NATCompiler_pf.cpp (_expand_addr): see #2455 NAT Compiler for PF

should use "(interface)" syntax to the right of "->" in NAT rules.
This now works for all interfaces, including those that have ip
addresses in fwbuilder configuration, when interface object appears in
"Translated Source" in a nat rule. When firewall object appears in
"Translated Source", it gets replaced with a set of its interfaces
which also get translated into "-> (interface)".
This commit is contained in:
Vadim Kurland
2011-06-03 18:59:44 -07:00
parent 15bab71f49
commit 6a9fdbf3af
105 changed files with 359 additions and 249 deletions
+8
View File
@@ -1,5 +1,13 @@
2011-06-03 vadim <vadim@netcitadel.com>
* NATCompiler_pf.cpp (_expand_addr): see #2455 NAT Compiler for PF
should use "(interface)" syntax to the right of "->" in NAT rules.
This now works for all interfaces, including those that have ip
addresses in fwbuilder configuration, when interface object
appears in "Translated Source" in a nat rule. When firewall object
appears in "Translated Source", it gets replaced with a set of its
interfaces which also get translated into "-> (interface)".
* NATCompiler_ipt.cpp (compile): see #2456 Added support for
single object negation in "Inbound Interface" and "Outbound
Interface" columns in compiler for iptables.