onkelbeh/fwbuilder
1
0
Fork 0
mirror of https://github.com/fwbuilder/fwbuilder synced 2026-03-22 19:27:13 +01:00
Code Issues Releases Wiki Activity

see #2338 updated unit test files

Browse Source
This commit is contained in:
Vadim Kurland 2011-04-13 20:36:18 -07:00
parent d066f567f5
commit 1a9eda04a9
2 changed files with 390 additions and 366 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

740
src/unit_tests/ImporterTest/test_data/ipt.fwb
View File

@ -1,6 +1,6 @@
<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE FWObjectDatabase SYSTEM "fwbuilder.dtd">
<FWObjectDatabase xmlns="http://www.fwbuilder.org/1.0/" version="18" lastModified="1302569896" id="root">
<FWObjectDatabase xmlns="http://www.fwbuilder.org/1.0/" version="18" lastModified="1302751741" id="root">
<Library id="syslib000" color="#d4f8ff" name="Standard" comment="Standard objects" ro="True">
<AnyNetwork id="sysid0" name="Any" comment="Any Network" ro="False" address="0.0.0.0" netmask="0.0.0.0"/>
<AnyIPService id="sysid1" protocol_num="0" name="Any" comment="Any IP Service" ro="False"/>
@ -611,8 +611,8 @@
</ServiceGroup>
<ObjectGroup id="id153" name="Firewalls" comment="" ro="False">
<Firewall id="id154" host_OS="linux24" lastCompiled="0" lastInstalled="0" lastModified="0" platform="iptables" version="ge_1.2.6" name="test_fw" comment="Created during import of line 3" ro="False">
<NAT id="id686" name="NAT" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="True">
<NATRule id="id688" disabled="False" group="" position="0" action="Translate" comment="Created during import of line 257">
<NAT id="id578" name="NAT" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="True">
<NATRule id="id580" disabled="False" group="" position="0" action="Translate" comment="Created during import of line 257">
<OSrc neg="False">
<ObjectRef ref="id28"/>
</OSrc>
@ -635,11 +635,11 @@
<ObjectRef ref="sysid0"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id1889"/>
<ObjectRef ref="id1781"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id706" disabled="False" group="" position="1" action="Translate" comment="Created during import of line 258">
<NATRule id="id598" disabled="False" group="" position="1" action="Translate" comment="Created during import of line 258">
<OSrc neg="False">
<ObjectRef ref="id28"/>
</OSrc>
@ -662,11 +662,11 @@
<ObjectRef ref="sysid0"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id1890"/>
<ObjectRef ref="id1782"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id724" disabled="False" group="" position="2" action="Translate" comment="Created during import of line 259">
<NATRule id="id616" disabled="False" group="" position="2" action="Translate" comment="Created during import of line 259">
<OSrc neg="False">
<ObjectRef ref="id29"/>
</OSrc>
@ -693,7 +693,7 @@
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id742" disabled="False" group="" position="3" action="Translate" comment="Created during import of line 260">
<NATRule id="id634" disabled="False" group="" position="3" action="Translate" comment="Created during import of line 260">
<OSrc neg="False">
<ObjectRef ref="id28"/>
</OSrc>
@ -720,7 +720,7 @@
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id760" disabled="False" group="" position="4" action="Translate" comment="Created during import of line 261">
<NATRule id="id652" disabled="False" group="" position="4" action="Translate" comment="Created during import of line 261">
<OSrc neg="False">
<ObjectRef ref="id28"/>
</OSrc>
@ -747,7 +747,7 @@
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id778" disabled="False" group="" position="5" action="Translate" comment="Created during import of line 262">
<NATRule id="id670" disabled="False" group="" position="5" action="Translate" comment="Created during import of line 262">
<OSrc neg="False">
<ObjectRef ref="id12"/>
</OSrc>
@ -770,11 +770,11 @@
<ObjectRef ref="sysid0"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id1889"/>
<ObjectRef ref="id1781"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id796" disabled="False" group="" position="6" action="Translate" comment="Created during import of line 264">
<NATRule id="id688" disabled="False" group="" position="6" action="Translate" comment="Created during import of line 264">
<OSrc neg="False">
<ObjectRef ref="id28"/>
</OSrc>
@ -801,7 +801,7 @@
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id814" disabled="False" group="" position="7" action="Translate" comment="Created during import of line 266">
<NATRule id="id706" disabled="False" group="" position="7" action="Translate" comment="Created during import of line 266">
<OSrc neg="False">
<ObjectRef ref="id28"/>
</OSrc>
@ -828,7 +828,7 @@
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id832" disabled="False" group="" position="8" action="Translate" comment="Created during import of line 268">
<NATRule id="id724" disabled="False" group="" position="8" action="Translate" comment="Created during import of line 268">
<OSrc neg="False">
<ObjectRef ref="sysid0"/>
</OSrc>
@ -855,7 +855,7 @@
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id850" disabled="False" group="" position="9" action="Translate" comment="Created during import of line 269">
<NATRule id="id742" disabled="False" group="" position="9" action="Translate" comment="Created during import of line 269">
<OSrc neg="False">
<ObjectRef ref="sysid0"/>
</OSrc>
@ -882,7 +882,7 @@
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id868" disabled="False" group="" position="10" action="Translate" comment="Created during import of line 270">
<NATRule id="id760" disabled="False" group="" position="10" action="Translate" comment="Created during import of line 270">
<OSrc neg="False">
<ObjectRef ref="sysid0"/>
</OSrc>
@ -909,7 +909,7 @@
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id886" disabled="False" group="" position="11" action="Translate" comment="Created during import of line 271">
<NATRule id="id778" disabled="False" group="" position="11" action="Translate" comment="Created during import of line 271">
<OSrc neg="False">
<ObjectRef ref="sysid0"/>
</OSrc>
@ -936,7 +936,7 @@
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id904" disabled="False" group="" position="12" action="Translate" comment="Created during import of line 272">
<NATRule id="id796" disabled="False" group="" position="12" action="Translate" comment="Created during import of line 272">
<OSrc neg="False">
<ObjectRef ref="sysid0"/>
</OSrc>
@ -963,7 +963,7 @@
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id922" disabled="False" group="" position="13" action="Translate" comment="Created during import of line 273">
<NATRule id="id814" disabled="False" group="" position="13" action="Translate" comment="Created during import of line 273">
<OSrc neg="False">
<ObjectRef ref="sysid0"/>
</OSrc>
@ -990,7 +990,7 @@
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id940" disabled="False" group="" position="14" action="Translate" comment="Created during import of line 276">
<NATRule id="id832" disabled="False" group="" position="14" action="Translate" comment="Created during import of line 276">
<OSrc neg="False">
<ObjectRef ref="sysid0"/>
</OSrc>
@ -1010,14 +1010,14 @@
<ServiceRef ref="sysid1"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id1890"/>
<ObjectRef ref="id1782"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="sysid0"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id958" disabled="False" group="" position="15" action="Translate" comment="Created during import of line 279">
<NATRule id="id850" disabled="False" group="" position="15" action="Translate" comment="Created during import of line 279">
<OSrc neg="False">
<ObjectRef ref="id28"/>
</OSrc>
@ -1044,7 +1044,7 @@
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id976" disabled="False" group="" position="16" action="Translate" comment="Created during import of line 282">
<NATRule id="id868" disabled="False" group="" position="16" action="Translate" comment="Created during import of line 282">
<OSrc neg="False">
<ObjectRef ref="id28"/>
</OSrc>
@ -1071,7 +1071,7 @@
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id994" disabled="False" group="" position="17" action="Translate" comment="Created during import of line 285">
<NATRule id="id886" disabled="False" group="" position="17" action="Translate" comment="Created during import of line 285">
<OSrc neg="False">
<ObjectRef ref="id154"/>
</OSrc>
@ -1098,7 +1098,7 @@
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id1012" disabled="False" group="" position="18" action="Translate" comment="Created during import of line 286">
<NATRule id="id904" disabled="False" group="" position="18" action="Translate" comment="Created during import of line 286">
<OSrc neg="False">
<ObjectRef ref="id154"/>
</OSrc>
@ -1225,7 +1225,7 @@
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="branch_id">id1660</Option>
