diff --git a/doc/ChangeLog b/doc/ChangeLog index 8056336df..a4e357edb 100644 --- a/doc/ChangeLog +++ b/doc/ChangeLog @@ -1,5 +1,11 @@ 2011-01-20 vadim + * PolicyCompiler_pix.cpp (compile): See #1965 "ASA Policy - PIX + 6.1 configurations use object groups". Policy compiler for PIX is + now aware that object-group statement was introduced in PIX v6.2 + and avoids using object-groups when firewall object version is set + to 6.1 + * NamedObjectsAndGroupsSupport.cpp (processNext): made names automatically assigned to object-groups in generated PIX configuration shorter by removing interface label prefix. diff --git a/src/cisco_lib/PolicyCompiler_pix.cpp b/src/cisco_lib/PolicyCompiler_pix.cpp index b85be86d5..36276f6eb 100644 --- a/src/cisco_lib/PolicyCompiler_pix.cpp +++ b/src/cisco_lib/PolicyCompiler_pix.cpp @@ -421,11 +421,15 @@ void PolicyCompiler_pix::compile() string vers = fw->getStr("version"); string platform = fw->getStr("platform"); - bool outbound_acl_supported = Resources::platform_res[platform]->getResourceBool( + bool outbound_acl_supported = Resources::platform_res[platform]->getResourceBool( string("/FWBuilderResources/Target/options/")+ "version_"+vers+ "/pix_outbound_acl_supported"); bool generate_out_acl = fw->getOptionsObject()->getBool("pix_generate_out_acl"); + bool object_groups_supported = Resources::platform_res[platform]->getResourceBool( + string("/FWBuilderResources/Target/options/")+ + "version_"+vers+ + "/pix_object_groups_supported"); if (outbound_acl_supported && !generate_out_acl) { @@ -629,13 +633,20 @@ void PolicyCompiler_pix::compile() add( new checkForObjectsWithErrors( "check if we have objects with errors in rule elements")); + if (object_groups_supported) + { // add( new AvoidObjectGroup("avoid object groups for certain cases")); - add( new CreateObjectGroupsForSrc("create object groups for Src", - named_objects_manager)); - add( new CreateObjectGroupsForDst("create object groups for Dst", - named_objects_manager)); - add( new CreateObjectGroupsForSrv("create object groups for Srv", - named_objects_manager)); + add( new CreateObjectGroupsForSrc("create object groups for Src", + named_objects_manager)); + add( new CreateObjectGroupsForDst("create object groups for Dst", + named_objects_manager)); + add( new CreateObjectGroupsForSrv("create object groups for Srv", + named_objects_manager)); + } else + { + add( new ConvertToAtomic ("convert to atomic rules" )); + } + add( new simplePrintProgress()); @@ -651,6 +662,7 @@ void PolicyCompiler_pix::compile() add( new printObjectGroups( "generate code for object groups", named_objects_manager)); + add( new PrintRule("generate code for ACLs")); add( new simplePrintProgress()); diff --git a/src/res/platform/fwsm.xml b/src/res/platform/fwsm.xml index d7f62da8f..8c6d7e21b 100644 --- a/src/res/platform/fwsm.xml +++ b/src/res/platform/fwsm.xml @@ -46,6 +46,8 @@ false true false + true + clear access-list clear object-group @@ -140,6 +142,8 @@ nameif %in %il security%sl false true false + true + clear config access-list clear config object-group diff --git a/src/res/platform/pix.xml b/src/res/platform/pix.xml index 57ca2a09e..d8837d3a6 100644 --- a/src/res/platform/pix.xml +++ b/src/res/platform/pix.xml @@ -46,6 +46,7 @@ true false false + false False @@ -130,6 +131,7 @@ true false false + true False @@ -214,6 +216,7 @@ false false false + true False @@ -298,6 +301,7 @@ false true true + true False @@ -383,6 +387,7 @@ false true true + true True @@ -468,6 +473,7 @@ false true true + true True @@ -554,6 +560,7 @@ false true true + true True diff --git a/test/pix/cluster1-1_pix1.fw.orig b/test/pix/cluster1-1_pix1.fw.orig index c483d30aa..849d1f398 100755 --- a/test/pix/cluster1-1_pix1.fw.orig +++ b/test/pix/cluster1-1_pix1.