onkelbeh/fwbuilder
1
0
Fork 0
mirror of https://github.com/fwbuilder/fwbuilder synced 2026-05-01 22:57:33 +02:00
Code Issues Releases Wiki Activity

fixes #2670. Per RFC3021 network with netmask /31 has no network and

Browse Source 
direct broadcast addresses. When interface of the firewall is
configured with netmask /31, policy compilers should not treat the
second address of this "subnet" as a broadcast.
This commit is contained in:
Vadim Kurland 2011-11-08 18:40:09 -08:00
parent 028976c675
commit 76da9f905f
137 changed files with 842 additions and 498 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
doc/ChangeLog
View File

@ -1,5 +1,9 @@
2011-11-08 Vadim Kurland <vadim@netcitadel.com>
* InetAddrMask.cpp (setNetworkAndBroadcastAddress): see #2670. Per
RFC3021 network with netmask /31 has no network and direct
broadcast addresses.
* PolicyCompiler_ipt.cpp (specialCaseAddressRangeInRE): fixed bug
in the rule processor that replaces AddressRange object that
represents single address with an IPv4 object. Also eliminated

13
src/libfwbuilder/src/fwbuilder/InetAddrMask.cpp
View File

@ -47,8 +47,17 @@ using namespace libfwbuilder;
void InetAddrMask::setNetworkAndBroadcastAddress()
{
*network_address = *address & *netmask;
*broadcast_address = *address | (~(*netmask));
// see #2670. Per RFC3021 network with netmask /31 has no network
// and direct broadcast addresses.
if (netmask->isV4() && netmask->getLength() >= 31)
{
*network_address = *address;
*broadcast_address = InetAddr(32);
} else
{
*network_address = *address & *netmask;
*broadcast_address = *address | (~(*netmask));
}
}
InetAddrMask::InetAddrMask(bool)

4
src/res/help/en_US/release_notes_5.0.1.html
View File

@ -246,6 +246,10 @@
<li>
<p>
fixed bug #2670. Per RFC3021 network with netmask /31 has no
network and direct broadcast addresses. When interface of the
firewall is configured with netmask /31, policy compilers should
not treat the second address of this "subnet" as a broadcast.
</p>
</li>

4
test/ipt/cluster1_secuwall-1.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:51 2011 PST by vadim
# Generated Tue Nov 8 18:28:40 2011 PST by vadim
#
# files: * cluster1_secuwall-1.fw /etc/cluster1_secuwall-1.fw
#
@ -609,7 +609,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:51 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:28:40 2011 by vadim"
log "Database was cluster-tests.fwb"
check_tools
check_run_time_address_table_files

