onkelbeh/fwbuilder
1
0
Fork 0
mirror of https://github.com/fwbuilder/fwbuilder synced 2026-09-13 08:29:32 +02:00
Code Issues Releases Wiki Activity

* CompilerDriver_pix_run.cpp (pixSecurityLevelChecks): see #2351

Browse Source 
Security levels of ASA and FWSM interfaces do not have to be
unique. Removed check that enforced this.
This commit is contained in:
Vadim Kurland
2011-04-14 18:58:36 -07:00
parent dbb1e8ab57
commit 14258139ee
2 changed files with 19 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files
doc/ChangeLog
+4
View File
@@ -1,5 +1,9 @@
2011-04-14 vadim <vadim@netcitadel.com> 2011-04-14 vadim <vadim@netcitadel.com>
* CompilerDriver_pix_run.cpp (pixSecurityLevelChecks): see #2351
Security levels of ASA and FWSM interfaces do not have to be
unique. Removed check that enforced this.
* IPTImporterRun.cpp (run): see #2275 Importer for iptables now * IPTImporterRun.cpp (run): see #2275 Importer for iptables now
correctly handles both "intrapositioned" ("-s ! address") and correctly handles both "intrapositioned" ("-s ! address") and
"extrapositioned" ("! -s address") negation. "extrapositioned" ("! -s address") negation.
src/cisco_lib/CompilerDriver_pix_run.cpp
+15 -14
View File
@@ -638,20 +638,21 @@ void CompilerDriver_pix::pixSecurityLevelChecks(Firewall *fw,
iface2->getOptionsObject()->getBool("cluster_interface")) iface2->getOptionsObject()->getBool("cluster_interface"))
continue; continue;
if (iface->getSecurityLevel()==iface2->getSecurityLevel()) // see #2351. Security levels do not have to be unique
{ // if (iface->getSecurityLevel()==iface2->getSecurityLevel())
QString err( // {
"Security level of each interface should be unique, " // QString err(
"however interfaces %1 (%2) and %3 (%4)" // "Security level of each interface should be unique, "
" have the same security level." // "however interfaces %1 (%2) and %3 (%4)"
); // " have the same security level."
abort(fw, NULL, NULL, // );
err.arg(iface->getName().c_str()) // abort(fw, NULL, NULL,
.arg(iface->getLabel().c_str()) // err.arg(iface->getName().c_str())
.arg(iface2->getName().c_str()) // .arg(iface->getLabel().c_str())
.arg(iface2->getLabel().c_str()).toStdString()); // .arg(iface2->getName().c_str())
throw FatalErrorInSingleRuleCompileMode(); // .arg(iface2->getLabel().c_str()).toStdString());
} // throw FatalErrorInSingleRuleCompileMode();
// }
if (iface->getLabel()==iface2->getLabel()) if (iface->getLabel()==iface2->getLabel())
{ {