<Option name="branch_id">id1552</Option>
<Option name="stateless">True</Option>
<Option name="tagobject_id"></Option>
</PolicyRuleOptions>
@ -1247,7 +1247,7 @@
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="branch_id">id1674</Option>
<Option name="branch_id">id1566</Option>
<Option name="stateless">True</Option>
<Option name="tagobject_id"></Option>
</PolicyRuleOptions>
@ -1269,7 +1269,7 @@
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="branch_id">id1688</Option>
<Option name="branch_id">id1580</Option>
<Option name="stateless">True</Option>
<Option name="tagobject_id"></Option>
</PolicyRuleOptions>
@ -1285,7 +1285,7 @@
<ServiceRef ref="sysid1"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id1704"/>
<ObjectRef ref="id1596"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
@ -1311,7 +1311,7 @@
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="branch_id">id1032</Option>
<Option name="branch_id">id924</Option>
<Option name="stateless">True</Option>
<Option name="tagobject_id"></Option>
</PolicyRuleOptions>
@ -1333,7 +1333,7 @@
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="branch_id">id1705</Option>
<Option name="branch_id">id1597</Option>
<Option name="stateless">True</Option>
<Option name="tagobject_id"></Option>
</PolicyRuleOptions>
@ -1349,13 +1349,13 @@
<ServiceRef ref="id131"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id1890"/>
<ObjectRef ref="id1782"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="branch_id">id1875</Option>
<Option name="branch_id">id1767</Option>
<Option name="stateless">True</Option>
<Option name="tagobject_id"></Option>
</PolicyRuleOptions>
@ -1734,7 +1734,7 @@
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="branch_id">id1032</Option>
<Option name="branch_id">id924</Option>
<Option name="stateless">True</Option>
<Option name="tagobject_id"></Option>
</PolicyRuleOptions>
@ -1844,210 +1844,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id566" disabled="False" group="" log="False" position="34" action="Tag" direction="Inbound" comment="Chain FORWARD. &#10;Created during import of line 225">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
<Dst neg="False">
<ObjectRef ref="sysid0"/>
</Dst>
<Srv neg="False">
<ServiceRef ref="id115"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id1889"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="branch_id"></Option>
<Option name="stateless">True</Option>
<Option name="tagobject_id">id148</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id578" disabled="False" group="" log="False" position="35" action="Tag" direction="Inbound" comment="Chain FORWARD. &#10;Created during import of line 228">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
<Dst neg="False">
<ObjectRef ref="sysid0"/>
</Dst>
<Srv neg="False">
<ServiceRef ref="id115"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id1889"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="branch_id"></Option>
<Option name="stateless">True</Option>
<Option name="tagobject_id">id149</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id590" disabled="False" group="" log="False" position="36" action="Tag" direction="Inbound" comment="Chain FORWARD. &#10;Created during import of line 229">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
<Dst neg="False">
<ObjectRef ref="sysid0"/>
</Dst>
<Srv neg="False">
<ServiceRef ref="id115"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id1889"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="branch_id"></Option>
<Option name="stateless">True</Option>
<Option name="tagobject_id">id150</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id602" disabled="False" group="" log="False" position="37" action="Tag" direction="Inbound" comment="Chain PREROUTING. &#10;Created during import of line 232">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
<Dst neg="False">
<ObjectRef ref="sysid0"/>
</Dst>
<Srv neg="False">
<ServiceRef ref="id115"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id1889"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="branch_id"></Option>
<Option name="stateless">True</Option>
<Option name="tagobject_id">id148</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id614" disabled="False" group="" log="False" position="38" action="Tag" direction="Outbound" comment="Chain POSTROUTING. &#10;Created during import of line 238">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
<Dst neg="False">
<ObjectRef ref="sysid0"/>
</Dst>
<Srv neg="False">
<ServiceRef ref="id116"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id1889"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="branch_id"></Option>
<Option name="ipt_mark_connections">True</Option>
<Option name="stateless">True</Option>
<Option name="tagobject_id">id148</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id626" disabled="False" group="" log="False" position="39" action="Route" direction="Both" comment="Chain POSTROUTING. &#10;Created during import of line 242">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
<Dst neg="False">
<ObjectRef ref="sysid0"/>
</Dst>
<Srv neg="False">
<ServiceRef ref="id151"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="sysid0"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="ipt_continue">True</Option>
<Option name="ipt_gw"></Option>
<Option name="ipt_iif"></Option>
<Option name="ipt_oif">eth0</Option>
<Option name="ipt_tee">False</Option>
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id638" disabled="False" group="" log="False" position="40" action="Route" direction="Both" comment="Chain POSTROUTING. &#10;Created during import of line 243">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
<Dst neg="False">
<ObjectRef ref="sysid0"/>
</Dst>
<Srv neg="False">
<ServiceRef ref="id152"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="sysid0"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="ipt_continue">True</Option>
<Option name="ipt_gw"></Option>
<Option name="ipt_iif"></Option>
<Option name="ipt_oif">eth2</Option>
<Option name="ipt_tee">False</Option>
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id650" disabled="False" group="" log="False" position="41" action="Custom" direction="Both" comment="Chain POSTROUTING. &#10;Created during import of line 247">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
<Dst neg="False">
<ObjectRef ref="id6"/>
</Dst>
<Srv neg="False">
<ServiceRef ref="sysid1"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="sysid0"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="custom_str">-j TOS --set-tos Minimize-Delay</Option>
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id662" disabled="False" group="" log="False" position="42" action="Custom" direction="Both" comment="Chain POSTROUTING. &#10;Created during import of line 248">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
<Dst neg="False">
<ObjectRef ref="id6"/>
</Dst>
<Srv neg="False">
<ServiceRef ref="sysid1"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="sysid0"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="custom_str">-j TOS --set-tos 0x10</Option>
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id674" disabled="False" group="" log="False" position="43" action="Accept" direction="Outbound" comment="Default iptables policy in filter/OUTPUT">
<PolicyRule id="id566" disabled="False" group="" log="False" position="34" action="Accept" direction="Outbound" comment="Default iptables policy in filter/OUTPUT">
<Src neg="False">
<ObjectRef ref="id154"/>
</Src>
@ -2069,8 +1866,8 @@
</PolicyRule>
<RuleSetOptions/>
</Policy>
<Policy id="id1032" name="user_chain" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<PolicyRule id="id1034" disabled="False" group="" log="False" position="0" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 92">
<Policy id="id924" name="user_chain" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<PolicyRule id="id926" disabled="False" group="" log="False" position="0" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 92">
<Src neg="False">
<ObjectRef ref="id25"/>
</Src>
@ -2090,7 +1887,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1046" disabled="False" group="" log="False" position="1" action="Accept" direction="Inbound" comment="Chain user_chain. &#10;Created during import of line 95">
<PolicyRule id="id938" disabled="False" group="" log="False" position="1" action="Accept" direction="Inbound" comment="Chain user_chain. &#10;Created during import of line 95">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -2101,7 +1898,7 @@
<ServiceRef ref="id73"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id1890"/>
<ObjectRef ref="id1782"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
@ -2110,7 +1907,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1058" disabled="False" group="" log="False" position="2" action="Continue" direction="Both" comment="Chain user_chain. &#10;Created during import of line 98">