4
test/ipt/firewall-base-rulesets.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:19 2011 PST by vadim
# Generated Tue Nov 8 18:28:04 2011 PST by vadim
#
# files: * firewall-base-rulesets.fw /etc/fw/firewall-base-rulesets.fw
#
@ -466,7 +466,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:19 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:28:04 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall-ipv6-1.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:21 2011 PST by vadim
# Generated Tue Nov 8 18:28:06 2011 PST by vadim
#
# files: * firewall-ipv6-1.fw /etc/firewall-ipv6-1.fw
#
@ -723,7 +723,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:21 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:28:06 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall-ipv6-2.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:21 2011 PST by vadim
# Generated Tue Nov 8 18:28:06 2011 PST by vadim
#
# files: * firewall-ipv6-2.fw /etc/firewall-ipv6-2.fw
#
@ -987,7 +987,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:21 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:28:06 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall-ipv6-3.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:22 2011 PST by vadim
# Generated Tue Nov 8 18:28:11 2011 PST by vadim
#
# files: * firewall-ipv6-3.fw /etc/firewall-ipv6-3.fw
#
@ -617,7 +617,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:22 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:28:11 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall-ipv6-4-1.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:28 2011 PST by vadim
# Generated Tue Nov 8 18:28:12 2011 PST by vadim
#
# files: * firewall-ipv6-4-1.fw /etc/firewall-ipv6-4-1.fw
#
@ -568,7 +568,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:28 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:28:12 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall-ipv6-4.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:23 2011 PST by vadim
# Generated Tue Nov 8 18:28:11 2011 PST by vadim
#
# files: * firewall-ipv6-4.fw /etc/firewall-ipv6-4.fw
#
@ -604,7 +604,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:23 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:28:11 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall-ipv6-5.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:27 2011 PST by vadim
# Generated Tue Nov 8 18:28:11 2011 PST by vadim
#
# files: * firewall-ipv6-5.fw /etc/firewall-ipv6-5.fw
#
@ -433,7 +433,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:27 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:28:11 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall-ipv6-6.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:27 2011 PST by vadim
# Generated Tue Nov 8 18:28:17 2011 PST by vadim
#
# files: * firewall-ipv6-6.fw /etc/firewall-ipv6-6.fw
#
@ -422,7 +422,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:27 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:28:17 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall-ipv6-7.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:27 2011 PST by vadim
# Generated Tue Nov 8 18:28:17 2011 PST by vadim
#
# files: * firewall-ipv6-7.fw /etc/firewall-ipv6-7.fw
#
@ -466,7 +466,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:27 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:28:17 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall-ipv6-8.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:32 2011 PST by vadim
# Generated Tue Nov 8 18:28:17 2011 PST by vadim
#
# files: * firewall-ipv6-8.fw /etc/firewall-ipv6-8.fw
#
@ -539,7 +539,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:32 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:28:17 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall-ipv6-ipt-reset-prolog-after-flush.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:33 2011 PST by vadim
# Generated Tue Nov 8 18:28:17 2011 PST by vadim
#
# files: * firewall-ipv6-ipt-reset-prolog-after-flush.fw /etc/firewall-ipv6-ipt-reset-prolog-after-flush.fw
#
@ -463,7 +463,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:33 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:28:17 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall-ipv6-ipt-reset-prolog-after-interfaces.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:33 2011 PST by vadim
# Generated Tue Nov 8 18:28:22 2011 PST by vadim
#
# files: * firewall-ipv6-ipt-reset-prolog-after-interfaces.fw /etc/firewall-ipv6-ipt-reset-prolog-after-interfaces.fw
#
@ -463,7 +463,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:33 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:28:22 2011 by vadim"
check_tools
check_run_time_address_table_files

4
test/ipt/firewall-ipv6-ipt-reset-prolog-top.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:34 2011 PST by vadim
# Generated Tue Nov 8 18:28:23 2011 PST by vadim
#
# files: * firewall-ipv6-ipt-reset-prolog-top.fw /etc/firewall-ipv6-ipt-reset-prolog-top.fw
#
@ -463,7 +463,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:34 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:28:23 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall-ipv6-nd-ns-1.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:37 2011 PST by vadim
# Generated Tue Nov 8 18:28:22 2011 PST by vadim
#
# files: * firewall-ipv6-nd-ns-1.fw /etc/firewall-ipv6-nd-ns-1.fw
#
@ -463,7 +463,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:37 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:28:22 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall-ipv6-nd-ns-2.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:39 2011 PST by vadim
# Generated Tue Nov 8 18:28:23 2011 PST by vadim
#
# files: * firewall-ipv6-nd-ns-2.fw /etc/firewall-ipv6-nd-ns-2.fw
#
@ -467,7 +467,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:39 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:28:23 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall-ipv6-prolog-after-flush.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:39 2011 PST by vadim
# Generated Tue Nov 8 18:28:27 2011 PST by vadim
#
# files: * firewall-ipv6-prolog-after-flush.fw /etc/firewall-ipv6-prolog-after-flush.fw
#
@ -441,7 +441,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:39 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:28:27 2011 by vadim"
check_tools
check_run_time_address_table_files

