||
</Dst>
|
||||
<Srv neg="False">
|
||||
<ServiceRef ref="id51"/>
|
||||
<ServiceRef ref="id64"/>
|
||||
</Srv>
|
||||
<Itf neg="False">
|
||||
<ObjectRef ref="id428"/>
|
||||
<ObjectRef ref="id603"/>
|
||||
</Itf>
|
||||
<When neg="False">
|
||||
<IntervalRef ref="sysid2"/>
|
||||
@@ -869,7 +1126,7 @@
|
||||
<Option name="stateless">False</Option>
|
||||
</PolicyRuleOptions>
|
||||
</PolicyRule>
|
||||
<PolicyRule id="id151" disabled="False" group="" log="True" position="7" action="Deny" direction="Inbound" comment="Imported from inside_in Created during import of line 102">
|
||||
<PolicyRule id="id164" disabled="False" group="" log="True" position="7" action="Deny" direction="Inbound" comment="Imported from inside_in Created during import of line 102">
|
||||
<Src neg="False">
|
||||
<ObjectRef ref="sysid0"/>
|
||||
</Src>
|
||||
@@ -877,10 +1134,10 @@
|
||||
<ObjectRef ref="sysid0"/>
|
||||
</Dst>
|
||||
<Srv neg="False">
|
||||
<ServiceRef ref="id51"/>
|
||||
<ServiceRef ref="id64"/>
|
||||
</Srv>
|
||||
<Itf neg="False">
|
||||
<ObjectRef ref="id428"/>
|
||||
<ObjectRef ref="id603"/>
|
||||
</Itf>
|
||||
<When neg="False">
|
||||
<IntervalRef ref="sysid2"/>
|
||||
@@ -890,18 +1147,18 @@
|
||||
<Option name="stateless">True</Option>
|
||||
</PolicyRuleOptions>
|
||||
</PolicyRule>
|
||||
<PolicyRule id="id163" disabled="False" group="" log="True" position="8" action="Accept" direction="Outbound" comment="Imported from inside_out Created during import of line 93">
|
||||
<PolicyRule id="id176" disabled="False" group="" log="True" position="8" action="Accept" direction="Outbound" comment="Imported from inside_out Created during import of line 93">
|
||||
<Src neg="False">
|
||||
<ObjectRef ref="id24"/>
|
||||
<ObjectRef ref="id33"/>
|
||||
</Src>
|
||||
<Dst neg="False">
|
||||
<ObjectRef ref="id41"/>
|
||||
<ObjectRef ref="id50"/>
|
||||
</Dst>
|
||||
<Srv neg="False">
|
||||
<ServiceRef ref="id58"/>
|
||||
<ServiceRef ref="id71"/>
|
||||
</Srv>
|
||||
<Itf neg="False">
|
||||
<ObjectRef ref="id428"/>
|
||||
<ObjectRef ref="id603"/>
|
||||
</Itf>
|
||||
<When neg="False">
|
||||
<IntervalRef ref="sysid2"/>
|
||||
@@ -911,18 +1168,18 @@
|
||||
<Option name="stateless">False</Option>
|
||||
</PolicyRuleOptions>
|
||||
</PolicyRule>
|
||||
<PolicyRule id="id175" disabled="False" group="" log="True" position="9" action="Accept" direction="Outbound" comment="Imported from inside_out Created during import of line 94">
|
||||
<PolicyRule id="id188" disabled="False" group="" log="True" position="9" action="Accept" direction="Outbound" comment="Imported from inside_out Created during import of line 94">
|
||||
<Src neg="False">
|
||||
<ObjectRef ref="id27"/>
|
||||
<ObjectRef ref="id36"/>
|
||||
</Src>
|
||||
<Dst neg="False">
|
||||
<ObjectRef ref="id41"/>
|
||||
<ObjectRef ref="id50"/>
|
||||
</Dst>
|
||||
<Srv neg="False">
|
||||
<ServiceRef ref="id58"/>
|
||||
<ServiceRef ref="id71"/>
|
||||
</Srv>
|
||||
<Itf neg="False">
|
||||
<ObjectRef ref="id428"/>
|
||||
<ObjectRef ref="id603"/>
|
||||
</Itf>
|
||||
<When neg="False">
|
||||
<IntervalRef ref="sysid2"/>
|
||||
@@ -932,18 +1189,18 @@
|
||||
<Option name="stateless">False</Option>
|
||||
</PolicyRuleOptions>
|
||||
</PolicyRule>
|
||||
<PolicyRule id="id187" disabled="False" group="" log="True" position="10" action="Accept" direction="Outbound" comment="Imported from inside_out Created during import of line 95">