<PolicyRule id="id950" disabled="False" group="" log="False" position="2" action="Continue" direction="Both" comment="Chain user_chain. &#10;Created during import of line 98">
<Src neg="False">
<ObjectRef ref="id26"/>
</Src>
@ -2130,7 +1927,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1070" disabled="False" group="" log="False" position="3" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 103">
<PolicyRule id="id962" disabled="False" group="" log="False" position="3" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 103">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -2150,7 +1947,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1082" disabled="False" group="" log="False" position="4" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 105">
<PolicyRule id="id974" disabled="False" group="" log="False" position="4" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 105">
<Src neg="False">
<ObjectRef ref="id27"/>
</Src>
@ -2170,7 +1967,7 @@
<Option name="stateless">False</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1094" disabled="False" group="" log="False" position="5" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 106">
<PolicyRule id="id986" disabled="False" group="" log="False" position="5" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 106">
<Src neg="False">
<ObjectRef ref="id7"/>
</Src>
@ -2190,7 +1987,7 @@
<Option name="stateless">False</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1106" disabled="False" group="" log="False" position="6" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 107">
<PolicyRule id="id998" disabled="False" group="" log="False" position="6" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 107">
<Src neg="False">
<ObjectRef ref="id24"/>
</Src>
@ -2210,7 +2007,7 @@
<Option name="stateless">False</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1118" disabled="False" group="" log="False" position="7" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 108">
<PolicyRule id="id1010" disabled="False" group="" log="False" position="7" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 108">
<Src neg="False">
<ObjectRef ref="id24"/>
</Src>
@ -2230,7 +2027,7 @@
<Option name="stateless">False</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1130" disabled="False" group="" log="False" position="8" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 109">
<PolicyRule id="id1022" disabled="False" group="" log="False" position="8" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 109">
<Src neg="False">
<ObjectRef ref="id8"/>
</Src>
@ -2250,7 +2047,7 @@
<Option name="stateless">False</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1142" disabled="False" group="" log="False" position="9" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 110">
<PolicyRule id="id1034" disabled="False" group="" log="False" position="9" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 110">
<Src neg="False">
<ObjectRef ref="id27"/>
</Src>
@ -2270,7 +2067,7 @@
<Option name="stateless">False</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1154" disabled="False" group="" log="False" position="10" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 113">
<PolicyRule id="id1046" disabled="False" group="" log="False" position="10" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 113">
<Src neg="False">
<ObjectRef ref="id27"/>
</Src>
@ -2290,7 +2087,7 @@
<Option name="stateless">False</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1166" disabled="False" group="" log="False" position="11" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 114">
<PolicyRule id="id1058" disabled="False" group="" log="False" position="11" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 114">
<Src neg="False">
<ObjectRef ref="id27"/>
</Src>
@ -2310,7 +2107,7 @@
<Option name="stateless">False</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1178" disabled="False" group="" log="False" position="12" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 116">
<PolicyRule id="id1070" disabled="False" group="" log="False" position="12" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 116">
<Src neg="False">
<ObjectRef ref="id24"/>
</Src>
@ -2330,7 +2127,7 @@
<Option name="stateless">False</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1190" disabled="False" group="" log="False" position="13" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 117">
<PolicyRule id="id1082" disabled="False" group="" log="False" position="13" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 117">
<Src neg="False">
<ObjectRef ref="id24"/>
</Src>
@ -2350,7 +2147,7 @@
<Option name="stateless">False</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1202" disabled="False" group="" log="False" position="14" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 118">
<PolicyRule id="id1094" disabled="False" group="" log="False" position="14" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 118">
<Src neg="False">
<ObjectRef ref="id24"/>
</Src>
@ -2370,7 +2167,7 @@
<Option name="stateless">False</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1214" disabled="False" group="" log="False" position="15" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 119">
<PolicyRule id="id1106" disabled="False" group="" log="False" position="15" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 119">
<Src neg="False">
<ObjectRef ref="id24"/>
</Src>
@ -2390,7 +2187,7 @@
<Option name="stateless">False</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1226" disabled="False" group="" log="False" position="16" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 120">
<PolicyRule id="id1118" disabled="False" group="" log="False" position="16" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 120">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -2410,7 +2207,7 @@
<Option name="stateless">False</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1238" disabled="False" group="" log="False" position="17" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 122">
<PolicyRule id="id1130" disabled="False" group="" log="False" position="17" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 122">
<Src neg="False">
<ObjectRef ref="id24"/>
</Src>
@ -2430,7 +2227,7 @@
<Option name="stateless">False</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1250" disabled="False" group="" log="False" position="18" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 123">
<PolicyRule id="id1142" disabled="False" group="" log="False" position="18" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 123">
<Src neg="False">
<ObjectRef ref="id8"/>
</Src>
@ -2450,7 +2247,7 @@
<Option name="stateless">False</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1262" disabled="False" group="" log="False" position="19" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 125">
<PolicyRule id="id1154" disabled="False" group="" log="False" position="19" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 125">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -2470,7 +2267,7 @@
<Option name="stateless">False</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1274" disabled="False" group="" log="False" position="20" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 127">
<PolicyRule id="id1166" disabled="False" group="" log="False" position="20" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 127">
<Src neg="False">
<ObjectRef ref="id9"/>
</Src>
@ -2490,7 +2287,7 @@
<Option name="stateless">False</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1286" disabled="False" group="" log="False" position="21" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 128">
<PolicyRule id="id1178" disabled="False" group="" log="False" position="21" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 128">
<Src neg="False">
<ObjectRef ref="id9"/>
</Src>
@ -2510,7 +2307,7 @@
<Option name="stateless">False</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1298" disabled="False" group="" log="False" position="22" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 150">
<PolicyRule id="id1190" disabled="False" group="" log="False" position="22" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 150">
<Src neg="False">
<ObjectRef ref="id24"/>
</Src>
@ -2530,7 +2327,7 @@
<Option name="stateless">False</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1310" disabled="False" group="" log="True" position="23" action="Continue" direction="Both" comment="Chain user_chain. &#10;Created during import of line 154">
<PolicyRule id="id1202" disabled="False" group="" log="True" position="23" action="Continue" direction="Both" comment="Chain user_chain. &#10;Created during import of line 154">
<Src neg="True">
<ObjectRef ref="id25"/>
</Src>
@ -2557,7 +2354,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1322" disabled="False" group="" log="False" position="24" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 156">