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3440 ! -! Generated Thu Jan 20 09:48:31 2011 PST by vadim +! Generated Thu Jan 20 10:08:20 2011 PST by vadim ! ! Compiled for pix 7.0 ! Outbound ACLs: supported diff --git a/test/pix/cluster1-1_pix2.fw.orig b/test/pix/cluster1-1_pix2.fw.orig index d4712961e..d563db905 100755 --- a/test/pix/cluster1-1_pix2.fw.orig +++ b/test/pix/cluster1-1_pix2.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3440 ! -! Generated Thu Jan 20 09:48:31 2011 PST by vadim +! Generated Thu Jan 20 10:08:20 2011 PST by vadim ! ! Compiled for pix 7.0 ! Outbound ACLs: supported diff --git a/test/pix/cluster1_pix1.fw.orig b/test/pix/cluster1_pix1.fw.orig index bc8580cdd..aa8d28c02 100755 --- a/test/pix/cluster1_pix1.fw.orig +++ b/test/pix/cluster1_pix1.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3440 ! -! Generated Thu Jan 20 09:48:31 2011 PST by vadim +! Generated Thu Jan 20 10:08:20 2011 PST by vadim ! ! Compiled for pix 7.0 ! Outbound ACLs: supported diff --git a/test/pix/cluster1_pix2.fw.orig b/test/pix/cluster1_pix2.fw.orig index d8d0173bf..0b827c00d 100755 --- a/test/pix/cluster1_pix2.fw.orig +++ b/test/pix/cluster1_pix2.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3440 ! -! Generated Thu Jan 20 09:48:31 2011 PST by vadim +! Generated Thu Jan 20 10:08:20 2011 PST by vadim ! ! Compiled for pix 7.0 ! Outbound ACLs: supported diff --git a/test/pix/firewall.fw.orig b/test/pix/firewall.fw.orig index 68bc58bfa..a73937df4 100755 --- a/test/pix/firewall.fw.orig +++ b/test/pix/firewall.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3440 ! -! Generated Thu Jan 20 09:48:17 2011 PST by vadim +! Generated Thu Jan 20 10:08:05 2011 PST by vadim ! ! Compiled for pix 6.2 ! Outbound ACLs: not supported diff --git a/test/pix/firewall1.fw.orig b/test/pix/firewall1.fw.orig index b485f527c..827c9c6a0 100755 --- a/test/pix/firewall1.fw.orig +++ b/test/pix/firewall1.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3440 ! -! Generated Thu Jan 20 09:48:17 2011 PST by vadim +! Generated Thu Jan 20 10:08:05 2011 PST by vadim ! ! Compiled for pix 6.1 ! Outbound ACLs: not supported @@ -67,11 +67,6 @@ floodguard disable !################ - -object-group icmp-type id3D50B022.srv.icmp.0 - icmp-object 8 - icmp-object 11 -exit ! ! Rule 2 (eth1) ! Anti-spoofing rule @@ -83,18 +78,22 @@ access-list outside_acl_in deny ip 192.168.1.0 255.255.255.0 any access-list inside_acl_in permit ip 192.168.1.0 255.255.255.0 any ! ! Rule 4 (eth1) -icmp permit any 8 outside -icmp permit any 11 outside -access-list outside_acl_in permit icmp any interface outside object-group id3D50B022.srv.icmp.0 +icmp permit any 8 outside +access-list outside_acl_in permit icmp any interface outside 8 +icmp permit any 11 outside +access-list outside_acl_in permit icmp any interface outside 11 ! ! Rule 5 (eth1) -access-list outside_acl_in permit icmp any any object-group id3D50B022.srv.icmp.0 +access-list outside_acl_in permit icmp any any 8 +access-list outside_acl_in permit icmp any any 11 ! ! Rule 6 (eth1,eth2) -access-list outside_acl_in permit icmp any interface outside object-group id3D50B022.srv.icmp.0 -icmp permit any 8 dmz -icmp permit any 11 dmz -access-list dmz_acl_in permit icmp any host 192.168.2.1 object-group id3D50B022.srv.icmp.0 +access-list outside_acl_in permit icmp any interface outside 8 +access-list outside_acl_in permit icmp any interface outside 11 +icmp permit any 8 dmz +access-list dmz_acl_in permit icmp any host 192.168.2.1 8 +icmp permit any 11 dmz +access-list dmz_acl_in permit icmp any host 192.168.2.1 11 ! ! Rule 9 (global) telnet 0.0.0.0 0.0.0.0 inside diff --git a/test/pix/firewall10.fw.orig b/test/pix/firewall10.fw.orig index 716045a20..2f0cfa336 100755 --- a/test/pix/firewall10.fw.orig +++ b/test/pix/firewall10.