|
||||
<PolicyRule id="id200" disabled="False" group="" log="True" position="10" action="Accept" direction="Outbound" comment="Imported from inside_out Created during import of line 95">
|
||||
<Src neg="False">
|
||||
<ObjectRef ref="id32"/>
|
||||
<ObjectRef ref="id41"/>
|
||||
</Src>
|
||||
<Dst neg="False">
|
||||
<ObjectRef ref="id41"/>
|
||||
<ObjectRef ref="id50"/>
|
||||
</Dst>
|
||||
<Srv neg="False">
|
||||
<ServiceRef ref="id58"/>
|
||||
<ServiceRef ref="id71"/>
|
||||
</Srv>
|
||||
<Itf neg="False">
|
||||
<ObjectRef ref="id428"/>
|
||||
<ObjectRef ref="id603"/>
|
||||
</Itf>
|
||||
<When neg="False">
|
||||
<IntervalRef ref="sysid2"/>
|
||||
@@ -953,18 +1210,18 @@
|
||||
<Option name="stateless">False</Option>
|
||||
</PolicyRuleOptions>
|
||||
</PolicyRule>
|
||||
<PolicyRule id="id199" disabled="False" group="" log="False" position="11" action="Accept" direction="Outbound" comment="Imported from inside_out Created during import of line 96">
|
||||
<PolicyRule id="id212" disabled="False" group="" log="False" position="11" action="Accept" direction="Outbound" comment="Imported from inside_out Created during import of line 96">
|
||||
<Src neg="False">
|
||||
<ObjectRef ref="id41"/>
|
||||
<ObjectRef ref="id50"/>
|
||||
</Src>
|
||||
<Dst neg="False">
|
||||
<ObjectRef ref="sysid0"/>
|
||||
</Dst>
|
||||
<Srv neg="False">
|
||||
<ServiceRef ref="id51"/>
|
||||
<ServiceRef ref="id64"/>
|
||||
</Srv>
|
||||
<Itf neg="False">
|
||||
<ObjectRef ref="id428"/>
|
||||
<ObjectRef ref="id603"/>
|
||||
</Itf>
|
||||
<When neg="False">
|
||||
<IntervalRef ref="sysid2"/>
|
||||
@@ -973,7 +1230,7 @@
|
||||
<Option name="stateless">False</Option>
|
||||
</PolicyRuleOptions>
|
||||
</PolicyRule>
|
||||
<PolicyRule id="id211" disabled="False" group="" log="True" position="12" action="Deny" direction="Outbound" comment="Imported from inside_out Created during import of line 97">
|
||||
<PolicyRule id="id224" disabled="False" group="" log="True" position="12" action="Deny" direction="Outbound" comment="Imported from inside_out Created during import of line 97">
|
||||
<Src neg="False">
|
||||
<ObjectRef ref="sysid0"/>
|
||||
</Src>
|
||||
@@ -981,10 +1238,10 @@
|
||||
<ObjectRef ref="sysid0"/>
|
||||
</Dst>
|
||||
<Srv neg="False">
|
||||
<ServiceRef ref="id51"/>
|
||||
<ServiceRef ref="id64"/>
|
||||
</Srv>
|
||||
<Itf neg="False">
|
||||
<ObjectRef ref="id428"/>
|
||||
<ObjectRef ref="id603"/>
|
||||
</Itf>
|
||||
<When neg="False">
|
||||
<IntervalRef ref="sysid2"/>
|
||||
@@ -994,18 +1251,18 @@
|
||||
<Option name="stateless">True</Option>
|
||||
</PolicyRuleOptions>
|
||||
</PolicyRule>
|
||||
<PolicyRule id="id223" disabled="False" group="" log="True" position="13" action="Deny" direction="Inbound" comment="Imported from outside_in Created during import of line 89">
|
||||
<PolicyRule id="id236" disabled="False" group="" log="True" position="13" action="Deny" direction="Inbound" comment="Imported from outside_in Created during import of line 89">
|
||||
<Src neg="False">
|
||||
<ObjectRef ref="id24"/>
|
||||
<ObjectRef ref="id33"/>
|
||||
</Src>
|
||||
<Dst neg="False">
|
||||
<ObjectRef ref="sysid0"/>
|
||||
</Dst>
|
||||
<Srv neg="False">
|
||||
<ServiceRef ref="id51"/>
|
||||
<ServiceRef ref="id64"/>
|
||||
</Srv>
|
||||
<Itf neg="False">
|
||||
<ObjectRef ref="id422"/>
|
||||
<ObjectRef ref="id597"/>
|
||||