<PolicyRule id="id1214" disabled="False" group="" log="False" position="24" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 156">
<Src neg="False">
<ObjectRef ref="id25"/>
</Src>
@ -2577,7 +2374,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1334" disabled="False" group="" log="False" position="25" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 157">
<PolicyRule id="id1226" disabled="False" group="" log="False" position="25" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 157">
<Src neg="False">
<ObjectRef ref="id25"/>
</Src>
@ -2597,7 +2394,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1346" disabled="False" group="" log="False" position="26" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 158">
<PolicyRule id="id1238" disabled="False" group="" log="False" position="26" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 158">
<Src neg="False">
<ObjectRef ref="id25"/>
</Src>
@ -2617,7 +2414,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1358" disabled="False" group="" log="False" position="27" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 159">
<PolicyRule id="id1250" disabled="False" group="" log="False" position="27" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 159">
<Src neg="False">
<ObjectRef ref="id25"/>
</Src>
@ -2637,7 +2434,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1370" disabled="False" group="" log="False" position="28" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 160">
<PolicyRule id="id1262" disabled="False" group="" log="False" position="28" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 160">
<Src neg="False">
<ObjectRef ref="id25"/>
</Src>
@ -2657,7 +2454,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1382" disabled="False" group="" log="False" position="29" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 161">
<PolicyRule id="id1274" disabled="False" group="" log="False" position="29" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 161">
<Src neg="False">
<ObjectRef ref="id25"/>
</Src>
@ -2677,7 +2474,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1394" disabled="False" group="" log="False" position="30" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 162">
<PolicyRule id="id1286" disabled="False" group="" log="False" position="30" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 162">
<Src neg="False">
<ObjectRef ref="id25"/>
</Src>
@ -2697,7 +2494,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1406" disabled="False" group="" log="False" position="31" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 166">
<PolicyRule id="id1298" disabled="False" group="" log="False" position="31" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 166">
<Src neg="False">
<ObjectRef ref="id25"/>
</Src>
@ -2717,7 +2514,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1418" disabled="False" group="" log="False" position="32" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 170">
<PolicyRule id="id1310" disabled="False" group="" log="False" position="32" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 170">
<Src neg="False">
<ObjectRef ref="id25"/>
</Src>
@ -2737,7 +2534,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1430" disabled="False" group="" log="False" position="33" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 173">
<PolicyRule id="id1322" disabled="False" group="" log="False" position="33" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 173">
<Src neg="False">
<ObjectRef ref="id25"/>
</Src>
@ -2757,7 +2554,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1442" disabled="False" group="" log="False" position="34" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 174">
<PolicyRule id="id1334" disabled="False" group="" log="False" position="34" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 174">
<Src neg="False">
<ObjectRef ref="id25"/>
</Src>
@ -2777,7 +2574,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1454" disabled="False" group="" log="False" position="35" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 177">
<PolicyRule id="id1346" disabled="False" group="" log="False" position="35" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 177">
<Src neg="False">
<ObjectRef ref="id25"/>
</Src>
@ -2798,7 +2595,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1467" disabled="False" group="" log="False" position="36" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 178">
<PolicyRule id="id1359" disabled="False" group="" log="False" position="36" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 178">
<Src neg="False">
<ObjectRef ref="id25"/>
</Src>
@ -2819,7 +2616,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1480" disabled="False" group="" log="False" position="37" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 181">
<PolicyRule id="id1372" disabled="False" group="" log="False" position="37" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 181">
<Src neg="False">
<ObjectRef ref="id25"/>
</Src>
@ -2839,7 +2636,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1492" disabled="False" group="" log="False" position="38" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 182">
<PolicyRule id="id1384" disabled="False" group="" log="False" position="38" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 182">
<Src neg="False">
<ObjectRef ref="id25"/>
</Src>
@ -2859,7 +2656,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1504" disabled="False" group="" log="False" position="39" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 183">
<PolicyRule id="id1396" disabled="False" group="" log="False" position="39" action="Accept" direction="Both" comment="Chain user_chain. &#10;Created during import of line 183">
<Src neg="False">
<ObjectRef ref="id25"/>
</Src>
@ -2879,7 +2676,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1516" disabled="False" group="" log="False" position="40" action="Deny" direction="Both" comment="Chain user_chain. &#10;Created during import of line 187">
<PolicyRule id="id1408" disabled="False" group="" log="False" position="40" action="Deny" direction="Both" comment="Chain user_chain. &#10;Created during import of line 187">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -2899,7 +2696,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1528" disabled="False" group="" log="False" position="41" action="Deny" direction="Both" comment="Chain user_chain. &#10;Created during import of line 190">
<PolicyRule id="id1420" disabled="False" group="" log="False" position="41" action="Deny" direction="Both" comment="Chain user_chain. &#10;Created during import of line 190">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -2919,7 +2716,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1540" disabled="False" group="" log="False" position="42" action="Branch" direction="Inbound" comment="Chain user_chain. &#10;Created during import of line 191">
<PolicyRule id="id1432" disabled="False" group="" log="False" position="42" action="Branch" direction="Inbound" comment="Chain user_chain. &#10;Created during import of line 191">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -2930,18 +2727,18 @@
<ServiceRef ref="id84"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id1890"/>
<ObjectRef ref="id1782"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="branch_id">id1891</Option>
<Option name="branch_id">id1783</Option>
<Option name="stateless">True</Option>
<Option name="tagobject_id"></Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1552" disabled="False" group="" log="False" position="43" action="Branch" direction="Both" comment="Chain user_chain. &#10;Created during import of line 195">
<PolicyRule id="id1444" disabled="False" group="" log="False" position="43" action="Branch" direction="Both" comment="Chain user_chain. &#10;Created during import of line 195">
<Src neg="False">
<ObjectRef ref="id25"/>
</Src>
@ -2958,12 +2755,12 @@
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="branch_id">id1905</Option>
<Option name="branch_id">id1797</Option>
<Option name="stateless">True</Option>
<Option name="tagobject_id"></Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1564" disabled="False" group="" log="False" position="44" action="Branch" direction="Both" comment="Chain user_chain. &#10;Created during import of line 196">
<PolicyRule id="id1456" disabled="False" group="" log="False" position="44" action="Branch" direction="Both" comment="Chain user_chain. &#10;Created during import of line 196">
<Src neg="False">
<ObjectRef ref="id25"/>
</Src>
@ -2980,12 +2777,12 @@
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="branch_id">id1919</Option>
<Option name="branch_id">id1811</Option>
<Option name="stateless">True</Option>
<Option name="tagobject_id"></Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1576" disabled="False" group="" log="False" position="45" action="Branch" direction="Both" comment="Chain user_chain. &#10;Created during import of line 197">