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3440 ! -! Generated Thu Jan 20 09:48:18 2011 PST by vadim +! Generated Thu Jan 20 10:08:06 2011 PST by vadim ! ! Compiled for pix 6.3 ! Outbound ACLs: not supported diff --git a/test/pix/firewall11.fw.orig b/test/pix/firewall11.fw.orig index 5480ab575..14ce90a5f 100755 --- a/test/pix/firewall11.fw.orig +++ b/test/pix/firewall11.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3440 ! -! Generated Thu Jan 20 09:48:18 2011 PST by vadim +! Generated Thu Jan 20 10:08:06 2011 PST by vadim ! ! Compiled for pix 6.2 ! Outbound ACLs: not supported diff --git a/test/pix/firewall12.fw.orig b/test/pix/firewall12.fw.orig index ca4a1f952..3ecb9b568 100755 --- a/test/pix/firewall12.fw.orig +++ b/test/pix/firewall12.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3440 ! -! Generated Thu Jan 20 09:48:19 2011 PST by vadim +! Generated Thu Jan 20 10:08:07 2011 PST by vadim ! ! Compiled for pix 6.3 ! Outbound ACLs: not supported diff --git a/test/pix/firewall13.fw.orig b/test/pix/firewall13.fw.orig index f8ccd0a9b..719393175 100755 --- a/test/pix/firewall13.fw.orig +++ b/test/pix/firewall13.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3440 ! -! Generated Thu Jan 20 09:48:19 2011 PST by vadim +! Generated Thu Jan 20 10:08:07 2011 PST by vadim ! ! Compiled for pix 6.3 ! Outbound ACLs: not supported diff --git a/test/pix/firewall14.fw.orig b/test/pix/firewall14.fw.orig index 542d57a3c..4b0fab5f1 100755 --- a/test/pix/firewall14.fw.orig +++ b/test/pix/firewall14.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3440 ! -! Generated Thu Jan 20 09:48:20 2011 PST by vadim +! Generated Thu Jan 20 10:08:08 2011 PST by vadim ! ! Compiled for pix 6.3 ! Outbound ACLs: not supported diff --git a/test/pix/firewall2.fw.orig b/test/pix/firewall2.fw.orig index 62d7437e9..12b8c280d 100755 --- a/test/pix/firewall2.fw.orig +++ b/test/pix/firewall2.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3440 ! -! Generated Thu Jan 20 09:48:20 2011 PST by vadim +! Generated Thu Jan 20 10:08:08 2011 PST by vadim ! ! Compiled for pix 6.3 ! Outbound ACLs: not supported diff --git a/test/pix/firewall20.fw.orig b/test/pix/firewall20.fw.orig index 1f43946f4..79e5e0bdc 100755 --- a/test/pix/firewall20.fw.orig +++ b/test/pix/firewall20.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3440 ! -! Generated Thu Jan 20 09:48:21 2011 PST by vadim +! Generated Thu Jan 20 10:08:09 2011 PST by vadim ! ! Compiled for pix 6.3 ! Outbound ACLs: not supported diff --git a/test/pix/firewall21-1.fw.orig b/test/pix/firewall21-1.fw.orig index cc8a71f7f..891163568 100755 --- a/test/pix/firewall21-1.fw.orig +++ b/test/pix/firewall21-1.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3440 ! -! Generated Thu Jan 20 09:48:21 2011 PST by vadim +! Generated Thu Jan 20 10:08:09 2011 PST by vadim ! ! Compiled for pix 6.3 ! Outbound ACLs: not supported diff --git a/test/pix/firewall21.fw.orig b/test/pix/firewall21.fw.orig index 01ebab7c3..8a2c2698b 100755 --- a/test/pix/firewall21.fw.orig +++ b/test/pix/firewall21.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3440 ! -! Generated Thu Jan 20 09:48:21 2011 PST by vadim +! Generated Thu Jan 20 10:08:09 2011 PST by vadim ! ! Compiled for pix 7.0 ! Outbound ACLs: supported diff --git a/test/pix/firewall22.fw.orig b/test/pix/firewall22.fw.orig index c4e6cf430..978a79465 100755 --- a/test/pix/firewall22.fw.orig +++ b/test/pix/firewall22.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3440 ! -! Generated Thu Jan 20 09:48:21 2011 PST by vadim +! Generated Thu Jan 20 10:08:10 2011 PST by vadim ! ! Compiled for pix 7.0 ! Outbound ACLs: supported diff --git a/test/pix/firewall3.fw.orig b/test/pix/firewall3.fw.orig index 67c9bec45..aca948145 100755 --- a/test/pix/firewall3.fw.orig +++ b/test/pix/firewall3.