4
test/ipt/firewall-ipv6-prolog-after-interfaces.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:39 2011 PST by vadim
# Generated Tue Nov 8 18:28:28 2011 PST by vadim
#
# files: * firewall-ipv6-prolog-after-interfaces.fw /etc/firewall-ipv6-prolog-after-interfaces.fw
#
@ -441,7 +441,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:39 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:28:28 2011 by vadim"
check_tools
check_run_time_address_table_files

4
test/ipt/firewall-ipv6-prolog-top.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:41 2011 PST by vadim
# Generated Tue Nov 8 18:28:28 2011 PST by vadim
#
# files: * firewall-ipv6-prolog-top.fw /etc/firewall-ipv6-prolog-top.fw
#
@ -441,7 +441,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:41 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:28:28 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall-server-1-s.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:45 2011 PST by vadim
# Generated Tue Nov 8 18:28:28 2011 PST by vadim
#
# files: * firewall-server-1-s.fw /etc/fw/firewall-server-1-s.fw
#
@ -414,7 +414,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:45 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:28:28 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:07:18 2011 PST by vadim
# Generated Tue Nov 8 18:26:03 2011 PST by vadim
#
# files: * firewall.fw /etc/fw/firewall.fw
#
@ -1397,7 +1397,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:07:18 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:26:03 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall1.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:07:18 2011 PST by vadim
# Generated Tue Nov 8 18:26:03 2011 PST by vadim
#
# files: * firewall1.fw /etc/fw/firewall1.fw
#
@ -1269,7 +1269,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:07:18 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:26:03 2011 by vadim"
check_tools
check_run_time_address_table_files

4
test/ipt/firewall10.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:07:18 2011 PST by vadim
# Generated Tue Nov 8 18:26:02 2011 PST by vadim
#
# files: * firewall10.fw /etc/fw/firewall10.fw
#
@ -494,7 +494,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:07:18 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:26:02 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall11.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:07:23 2011 PST by vadim
# Generated Tue Nov 8 18:26:08 2011 PST by vadim
#
# files: * firewall11.fw /etc/fw/firewall11.fw
#
@ -614,7 +614,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:07:23 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:26:08 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall12.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:07:24 2011 PST by vadim
# Generated Tue Nov 8 18:26:08 2011 PST by vadim
#
# files: * firewall12.fw /etc/fw/firewall12.fw
#
@ -532,7 +532,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:07:24 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:26:08 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall13.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:07:24 2011 PST by vadim
# Generated Tue Nov 8 18:26:08 2011 PST by vadim
#
# files: * firewall13.fw /etc/fw/firewall13.fw
#
@ -406,7 +406,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:07:24 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:26:08 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall14.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:07:24 2011 PST by vadim
# Generated Tue Nov 8 18:26:08 2011 PST by vadim
#
# files: * firewall14.fw /etc/fw/firewall14.fw
#
@ -425,7 +425,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:07:24 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:26:08 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall15.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:07:29 2011 PST by vadim
# Generated Tue Nov 8 18:26:13 2011 PST by vadim
#
# files: * firewall15.fw /etc/fw/firewall15.fw
#
@ -409,7 +409,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:07:29 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:26:13 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall16.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:07:29 2011 PST by vadim
# Generated Tue Nov 8 18:26:14 2011 PST by vadim
#
# files: * firewall16.fw /etc/fw/firewall16.fw
#
@ -513,7 +513,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:07:29 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:26:14 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall17.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:07:29 2011 PST by vadim
# Generated Tue Nov 8 18:26:14 2011 PST by vadim
#
# files: * firewall17.fw /etc/fw/firewall17.fw
#
@ -492,7 +492,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:07:29 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:26:14 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall18.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:07:29 2011 PST by vadim
# Generated Tue Nov 8 18:26:14 2011 PST by vadim
#
# files: * firewall18.fw /etc/fw/firewall18.fw
#
@ -527,7 +527,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:07:29 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:26:14 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall19.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:07:34 2011 PST by vadim
# Generated Tue Nov 8 18:26:19 2011 PST by vadim
#
# files: * firewall19.fw /etc/fw/firewall19.fw
#
@ -531,7 +531,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:07:34 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:26:19 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall2-1.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:07:42 2011 PST by vadim
# Generated Tue Nov 8 18:26:27 2011 PST by vadim
#
# files: * firewall2-1.fw /etc/fw/firewall2-1.fw
#
@ -1451,7 +1451,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:07:42 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:26:27 2011 by vadim"
check_tools
check_run_time_address_table_files