</Itf>
|
||||
<When neg="False">
|
||||
<IntervalRef ref="sysid2"/>
|
||||
@@ -1015,18 +1272,18 @@
|
||||
<Option name="stateless">True</Option>
|
||||
</PolicyRuleOptions>
|
||||
</PolicyRule>
|
||||
<PolicyRule id="id235" disabled="False" group="" log="True" position="14" action="Deny" direction="Inbound" comment="Imported from outside_in Created during import of line 90">
|
||||
<PolicyRule id="id248" disabled="False" group="" log="True" position="14" action="Deny" direction="Inbound" comment="Imported from outside_in Created during import of line 90">
|
||||
<Src neg="False">
|
||||
<ObjectRef ref="id27"/>
|
||||
<ObjectRef ref="id36"/>
|
||||
</Src>
|
||||
<Dst neg="False">
|
||||
<ObjectRef ref="sysid0"/>
|
||||
</Dst>
|
||||
<Srv neg="False">
|
||||
<ServiceRef ref="id51"/>
|
||||
<ServiceRef ref="id64"/>
|
||||
</Srv>
|
||||
<Itf neg="False">
|
||||
<ObjectRef ref="id422"/>
|
||||
<ObjectRef ref="id597"/>
|
||||
</Itf>
|
||||
<When neg="False">
|
||||
<IntervalRef ref="sysid2"/>
|
||||
@@ -1036,28 +1293,7 @@
|
||||
<Option name="stateless">True</Option>
|
||||
</PolicyRuleOptions>
|
||||
</PolicyRule>
|
||||
<PolicyRule id="id247" disabled="False" group="" log="True" position="15" action="Deny" direction="Inbound" comment="Imported from outside_in Created during import of line 91">
|
||||
<Src neg="False">
|
||||
<ObjectRef ref="id32"/>
|
||||
</Src>
|
||||
<Dst neg="False">
|
||||
<ObjectRef ref="sysid0"/>
|
||||
</Dst>
|
||||
<Srv neg="False">
|
||||
<ServiceRef ref="id51"/>
|
||||
</Srv>
|
||||
<Itf neg="False">
|
||||
<ObjectRef ref="id422"/>
|
||||
</Itf>
|
||||
<When neg="False">
|
||||
<IntervalRef ref="sysid2"/>
|
||||
</When>
|
||||
<PolicyRuleOptions>
|
||||
<Option name="log_level">warning</Option>
|
||||
<Option name="stateless">True</Option>
|
||||
</PolicyRuleOptions>
|
||||
</PolicyRule>
|
||||
<PolicyRule id="id259" disabled="False" group="" log="True" position="16" action="Deny" direction="Inbound" comment="Imported from outside_in Created during import of line 92">
|
||||
<PolicyRule id="id260" disabled="False" group="" log="True" position="15" action="Deny" direction="Inbound" comment="Imported from outside_in Created during import of line 91">
|
||||
<Src neg="False">
|
||||
<ObjectRef ref="id41"/>
|
||||
</Src>
|
||||
@@ -1065,10 +1301,31 @@
|
||||
<ObjectRef ref="sysid0"/>
|
||||
</Dst>
|
||||
<Srv neg="False">
|
||||
<ServiceRef ref="id51"/>
|
||||
<ServiceRef ref="id64"/>
|
||||
</Srv>
|
||||
<Itf neg="False">
|
||||
<ObjectRef ref="id422"/>
|
||||
<ObjectRef ref="id597"/>
|
||||
</Itf>
|
||||
<When neg="False">
|
||||
<IntervalRef ref="sysid2"/>
|
||||
</When>
|
||||
<PolicyRuleOptions>
|
||||
<Option name="log_level">warning</Option>
|
||||
<Option name="stateless">True</Option>
|
||||
</PolicyRuleOptions>
|
||||
</PolicyRule>
|
||||
<PolicyRule id="id272" disabled="False" group="" log="True" position="16" action="Deny" direction="Inbound" comment="Imported from outside_in Created during import of line 92">
|
||||
<Src neg="False">
|
||||
<ObjectRef ref="id50"/>
|
||||
</Src>
|
||||
<Dst neg="False">
|
||||
<ObjectRef ref="sysid0"/>
|
||||
</Dst>
|
||||
<Srv neg="False">
|
||||
<ServiceRef ref="id64"/>
|
||||
</Srv>
|
||||
<Itf neg="False">
|
||||
<ObjectRef ref="id597"/>
|
||||
</Itf>
|
||||
<When neg="False">
|
||||
<IntervalRef ref="sysid2"/>
|
||||
@@ -1080,16 +1337,16 @@
|
||||
</PolicyRule>
|
||||