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3440 ! -! Generated Thu Jan 20 09:48:22 2011 PST by vadim +! Generated Thu Jan 20 10:08:10 2011 PST by vadim ! ! Compiled for pix 6.2 ! Outbound ACLs: not supported diff --git a/test/pix/firewall33.fw.orig b/test/pix/firewall33.fw.orig index 9cfe01f5f..c44ca085d 100755 --- a/test/pix/firewall33.fw.orig +++ b/test/pix/firewall33.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3440 ! -! Generated Thu Jan 20 09:48:22 2011 PST by vadim +! Generated Thu Jan 20 10:08:10 2011 PST by vadim ! ! Compiled for pix 6.3 ! Outbound ACLs: not supported diff --git a/test/pix/firewall34.fw.orig b/test/pix/firewall34.fw.orig index 30ab14345..cf3a875ec 100755 --- a/test/pix/firewall34.fw.orig +++ b/test/pix/firewall34.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3440 ! -! Generated Thu Jan 20 09:48:23 2011 PST by vadim +! Generated Thu Jan 20 10:08:11 2011 PST by vadim ! ! Compiled for pix 6.3 ! Outbound ACLs: not supported diff --git a/test/pix/firewall4.fw.orig b/test/pix/firewall4.fw.orig index f97c451d7..3b7066507 100755 --- a/test/pix/firewall4.fw.orig +++ b/test/pix/firewall4.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3440 ! -! Generated Thu Jan 20 09:48:23 2011 PST by vadim +! Generated Thu Jan 20 10:08:11 2011 PST by vadim ! ! Compiled for pix 6.2 ! Outbound ACLs: not supported diff --git a/test/pix/firewall50.fw.orig b/test/pix/firewall50.fw.orig index 36fc18778..95edc00a9 100755 --- a/test/pix/firewall50.fw.orig +++ b/test/pix/firewall50.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3440 ! -! Generated Thu Jan 20 09:48:24 2011 PST by vadim +! Generated Thu Jan 20 10:08:12 2011 PST by vadim ! ! Compiled for pix 7.0 ! Outbound ACLs: supported diff --git a/test/pix/firewall6.fw.orig b/test/pix/firewall6.fw.orig index 4184594f3..f8137404f 100755 --- a/test/pix/firewall6.fw.orig +++ b/test/pix/firewall6.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3440 ! -! Generated Thu Jan 20 09:48:24 2011 PST by vadim +! Generated Thu Jan 20 10:08:12 2011 PST by vadim ! ! Compiled for pix 6.2 ! Outbound ACLs: not supported diff --git a/test/pix/firewall8.fw.orig b/test/pix/firewall8.fw.orig index ee32812f3..018ee9fc3 100755 --- a/test/pix/firewall8.fw.orig +++ b/test/pix/firewall8.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3440 ! -! Generated Thu Jan 20 09:48:25 2011 PST by vadim +! Generated Thu Jan 20 10:08:13 2011 PST by vadim ! ! Compiled for pix 6.2 ! Outbound ACLs: not supported diff --git a/test/pix/firewall80.fw.orig b/test/pix/firewall80.fw.orig index 8b7ba2f33..fe092821f 100755 --- a/test/pix/firewall80.fw.orig +++ b/test/pix/firewall80.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3440 ! -! Generated Thu Jan 20 09:48:25 2011 PST by vadim +! Generated Thu Jan 20 10:08:13 2011 PST by vadim ! ! Compiled for pix 8.2 ! Outbound ACLs: supported diff --git a/test/pix/firewall81.fw.orig b/test/pix/firewall81.fw.orig index 130246e02..399045c8c 100755 --- a/test/pix/firewall81.fw.orig +++ b/test/pix/firewall81.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3440 ! -! Generated Thu Jan 20 09:48:25 2011 PST by vadim +! Generated Thu Jan 20 10:08:14 2011 PST by vadim ! ! Compiled for pix 8.3 ! Outbound ACLs: supported diff --git a/test/pix/firewall82.fw.orig b/test/pix/firewall82.fw.orig index 334372c13..066069db9 100755 --- a/test/pix/firewall82.fw.orig +++ b/test/pix/firewall82.