<PolicyRule id="id1468" disabled="False" group="" log="False" position="45" action="Branch" direction="Both" comment="Chain user_chain. &#10;Created during import of line 197">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3002,12 +2799,12 @@
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="branch_id">id1933</Option>
<Option name="branch_id">id1825</Option>
<Option name="stateless">True</Option>
<Option name="tagobject_id"></Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1588" disabled="False" group="" log="False" position="46" action="Branch" direction="Both" comment="Chain user_chain. &#10;Created during import of line 200">
<PolicyRule id="id1480" disabled="False" group="" log="False" position="46" action="Branch" direction="Both" comment="Chain user_chain. &#10;Created during import of line 200">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3024,12 +2821,12 @@
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="branch_id">id1947</Option>
<Option name="branch_id">id1839</Option>
<Option name="stateless">True</Option>
<Option name="tagobject_id"></Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1600" disabled="False" group="" log="False" position="47" action="Branch" direction="Both" comment="Chain user_chain. &#10;Created during import of line 203">
<PolicyRule id="id1492" disabled="False" group="" log="False" position="47" action="Branch" direction="Both" comment="Chain user_chain. &#10;Created during import of line 203">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3046,12 +2843,12 @@
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="branch_id">id1961</Option>
<Option name="branch_id">id1853</Option>
<Option name="stateless">True</Option>
<Option name="tagobject_id"></Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1612" disabled="False" group="" log="False" position="48" action="Branch" direction="Both" comment="Chain user_chain. &#10;Created during import of line 206&#10;Error: Original rule combines match of tcp/udp/icmp protocols with two or more module matches, such as module 'mark', 'recent' or 'length'. Use additional branches to implement this complex match.">
<PolicyRule id="id1504" disabled="False" group="" log="False" position="48" action="Branch" direction="Both" comment="Chain user_chain. &#10;Created during import of line 206&#10;Error: Original rule combines match of tcp/udp/icmp protocols with two or more module matches, such as module 'mark', 'recent' or 'length'. Use additional branches to implement this complex match.">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3068,13 +2865,13 @@
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="branch_id">id1975</Option>
<Option name="branch_id">id1867</Option>
<Option name="color">#C86E6E</Option>
<Option name="stateless">True</Option>
<Option name="tagobject_id"></Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1624" disabled="False" group="" log="False" position="49" action="Branch" direction="Both" comment="Chain user_chain. &#10;Created during import of line 207&#10;Error: Original rule combines match of tcp/udp/icmp protocols with two or more module matches, such as module 'mark', 'recent' or 'length'. Use additional branches to implement this complex match.">
<PolicyRule id="id1516" disabled="False" group="" log="False" position="49" action="Branch" direction="Both" comment="Chain user_chain. &#10;Created during import of line 207&#10;Error: Original rule combines match of tcp/udp/icmp protocols with two or more module matches, such as module 'mark', 'recent' or 'length'. Use additional branches to implement this complex match.">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3091,13 +2888,13 @@
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="branch_id">id1989</Option>
<Option name="branch_id">id1881</Option>
<Option name="color">#C86E6E</Option>
<Option name="stateless">True</Option>
<Option name="tagobject_id"></Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1636" disabled="False" group="" log="False" position="50" action="Deny" direction="Both" comment="Chain user_chain. &#10;Created during import of line 210">
<PolicyRule id="id1528" disabled="False" group="" log="False" position="50" action="Deny" direction="Both" comment="Chain user_chain. &#10;Created during import of line 210">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3117,7 +2914,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1648" disabled="False" group="" log="False" position="51" action="Deny" direction="Both" comment="Chain user_chain. &#10;Created during import of line 212">
<PolicyRule id="id1540" disabled="False" group="" log="False" position="51" action="Deny" direction="Both" comment="Chain user_chain. &#10;Created during import of line 212">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3139,8 +2936,8 @@
</PolicyRule>
<RuleSetOptions/>
</Policy>
<Policy id="id1660" name="INPUT_state_match_0" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<PolicyRule id="id1662" disabled="False" group="" log="False" position="0" action="Accept" direction="Both" comment="">
<Policy id="id1552" name="INPUT_state_match_0" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<PolicyRule id="id1554" disabled="False" group="" log="False" position="0" action="Accept" direction="Both" comment="">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3162,8 +2959,8 @@
</PolicyRule>
<RuleSetOptions/>
</Policy>
<Policy id="id1674" name="OUTPUT_established_1" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<PolicyRule id="id1676" disabled="False" group="" log="False" position="0" action="Accept" direction="Both" comment="">
<Policy id="id1566" name="OUTPUT_established_1" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<PolicyRule id="id1568" disabled="False" group="" log="False" position="0" action="Accept" direction="Both" comment="">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3185,8 +2982,8 @@
</PolicyRule>
<RuleSetOptions/>
</Policy>
<Policy id="id1688" name="OUTPUT_established_2" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<PolicyRule id="id1690" disabled="False" group="" log="False" position="0" action="Deny" direction="Both" comment="">
<Policy id="id1580" name="OUTPUT_established_2" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<PolicyRule id="id1582" disabled="False" group="" log="False" position="0" action="Deny" direction="Both" comment="">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3208,11 +3005,11 @@
</PolicyRule>
<RuleSetOptions/>
</Policy>
<Policy id="id1702" name="drop_invalid" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<Policy id="id1594" name="drop_invalid" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<RuleSetOptions/>
</Policy>
<Policy id="id1705" name="scan_checks_chain" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<PolicyRule id="id1707" disabled="False" group="" log="True" position="0" action="Continue" direction="Inbound" comment="Chain scan_checks_chain. &#10;Created during import of line 133">
<Policy id="id1597" name="scan_checks_chain" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<PolicyRule id="id1599" disabled="False" group="" log="True" position="0" action="Continue" direction="Inbound" comment="Chain scan_checks_chain. &#10;Created during import of line 133">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3223,7 +3020,7 @@
<ServiceRef ref="id91"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id1890"/>
<ObjectRef ref="id1782"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
@ -3239,7 +3036,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1719" disabled="False" group="" log="True" position="1" action="Continue" direction="Inbound" comment="Chain scan_checks_chain. &#10;Created during import of line 134">
<PolicyRule id="id1611" disabled="False" group="" log="True" position="1" action="Continue" direction="Inbound" comment="Chain scan_checks_chain. &#10;Created during import of line 134">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3250,7 +3047,7 @@
<ServiceRef ref="id92"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id1890"/>
<ObjectRef ref="id1782"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
@ -3266,7 +3063,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1731" disabled="False" group="" log="True" position="2" action="Continue" direction="Inbound" comment="Chain scan_checks_chain. &#10;Created during import of line 135">
<PolicyRule id="id1623" disabled="False" group="" log="True" position="2" action="Continue" direction="Inbound" comment="Chain scan_checks_chain. &#10;Created during import of line 135">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3277,7 +3074,7 @@
<ServiceRef ref="id93"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id1890"/>
<ObjectRef ref="id1782"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