<RuleSetOptions/>
|
||||
</Policy>
|
||||
<Policy id="id431" name="id12251X6282.0" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
|
||||
<PolicyRule id="id433" disabled="False" group="" log="False" position="0" action="Accept" direction="Both" comment="Created during import of line 104">
|
||||
<Policy id="id606" name="id12251X6282.0" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
|
||||
<PolicyRule id="id608" disabled="False" group="" log="False" position="0" action="Accept" direction="Both" comment="Created during import of line 104">
|
||||
<Src neg="False">
|
||||
<ObjectRef ref="id41"/>
|
||||
<ObjectRef ref="id50"/>
|
||||
</Src>
|
||||
<Dst neg="False">
|
||||
<ObjectRef ref="sysid0"/>
|
||||
</Dst>
|
||||
<Srv neg="False">
|
||||
<ServiceRef ref="id51"/>
|
||||
<ServiceRef ref="id64"/>
|
||||
</Srv>
|
||||
<Itf neg="False">
|
||||
<ObjectRef ref="sysid0"/>
|
||||
@@ -1103,8 +1360,8 @@
|
||||
</PolicyRule>
|
||||
<RuleSetOptions/>
|
||||
</Policy>
|
||||
<Policy id="id445" name="id12594X2458.0" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
|
||||
<PolicyRule id="id447" disabled="False" group="" log="False" position="0" action="Accept" direction="Both" comment="Created during import of line 106">
|
||||
<Policy id="id620" name="id12594X2458.0" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
|
||||
<PolicyRule id="id622" disabled="False" group="" log="False" position="0" action="Accept" direction="Both" comment="Created during import of line 106">
|
||||
<Src neg="False">
|
||||
<ObjectRef ref="id11"/>
|
||||
</Src>
|
||||
@@ -1112,7 +1369,7 @@
|
||||
<ObjectRef ref="sysid0"/>
|
||||
</Dst>
|
||||
<Srv neg="False">
|
||||
<ServiceRef ref="id53"/>
|
||||
<ServiceRef ref="id66"/>
|
||||
</Srv>
|
||||
<Itf neg="False">
|
||||
<ObjectRef ref="sysid0"/>
|
||||
@@ -1126,28 +1383,28 @@
|
||||
</PolicyRule>
|
||||
<RuleSetOptions/>
|
||||
</Policy>
|
||||
<Routing id="id418" name="Routing" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="True">
|
||||
<Routing id="id593" name="Routing" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="True">
|
||||
<RuleSetOptions/>
|
||||
</Routing>
|
||||
<Interface id="id420" dedicated_failover="False" dyn="False" security_level="0" unnum="True" unprotected="False" name="Ethernet0" comment="Created during import of line 16" ro="False">
|
||||
<Interface id="id595" dedicated_failover="False" dyn="False" security_level="0" unnum="True" unprotected="False" name="Ethernet0" comment="Created during import of line 16" ro="False">
|
||||
<InterfaceOptions/>
|
||||
<Interface id="id422" dedicated_failover="False" dyn="False" label="outside" security_level="0" unnum="False" unprotected="False" name="Ethernet0.101" comment="Created during import of line 21" ro="False">
|
||||
<IPv4 id="id424" name="pix1:Ethernet0.101:ip" comment="Created during import of line 24" ro="False" address="192.0.2.253" netmask="255.255.255.0"/>
|
||||
<Interface id="id597" dedicated_failover="False" dyn="False" label="outside" security_level="0" unnum="False" unprotected="False" name="Ethernet0.101" comment="Created during import of line 21" ro="False">
|
||||
<IPv4 id="id599" name="pix1:Ethernet0.101:ip" comment="Created during import of line 24" ro="False" address="192.0.2.253" netmask="255.255.255.0"/>
|
||||
<InterfaceOptions>
|
||||
<Option name="type">8021q</Option>
|
||||
<Option name="vlan_id">101</Option>