4
test/ipt/firewall2-2.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:07:44 2011 PST by vadim
# Generated Tue Nov 8 18:26:31 2011 PST by vadim
#
# files: * firewall2-2.fw /etc/fw/firewall2-2.fw
#
@ -1281,7 +1281,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:07:44 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:26:31 2011 by vadim"
check_tools
check_run_time_address_table_files

4
test/ipt/firewall2-3.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:07:48 2011 PST by vadim
# Generated Tue Nov 8 18:26:33 2011 PST by vadim
#
# files: * firewall2-3.fw /etc/fw/firewall2-3.fw
#
@ -1139,7 +1139,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:07:48 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:26:33 2011 by vadim"
check_tools
check_run_time_address_table_files

4
test/ipt/firewall2-4.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:07:53 2011 PST by vadim
# Generated Tue Nov 8 18:26:38 2011 PST by vadim
#
# files: * firewall2-4.fw /etc/fw/firewall2-4.fw
#
@ -445,7 +445,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:07:53 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:26:38 2011 by vadim"
check_tools
check_run_time_address_table_files

4
test/ipt/firewall2-5.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:07:54 2011 PST by vadim
# Generated Tue Nov 8 18:26:38 2011 PST by vadim
#
# files: * firewall2-5.fw /etc/fw/firewall2-5.fw
#
@ -476,7 +476,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:07:54 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:26:38 2011 by vadim"
check_tools
check_run_time_address_table_files

4
test/ipt/firewall2-6.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:07:58 2011 PST by vadim
# Generated Tue Nov 8 18:26:44 2011 PST by vadim
#
# files: * firewall2-6.fw /etc/fw/firewall2-6.fw
#
@ -501,7 +501,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:07:58 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:26:44 2011 by vadim"
check_tools
check_run_time_address_table_files

4
test/ipt/firewall2-7.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:07:59 2011 PST by vadim
# Generated Tue Nov 8 18:26:44 2011 PST by vadim
#
# files: * firewall2-7.fw /etc/fw/firewall2-7.fw
#
@ -441,7 +441,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:07:59 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:26:44 2011 by vadim"
check_tools
check_run_time_address_table_files

4
test/ipt/firewall2.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:07:36 2011 PST by vadim
# Generated Tue Nov 8 18:26:21 2011 PST by vadim
#
# files: * firewall2.fw /etc/fw/firewall2.fw
#
@ -1503,7 +1503,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:07:36 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:26:21 2011 by vadim"
check_tools
check_run_time_address_table_files