@ -3293,7 +3090,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1743" disabled="False" group="" log="True" position="3" action="Continue" direction="Inbound" comment="Chain scan_checks_chain. &#10;Created during import of line 136">
<PolicyRule id="id1635" disabled="False" group="" log="True" position="3" action="Continue" direction="Inbound" comment="Chain scan_checks_chain. &#10;Created during import of line 136">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3304,7 +3101,7 @@
<ServiceRef ref="id94"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id1890"/>
<ObjectRef ref="id1782"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
@ -3320,7 +3117,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1755" disabled="False" group="" log="True" position="4" action="Continue" direction="Inbound" comment="Chain scan_checks_chain. &#10;Created during import of line 137">
<PolicyRule id="id1647" disabled="False" group="" log="True" position="4" action="Continue" direction="Inbound" comment="Chain scan_checks_chain. &#10;Created during import of line 137">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3331,7 +3128,7 @@
<ServiceRef ref="id95"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id1890"/>
<ObjectRef ref="id1782"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
@ -3347,7 +3144,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1767" disabled="False" group="" log="True" position="5" action="Continue" direction="Inbound" comment="Chain scan_checks_chain. &#10;Created during import of line 138">
<PolicyRule id="id1659" disabled="False" group="" log="True" position="5" action="Continue" direction="Inbound" comment="Chain scan_checks_chain. &#10;Created during import of line 138">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3358,7 +3155,7 @@
<ServiceRef ref="id96"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id1890"/>
<ObjectRef ref="id1782"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
@ -3374,7 +3171,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1779" disabled="False" group="" log="True" position="6" action="Continue" direction="Inbound" comment="Chain scan_checks_chain. &#10;Created during import of line 139">
<PolicyRule id="id1671" disabled="False" group="" log="True" position="6" action="Continue" direction="Inbound" comment="Chain scan_checks_chain. &#10;Created during import of line 139">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3385,7 +3182,7 @@
<ServiceRef ref="id97"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id1890"/>
<ObjectRef ref="id1782"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
@ -3401,7 +3198,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1791" disabled="False" group="" log="False" position="7" action="Deny" direction="Inbound" comment="Chain scan_checks_chain. &#10;Created during import of line 140">
<PolicyRule id="id1683" disabled="False" group="" log="False" position="7" action="Deny" direction="Inbound" comment="Chain scan_checks_chain. &#10;Created during import of line 140">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3412,7 +3209,7 @@
<ServiceRef ref="id91"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id1890"/>
<ObjectRef ref="id1782"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
@ -3421,7 +3218,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1803" disabled="False" group="" log="False" position="8" action="Deny" direction="Inbound" comment="Chain scan_checks_chain. &#10;Created during import of line 141">
<PolicyRule id="id1695" disabled="False" group="" log="False" position="8" action="Deny" direction="Inbound" comment="Chain scan_checks_chain. &#10;Created during import of line 141">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3432,7 +3229,7 @@
<ServiceRef ref="id92"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id1890"/>
<ObjectRef ref="id1782"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
@ -3441,7 +3238,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1815" disabled="False" group="" log="False" position="9" action="Deny" direction="Inbound" comment="Chain scan_checks_chain. &#10;Created during import of line 142">
<PolicyRule id="id1707" disabled="False" group="" log="False" position="9" action="Deny" direction="Inbound" comment="Chain scan_checks_chain. &#10;Created during import of line 142">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3452,7 +3249,7 @@
<ServiceRef ref="id93"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id1890"/>
<ObjectRef ref="id1782"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
@ -3461,7 +3258,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1827" disabled="False" group="" log="False" position="10" action="Deny" direction="Inbound" comment="Chain scan_checks_chain. &#10;Created during import of line 143">
<PolicyRule id="id1719" disabled="False" group="" log="False" position="10" action="Deny" direction="Inbound" comment="Chain scan_checks_chain. &#10;Created during import of line 143">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3472,7 +3269,7 @@
<ServiceRef ref="id94"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id1890"/>
<ObjectRef ref="id1782"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
@ -3481,7 +3278,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1839" disabled="False" group="" log="False" position="11" action="Deny" direction="Inbound" comment="Chain scan_checks_chain. &#10;Created during import of line 144">
<PolicyRule id="id1731" disabled="False" group="" log="False" position="11" action="Deny" direction="Inbound" comment="Chain scan_checks_chain. &#10;Created during import of line 144">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3492,7 +3289,7 @@
<ServiceRef ref="id95"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id1890"/>
<ObjectRef ref="id1782"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
@ -3501,7 +3298,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1851" disabled="False" group="" log="False" position="12" action="Deny" direction="Inbound" comment="Chain scan_checks_chain. &#10;Created during import of line 145">
<PolicyRule id="id1743" disabled="False" group="" log="False" position="12" action="Deny" direction="Inbound" comment="Chain scan_checks_chain. &#10;Created during import of line 145">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3512,7 +3309,7 @@
<ServiceRef ref="id96"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id1890"/>
<ObjectRef ref="id1782"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
@ -3521,7 +3318,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1863" disabled="False" group="" log="False" position="13" action="Deny" direction="Inbound" comment="Chain scan_checks_chain. &#10;Created during import of line 146">
<PolicyRule id="id1755" disabled="False" group="" log="False" position="13" action="Deny" direction="Inbound" comment="Chain scan_checks_chain. &#10;Created during import of line 146">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3532,7 +3329,7 @@
<ServiceRef ref="id97"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id1890"/>
<ObjectRef ref="id1782"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
@ -3543,8 +3340,8 @@
</PolicyRule>
<RuleSetOptions/>
</Policy>
<Policy id="id1875" name="Policy_eth1" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<PolicyRule id="id1877" disabled="False" group="" log="False" position="0" action="Accept" direction="Outbound" comment="Called from ruleset Policy, rule 10">
<Policy id="id1767" name="Policy_eth1" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<PolicyRule id="id1769" disabled="False" group="" log="False" position="0" action="Accept" direction="Outbound" comment="Called from ruleset Policy, rule 10">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3555,7 +3352,7 @@
<ServiceRef ref="sysid1"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id1889"/>
<ObjectRef ref="id1781"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
@ -3566,8 +3363,8 @@
</PolicyRule>
<RuleSetOptions/>
</Policy>
<Policy id="id1891" name="user_chain_42_mod_match" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<PolicyRule id="id1893" disabled="False" group="" log="False" position="0" action="Deny" direction="Inbound" comment="Called from ruleset user_chain, rule 42">
<Policy id="id1783" name="user_chain_42_mod_match" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<PolicyRule id="id1785" disabled="False" group="" log="False" position="0" action="Deny" direction="Inbound" comment="Called from ruleset user_chain, rule 42">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3589,8 +3386,8 @@
</PolicyRule>
<RuleSetOptions/>
</Policy>
<Policy id="id1905" name="user_chain_43_mod_match" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<PolicyRule id="id1907" disabled="False" group="" log="False" position="0" action="Deny" direction="Both" comment="Called from ruleset user_chain, rule 43">