|
||||
</InterfaceOptions>
|
||||
</Interface>
|
||||
<Interface id="id425" dedicated_failover="False" dyn="False" label="dmz20" security_level="20" unnum="False" unprotected="False" name="Ethernet0.102" comment="Created during import of line 27" ro="False">
|
||||
<IPv4 id="id427" name="pix1:Ethernet0.102:ip" comment="Created during import of line 30" ro="False" address="10.0.0.253" netmask="255.255.255.0"/>
|
||||
<Interface id="id600" dedicated_failover="False" dyn="False" label="dmz20" security_level="20" unnum="False" unprotected="False" name="Ethernet0.102" comment="Created during import of line 27" ro="False">
|
||||
<IPv4 id="id602" name="pix1:Ethernet0.102:ip" comment="Created during import of line 30" ro="False" address="10.0.0.253" netmask="255.255.255.0"/>
|
||||
<InterfaceOptions>
|
||||
<Option name="type">8021q</Option>
|
||||
<Option name="vlan_id">102</Option>
|
||||
</InterfaceOptions>
|
||||
</Interface>
|
||||
</Interface>
|
||||
<Interface id="id428" dedicated_failover="False" dyn="False" label="inside" security_level="100" unnum="False" unprotected="False" name="Ethernet1" comment="Created during import of line 33" ro="False">
|
||||
<IPv4 id="id429" name="pix1:Ethernet1:ip" comment="Created during import of line 37" ro="False" address="10.1.1.206" netmask="255.255.255.0"/>
|
||||
<Interface id="id603" dedicated_failover="False" dyn="False" label="inside" security_level="100" unnum="False" unprotected="False" name="Ethernet1" comment="Created during import of line 33" ro="False">
|
||||
<IPv4 id="id604" name="pix1:Ethernet1:ip" comment="Created during import of line 37" ro="False" address="10.1.1.206" netmask="255.255.255.0"/>
|
||||
<InterfaceOptions/>
|
||||
</Interface>
|
||||
<FirewallOptions>
|
||||
@@ -1168,7 +1425,7 @@
|
||||
</FirewallOptions>
|
||||
</Firewall>
|
||||
</ObjectGroup>
|
||||
<ObjectGroup id="id459" name="Clusters" comment="" ro="False"/>
|
||||
<IntervalGroup id="id460" name="Time" comment="" ro="False"/>
|
||||
<ObjectGroup id="id634" name="Clusters" comment="" ro="False"/>
|
||||
<IntervalGroup id="id635" name="Time" comment="" ro="False"/>
|
||||
</Library>
|
||||
</FWObjectDatabase>
|
||||
|
||||
@@ -33,36 +33,25 @@ Object Group (network) outside.id12051X6282.src.net.1
|
||||
Object Group (network) outside.id12051X6282.src.net.2
|
||||
Object Group (network) network-zone-inside
|
||||
Object Group (network) network-zone-dmz20
|
||||
Ruleset: outside_in
|
||||
Ruleset: outside_in
|
||||
Ruleset: outside_in
|
||||
Ruleset: outside_in
|
||||
Ruleset: inside_out
|
||||
Ruleset: inside_out
|
||||
Ruleset: inside_out
|
||||
Ruleset: inside_out
|
||||
Ruleset: inside_out
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: id12251X6282.0
|
||||
Ruleset: id12594X2458.0
|
||||
Ruleset: nat
|
||||
Ruleset: nat
|
||||
Ruleset: nat
|
||||
Ruleset: nat
|
||||
Ruleset: nat
|
||||
Ruleset: nat
|
||||
Ruleset: nat
|
||||
Ruleset: nat
|
||||
Global address pool: number 1, interface outside, address range interface-interface, netmask 255.255.255.255
|
||||
Source translation rule ("nat" command)
|
||||
Global address pool: number 2, interface outside, address range 192.0.2.10-192.0.2.10, netmask 255.255.255.255
|
||||
Global address pool: number 2, interface outside, address range 192.0.2.11-192.0.2.15, netmask 255.255.255.255
|
||||
Global address pool: number 2, interface outside, address range 192.0.2.128-192.0.2.128, netmask 255.255.255.240