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3440 ! -! Generated Thu Jan 20 09:48:26 2011 PST by vadim +! Generated Thu Jan 20 10:08:14 2011 PST by vadim ! ! Compiled for pix 8.3 ! Outbound ACLs: supported diff --git a/test/pix/firewall83.fw.orig b/test/pix/firewall83.fw.orig index 9c945b8c9..44ae52d3b 100755 --- a/test/pix/firewall83.fw.orig +++ b/test/pix/firewall83.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3440 ! -! Generated Thu Jan 20 09:48:26 2011 PST by vadim +! Generated Thu Jan 20 10:08:14 2011 PST by vadim ! ! Compiled for pix 8.3 ! Outbound ACLs: supported diff --git a/test/pix/firewall9.fw.orig b/test/pix/firewall9.fw.orig index a0991bd86..97f2fcd16 100755 --- a/test/pix/firewall9.fw.orig +++ b/test/pix/firewall9.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3440 ! -! Generated Thu Jan 20 09:48:27 2011 PST by vadim +! Generated Thu Jan 20 10:08:15 2011 PST by vadim ! ! Compiled for pix 6.3 ! Outbound ACLs: not supported diff --git a/test/pix/firewall90.fw.orig b/test/pix/firewall90.fw.orig index ed546f12f..42b851f45 100755 --- a/test/pix/firewall90.fw.orig +++ b/test/pix/firewall90.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3440 ! -! Generated Thu Jan 20 09:48:27 2011 PST by vadim +! Generated Thu Jan 20 10:08:15 2011 PST by vadim ! ! Compiled for pix 8.3 ! Outbound ACLs: supported diff --git a/test/pix/firewall91.fw.orig b/test/pix/firewall91.fw.orig index b24538339..1e1ba9ca8 100755 --- a/test/pix/firewall91.fw.orig +++ b/test/pix/firewall91.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3440 ! -! Generated Thu Jan 20 09:48:27 2011 PST by vadim +! Generated Thu Jan 20 10:08:16 2011 PST by vadim ! ! Compiled for pix 8.3 ! Outbound ACLs: supported diff --git a/test/pix/firewall92.fw.orig b/test/pix/firewall92.fw.orig index d94afc456..3fa914049 100755 --- a/test/pix/firewall92.fw.orig +++ b/test/pix/firewall92.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3440 ! -! Generated Thu Jan 20 09:48:28 2011 PST by vadim +! Generated Thu Jan 20 10:08:16 2011 PST by vadim ! ! Compiled for pix 8.3 ! Outbound ACLs: supported diff --git a/test/pix/firewall93.fw.orig b/test/pix/firewall93.fw.orig index c5a403aee..a11b895be 100755 --- a/test/pix/firewall93.fw.orig +++ b/test/pix/firewall93.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3440 ! -! Generated Thu Jan 20 09:48:28 2011 PST by vadim +! Generated Thu Jan 20 10:08:16 2011 PST by vadim ! ! Compiled for pix 8.3 ! Outbound ACLs: supported diff --git a/test/pix/fwsm1.fw.orig b/test/pix/fwsm1.fw.orig index 24614ce74..0fcfa3231 100755 --- a/test/pix/fwsm1.fw.orig +++ b/test/pix/fwsm1.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3440 ! -! Generated Thu Jan 20 09:48:29 2011 PST by vadim +! Generated Thu Jan 20 10:08:17 2011 PST by vadim ! ! Compiled for fwsm 2.3 ! Outbound ACLs: supported diff --git a/test/pix/fwsm2.fw.orig b/test/pix/fwsm2.fw.orig index 0ea622ae0..1f21efaac 100755 --- a/test/pix/fwsm2.fw.orig +++ b/test/pix/fwsm2.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3440 ! -! Generated Thu Jan 20 09:48:29 2011 PST by vadim +! Generated Thu Jan 20 10:08:17 2011 PST by vadim ! ! Compiled for fwsm 4.x ! Outbound ACLs: supported diff --git a/test/pix/pix515.fw.orig b/test/pix/pix515.fw.orig index b1a08b223..7d2548a2f 100755 --- a/test/pix/pix515.fw.orig +++ b/test/pix/pix515.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3440 ! -! Generated Thu Jan 20 09:48:30 2011 PST by vadim +! Generated Thu Jan 20 10:08:18 2011 PST by vadim ! ! Compiled for pix 7.0 ! Outbound ACLs: supported diff --git a/test/pix/real.fw.orig b/test/pix/real.fw.orig index 13d61f116..34758a103 100755 --- a/test/pix/real.fw.orig +++ b/test/pix/real.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3440 ! -! Generated Thu Jan 20 09:48:30 2011 PST by vadim +! Generated Thu Jan 20 10:08:18 2011 PST by vadim ! ! Compiled for pix 6.3 ! Outbound ACLs: not supported