<Policy id="id1797" name="user_chain_43_mod_match" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<PolicyRule id="id1799" disabled="False" group="" log="False" position="0" action="Deny" direction="Both" comment="Called from ruleset user_chain, rule 43">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3612,8 +3409,8 @@
</PolicyRule>
<RuleSetOptions/>
</Policy>
<Policy id="id1919" name="user_chain_44_mod_match" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<PolicyRule id="id1921" disabled="False" group="" log="False" position="0" action="Deny" direction="Both" comment="Called from ruleset user_chain, rule 44">
<Policy id="id1811" name="user_chain_44_mod_match" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<PolicyRule id="id1813" disabled="False" group="" log="False" position="0" action="Deny" direction="Both" comment="Called from ruleset user_chain, rule 44">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3635,8 +3432,8 @@
</PolicyRule>
<RuleSetOptions/>
</Policy>
<Policy id="id1933" name="user_chain_45_mod_match" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<PolicyRule id="id1935" disabled="False" group="" log="False" position="0" action="Deny" direction="Both" comment="Called from ruleset user_chain, rule 45">
<Policy id="id1825" name="user_chain_45_mod_match" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<PolicyRule id="id1827" disabled="False" group="" log="False" position="0" action="Deny" direction="Both" comment="Called from ruleset user_chain, rule 45">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3658,8 +3455,8 @@
</PolicyRule>
<RuleSetOptions/>
</Policy>
<Policy id="id1947" name="user_chain_46_mod_match" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<PolicyRule id="id1949" disabled="False" group="" log="False" position="0" action="Tag" direction="Both" comment="Called from ruleset user_chain, rule 46">
<Policy id="id1839" name="user_chain_46_mod_match" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<PolicyRule id="id1841" disabled="False" group="" log="False" position="0" action="Tag" direction="Both" comment="Called from ruleset user_chain, rule 46">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3683,8 +3480,8 @@
</PolicyRule>
<RuleSetOptions/>
</Policy>
<Policy id="id1961" name="user_chain_47_mod_match" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<PolicyRule id="id1963" disabled="False" group="" log="False" position="0" action="Tag" direction="Both" comment="Called from ruleset user_chain, rule 47">
<Policy id="id1853" name="user_chain_47_mod_match" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<PolicyRule id="id1855" disabled="False" group="" log="False" position="0" action="Tag" direction="Both" comment="Called from ruleset user_chain, rule 47">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3708,8 +3505,8 @@
</PolicyRule>
<RuleSetOptions/>
</Policy>
<Policy id="id1975" name="user_chain_48_mod_match" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<PolicyRule id="id1977" disabled="False" group="" log="False" position="0" action="Accept" direction="Both" comment="Called from ruleset user_chain, rule 48">
<Policy id="id1867" name="user_chain_48_mod_match" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<PolicyRule id="id1869" disabled="False" group="" log="False" position="0" action="Accept" direction="Both" comment="Called from ruleset user_chain, rule 48">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3731,8 +3528,8 @@
</PolicyRule>
<RuleSetOptions/>
</Policy>
<Policy id="id1989" name="user_chain_49_mod_match" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<PolicyRule id="id1991" disabled="False" group="" log="False" position="0" action="Accept" direction="Both" comment="Called from ruleset user_chain, rule 49">
<Policy id="id1881" name="user_chain_49_mod_match" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<PolicyRule id="id1883" disabled="False" group="" log="False" position="0" action="Accept" direction="Both" comment="Called from ruleset user_chain, rule 49">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3754,8 +3551,219 @@
</PolicyRule>
<RuleSetOptions/>
</Policy>
<Policy id="id2003" name="Mangle" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="True">
<PolicyRule id="id2005" disabled="False" group="" log="False" position="0" action="Accept" direction="Both" comment="Warning: Line 220: Can not reproduce default action in table 'mangle' chain 'FORWARD'. (Generated rule may not generate equivalent iptables command when compiled)">
<Policy id="id1895" name="Mangle" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="True">
<PolicyRule id="id1897" disabled="False" group="" log="False" position="0" action="Tag" direction="Inbound" comment="Error: Fwbuilder can not reproduce iptables rule in the table 'mangle', chain FORWARD&#10;Chain FORWARD. &#10;Created during import of line 225&#10;Error: Fwbuilder can not reproduce iptables rule in the table 'mangle', chain FORWARD">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
<Dst neg="False">
<ObjectRef ref="sysid0"/>
</Dst>
<Srv neg="False">
<ServiceRef ref="id115"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id1781"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="branch_id"></Option>
<Option name="color">#C86E6E</Option>
<Option name="stateless">True</Option>
<Option name="tagobject_id">id148</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1909" disabled="False" group="" log="False" position="1" action="Tag" direction="Inbound" comment="Error: Fwbuilder can not reproduce iptables rule in the table 'mangle', chain FORWARD&#10;Chain FORWARD. &#10;Created during import of line 228&#10;Error: Fwbuilder can not reproduce iptables rule in the table 'mangle', chain FORWARD">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
<Dst neg="False">
<ObjectRef ref="sysid0"/>
</Dst>
<Srv neg="False">
<ServiceRef ref="id115"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id1781"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="branch_id"></Option>
<Option name="color">#C86E6E</Option>
<Option name="stateless">True</Option>
<Option name="tagobject_id">id149</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1921" disabled="False" group="" log="False" position="2" action="Tag" direction="Inbound" comment="Error: Fwbuilder can not reproduce iptables rule in the table 'mangle', chain FORWARD&#10;Chain FORWARD. &#10;Created during import of line 229&#10;Error: Fwbuilder can not reproduce iptables rule in the table 'mangle', chain FORWARD">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
<Dst neg="False">
<ObjectRef ref="sysid0"/>
</Dst>
<Srv neg="False">
<ServiceRef ref="id115"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id1781"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="branch_id"></Option>
<Option name="color">#C86E6E</Option>
<Option name="stateless">True</Option>
<Option name="tagobject_id">id150</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1933" disabled="False" group="" log="False" position="3" action="Tag" direction="Inbound" comment="Chain PREROUTING. &#10;Created during import of line 232">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
<Dst neg="False">
<ObjectRef ref="sysid0"/>
</Dst>
<Srv neg="False">
<ServiceRef ref="id115"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id1781"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="branch_id"></Option>
<Option name="stateless">True</Option>
<Option name="tagobject_id">id148</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1945" disabled="False" group="" log="False" position="4" action="Tag" direction="Outbound" comment="Error: Fwbuilder can not reproduce iptables rule in the table 'mangle', chain POSTROUTING&#10;Chain POSTROUTING. &#10;Created during import of line 238&#10;Error: Fwbuilder can not reproduce iptables rule in the table 'mangle', chain POSTROUTING">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
<Dst neg="False">
<ObjectRef ref="sysid0"/>
</Dst>
<Srv neg="False">
<ServiceRef ref="id116"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id1781"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="branch_id"></Option>
<Option name="color">#C86E6E</Option>
<Option name="ipt_mark_connections">True</Option>
<Option name="stateless">True</Option>
<Option name="tagobject_id">id148</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1957" disabled="False" group="" log="False" position="5" action="Route" direction="Both" comment="Error: Fwbuilder can not reproduce iptables rule in the table 'mangle', chain POSTROUTING&#10;Chain POSTROUTING. &#10;Created during import of line 242&#10;Error: Fwbuilder can not reproduce iptables rule in the table 'mangle', chain POSTROUTING">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
<Dst neg="False">
<ObjectRef ref="sysid0"/>
</Dst>