|
||||
Global address pool: number 2, interface dmz20, address range 10.0.0.128-10.0.0.128, netmask 255.255.255.240
|
||||
Source translation rule ("nat" command)
|
||||
Source translation rule ("nat" command)
|
||||
Destination translation rule ("static" command)
|
||||
Destination translation rule ("static" command)
|
||||
Destination translation rule ("static" command)
|
||||
Destination translation rule ("static" command)
|
||||
Destination translation rule ("static" command)
|
||||
Destination translation rule ("static" command)
|
||||
Destination translation rule ("static" command)
|
||||
Destination translation rule ("static" command)
|
||||
Interface Ethernet0.101 ruleset outside_in direction 'in'
|
||||
Interface Ethernet1 ruleset inside_in direction 'in'
|
||||
Interface Ethernet1 ruleset inside_out direction 'out'
|
||||
Ruleset: ssh_commands_inside
|
||||
Interface Ethernet1 ruleset ssh_commands_inside direction 'in'
|
||||
Ruleset: ssh_commands_inside
|
||||
Interface Ethernet1 ruleset ssh_commands_inside direction 'in'
|
||||
Ruleset: ssh_commands_outside
|
||||
Interface Ethernet0.101 ruleset ssh_commands_outside direction 'in'
|
||||
|
||||
@@ -129,9 +129,18 @@ failover interface ip failover 172.17.1.253 255.255.255.252 standby 172.17.1.254
|
||||
no asdm history enable
|
||||
arp timeout 14400
|
||||
|
||||
! nat-control
|
||||
! global (outside) 1 interface
|
||||
! nat (inside) 1 access-list id12251X6282.0
|
||||
nat-control
|
||||
global (outside) 1 interface
|
||||
nat (inside) 1 access-list id12251X6282.0
|
||||
|
||||
global (outside) 2 192.0.2.10
|
||||
global (outside) 2 192.0.2.11-192.0.2.15
|
||||
global (outside) 2 192.0.2.128 netmask 255.255.255.240
|
||||
global (dmz20) 2 10.0.0.128 netmask 255.255.255.240
|
||||
|
||||
nat (inside) 2 10.1.1.1 255.255.255.255
|
||||
nat (inside) 2 10.1.1.32 255.255.255.240
|
||||
|
||||
|
||||
static (inside,dmz20) 10.0.0.16 10.1.1.16 netmask 255.255.255.240
|
||||
static (inside,dmz20) 10.0.0.100 10.1.1.100 netmask 255.255.255.255
|
||||
|
||||
@@ -31,29 +31,11 @@ Warning: interface Ethernet6 was not imported because it is in "shutdown" mode
|
||||
Object Group (network) outside.id12051X6282.src.net.0
|
||||
Object Group (network) outside.id12051X6282.src.net.1
|
||||
Object Group (network) outside.id12051X6282.src.net.2
|
||||
Ruleset: outside_in
|
||||
Ruleset: outside_in
|
||||
Ruleset: outside_in
|
||||
Ruleset: outside_in
|
||||
Ruleset: inside_out
|
||||
Ruleset: inside_out
|
||||
Ruleset: inside_out
|
||||
Ruleset: inside_out
|
||||
Ruleset: inside_out
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: inside_in
|
||||
Ruleset: id12251X6282.0
|
||||
Interface Ethernet1 ruleset inside_in direction 'in'
|
||||
Interface Ethernet0.101 ruleset outside_in direction 'in'
|
||||
Interface Ethernet0.101 ruleset outside_in direction 'in'
|
||||
Interface Ethernet1 ruleset inside_in direction 'in'
|
||||
Interface Ethernet1 ruleset inside_out direction 'out'
|
||||
Ruleset: ssh_commands_inside
|
||||
Interface Ethernet1 ruleset ssh_commands_inside direction 'in'
|
||||
Ruleset: ssh_commands_inside
|
||||
Interface Ethernet1 ruleset ssh_commands_inside direction 'in'
|
||||
Ruleset: ssh_commands_outside
|
||||
Interface Ethernet0.101 ruleset ssh_commands_outside direction 'in'
|
||||
|
||||
Reference in New Issue
Block a user