<Srv neg="False">
<ServiceRef ref="id151"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="sysid0"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="color">#C86E6E</Option>
<Option name="ipt_continue">True</Option>
<Option name="ipt_gw"></Option>
<Option name="ipt_iif"></Option>
<Option name="ipt_oif">eth0</Option>
<Option name="ipt_tee">False</Option>
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1969" disabled="False" group="" log="False" position="6" action="Route" direction="Both" comment="Error: Fwbuilder can not reproduce iptables rule in the table 'mangle', chain POSTROUTING&#10;Chain POSTROUTING. &#10;Created during import of line 243&#10;Error: Fwbuilder can not reproduce iptables rule in the table 'mangle', chain POSTROUTING">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
<Dst neg="False">
<ObjectRef ref="sysid0"/>
</Dst>
<Srv neg="False">
<ServiceRef ref="id152"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="sysid0"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="color">#C86E6E</Option>
<Option name="ipt_continue">True</Option>
<Option name="ipt_gw"></Option>
<Option name="ipt_iif"></Option>
<Option name="ipt_oif">eth2</Option>
<Option name="ipt_tee">False</Option>
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1981" disabled="False" group="" log="False" position="7" action="Custom" direction="Both" comment="Error: Fwbuilder can not reproduce iptables rule in the table 'mangle', chain POSTROUTING&#10;Chain POSTROUTING. &#10;Created during import of line 247&#10;Error: Fwbuilder can not reproduce iptables rule in the table 'mangle', chain POSTROUTING">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
<Dst neg="False">
<ObjectRef ref="id6"/>
</Dst>
<Srv neg="False">
<ServiceRef ref="sysid1"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="sysid0"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="color">#C86E6E</Option>
<Option name="custom_str">-j TOS --set-tos Minimize-Delay</Option>
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1993" disabled="False" group="" log="False" position="8" action="Custom" direction="Both" comment="Error: Fwbuilder can not reproduce iptables rule in the table 'mangle', chain POSTROUTING&#10;Chain POSTROUTING. &#10;Created during import of line 248&#10;Error: Fwbuilder can not reproduce iptables rule in the table 'mangle', chain POSTROUTING">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
<Dst neg="False">
<ObjectRef ref="id6"/>
</Dst>
<Srv neg="False">
<ServiceRef ref="sysid1"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="sysid0"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="color">#C86E6E</Option>
<Option name="custom_str">-j TOS --set-tos 0x10</Option>
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id2005" disabled="False" group="" log="False" position="9" action="Accept" direction="Both" comment="Warning: Line 220: Can not reproduce default action in table 'mangle' chain 'FORWARD'. (Generated rule may not generate equivalent iptables command when compiled)">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3776,7 +3784,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id2017" disabled="False" group="" log="False" position="1" action="Accept" direction="Inbound" comment="Warning: Line 219: Can not reproduce default action in table 'mangle' chain 'INPUT'. (Generated rule may not generate equivalent iptables command when compiled)">
<PolicyRule id="id2017" disabled="False" group="" log="False" position="10" action="Accept" direction="Inbound" comment="Warning: Line 219: Can not reproduce default action in table 'mangle' chain 'INPUT'. (Generated rule may not generate equivalent iptables command when compiled)">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3797,7 +3805,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id2029" disabled="False" group="" log="False" position="2" action="Accept" direction="Outbound" comment="Default iptables policy in mangle/OUTPUT">
<PolicyRule id="id2029" disabled="False" group="" log="False" position="11" action="Accept" direction="Outbound" comment="Default iptables policy in mangle/OUTPUT">
<Src neg="False">
<ObjectRef ref="id154"/>
</Src>
@ -3817,7 +3825,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id2041" disabled="False" group="" log="False" position="3" action="Accept" direction="Outbound" comment="Default iptables policy in mangle/POSTROUTING">
<PolicyRule id="id2041" disabled="False" group="" log="False" position="12" action="Accept" direction="Outbound" comment="Default iptables policy in mangle/POSTROUTING">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3837,7 +3845,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id2053" disabled="False" group="" log="False" position="4" action="Accept" direction="Inbound" comment="Default iptables policy in mangle/PREROUTING">
<PolicyRule id="id2053" disabled="False" group="" log="False" position="13" action="Accept" direction="Inbound" comment="Default iptables policy in mangle/PREROUTING">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3861,12 +3869,12 @@
<Option name="mangle_only_rule_set">True</Option>
</RuleSetOptions>
</Policy>
<Routing id="id1030" name="Routing" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="True">
<Routing id="id922" name="Routing" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="True">
<RuleSetOptions/>
</Routing>
<Interface id="id1704" dedicated_failover="False" dyn="False" security_level="0" unnum="True" unprotected="False" name="lo" comment="Created during import of line 37" ro="False"/>
<Interface id="id1889" dedicated_failover="False" dyn="False" security_level="0" unnum="True" unprotected="False" name="eth1" comment="Created during import of line 42" ro="False"/>
<Interface id="id1890" dedicated_failover="False" dyn="False" security_level="0" unnum="True" unprotected="False" name="eth0" comment="Created during import of line 42" ro="False"/>
<Interface id="id1596" dedicated_failover="False" dyn="False" security_level="0" unnum="True" unprotected="False" name="lo" comment="Created during import of line 37" ro="False"/>
<Interface id="id1781" dedicated_failover="False" dyn="False" security_level="0" unnum="True" unprotected="False" name="eth1" comment="Created during import of line 42" ro="False"/>
<Interface id="id1782" dedicated_failover="False" dyn="False" security_level="0" unnum="True" unprotected="False" name="eth0" comment="Created during import of line 42" ro="False"/>
<Interface id="id2065" dedicated_failover="False" dyn="False" security_level="0" unnum="True" unprotected="False" name="eth2" comment="Created during import of line 243" ro="False"/>
<Interface id="id2066" dedicated_failover="False" dyn="False" security_level="0" unnum="True" unprotected="False" name="eth+" comment="Created during import of line 259" ro="False"/>
<Management address="0.0.0.0">

16
src/unit_tests/ImporterTest/test_data/ipt.output
View File

@ -47,9 +47,25 @@
221: Default action: Accept
222: New ruleset: mangle / POSTROUTING
222: Default action: Accept
225: Error: Fwbuilder can not reproduce iptables rule in the table 'mangle', chain FORWARD
225: Error: Error: Fwbuilder can not reproduce iptables rule in the table 'mangle', chain FORWARD
228: Error: Fwbuilder can not reproduce iptables rule in the table 'mangle', chain FORWARD
228: Error: Error: Fwbuilder can not reproduce iptables rule in the table 'mangle', chain FORWARD
229: Error: Fwbuilder can not reproduce iptables rule in the table 'mangle', chain FORWARD
229: Error: Error: Fwbuilder can not reproduce iptables rule in the table 'mangle', chain FORWARD
235: Warning: Skipping command with '-j CONNMARK --restore-mark' This rule is generated automatically.
238: Error: Fwbuilder can not reproduce iptables rule in the table 'mangle', chain POSTROUTING
238: Error: Error: Fwbuilder can not reproduce iptables rule in the table 'mangle', chain POSTROUTING
239: Warning: Turned option on in previous rule with action Mark for '-j CONNMARK --save-mark'
242: Error: Fwbuilder can not reproduce iptables rule in the table 'mangle', chain POSTROUTING
242: Error: Error: Fwbuilder can not reproduce iptables rule in the table 'mangle', chain POSTROUTING
243: New interface: eth2
243: Error: Fwbuilder can not reproduce iptables rule in the table 'mangle', chain POSTROUTING
243: Error: Error: Fwbuilder can not reproduce iptables rule in the table 'mangle', chain POSTROUTING
247: Error: Fwbuilder can not reproduce iptables rule in the table 'mangle', chain POSTROUTING
247: Error: Error: Fwbuilder can not reproduce iptables rule in the table 'mangle', chain POSTROUTING
248: Error: Fwbuilder can not reproduce iptables rule in the table 'mangle', chain POSTROUTING
248: Error: Error: Fwbuilder can not reproduce iptables rule in the table 'mangle', chain POSTROUTING
253: New ruleset: nat / PREROUTING
253: Default action: Accept
254: New ruleset: nat / POSTROUTING