4
test/ipt/firewall20-ipv6.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:07:35 2011 PST by vadim
# Generated Tue Nov 8 18:26:19 2011 PST by vadim
#
# files: * firewall20-ipv6.fw /etc/fw/firewall20-ipv6.fw
#
@ -477,7 +477,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:07:35 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:26:19 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall20.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:07:35 2011 PST by vadim
# Generated Tue Nov 8 18:26:19 2011 PST by vadim
#
# files: * firewall20.fw /etc/fw/firewall20.fw
#
@ -695,7 +695,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:07:35 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:26:19 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall21-1.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:07:41 2011 PST by vadim
# Generated Tue Nov 8 18:26:26 2011 PST by vadim
#
# files: * firewall21-1.fw /etc/fw/firewall21-1.fw
#
@ -495,7 +495,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:07:41 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:26:26 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall21.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:07:40 2011 PST by vadim
# Generated Tue Nov 8 18:26:25 2011 PST by vadim
#
# files: * firewall21.fw /etc/fw/firewall21.fw
#
@ -494,7 +494,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:07:40 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:26:25 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall22.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:07:41 2011 PST by vadim
# Generated Tue Nov 8 18:26:26 2011 PST by vadim
#
# files: * firewall22.fw /etc/fw/firewall22.fw
#
@ -411,7 +411,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:07:41 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:26:26 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall23-1.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:07:48 2011 PST by vadim
# Generated Tue Nov 8 18:26:32 2011 PST by vadim
#
# files: * firewall23-1.fw /etc/fw/firewall23-1.fw
#
@ -585,7 +585,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:07:48 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:26:32 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall23.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:07:48 2011 PST by vadim
# Generated Tue Nov 8 18:26:32 2011 PST by vadim
#
# files: * firewall23.fw /etc/fw/firewall23.fw
#
@ -497,7 +497,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:07:48 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:26:32 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall24.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:07:49 2011 PST by vadim
# Generated Tue Nov 8 18:26:37 2011 PST by vadim
#
# files: * firewall24.fw /etc/fw/firewall24.fw
#
@ -514,7 +514,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:07:49 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:26:37 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall25.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:07:54 2011 PST by vadim
# Generated Tue Nov 8 18:26:38 2011 PST by vadim
#
# files: * firewall25.fw /etc/fw/firewall25.fw
#
@ -705,7 +705,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:07:54 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:26:38 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall26.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:07:54 2011 PST by vadim
# Generated Tue Nov 8 18:26:42 2011 PST by vadim
#
# files: * firewall26.fw /etc/fw/firewall26.fw
#
@ -585,7 +585,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:07:54 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:26:42 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall27.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:07:59 2011 PST by vadim
# Generated Tue Nov 8 18:26:44 2011 PST by vadim
#
# files: * firewall27.fw /etc/fw/firewall27.fw
#
@ -567,7 +567,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:07:59 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:26:44 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall28.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:07:59 2011 PST by vadim
# Generated Tue Nov 8 18:26:47 2011 PST by vadim
#
# files: * firewall28.fw /etc/fw/firewall28.fw
#
@ -430,7 +430,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:07:59 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:26:47 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall29.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:08:01 2011 PST by vadim
# Generated Tue Nov 8 18:26:49 2011 PST by vadim
#
# files: * firewall29.fw /etc/fw/firewall29.fw
#
@ -465,7 +465,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:08:01 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:26:49 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall3.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:08:05 2011 PST by vadim
# Generated Tue Nov 8 18:26:50 2011 PST by vadim
#
# files: * firewall3.fw /etc/fw/firewall3.fw
#
@ -599,7 +599,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:08:05 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:26:50 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall30.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:08:05 2011 PST by vadim
# Generated Tue Nov 8 18:26:50 2011 PST by vadim
#
# files: * firewall30.fw /etc/fw/firewall30.fw
#
@ -396,7 +396,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:08:05 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:26:50 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall31.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:08:05 2011 PST by vadim
# Generated Tue Nov 8 18:26:52 2011 PST by vadim
#
# files: * firewall31.fw /etc/fw/firewall31.fw
#
@ -468,7 +468,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:08:05 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:26:52 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall32.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:08:06 2011 PST by vadim
# Generated Tue Nov 8 18:26:55 2011 PST by vadim
#
# files: * firewall32.fw /etc/fw/firewall32.fw
#
@ -439,7 +439,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:08:06 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:26:55 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall33-1.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:08:11 2011 PST by vadim
# Generated Tue Nov 8 18:26:57 2011 PST by vadim
#
# files: * firewall33-1.fw /etc/fw/firewall33-1.fw
#
@ -538,7 +538,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:08:11 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:26:57 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall33.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:08:11 2011 PST by vadim
# Generated Tue Nov 8 18:26:57 2011 PST by vadim
#
# files: * firewall33.fw /etc/fw/firewall33.fw
#
@ -583,7 +583,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:08:11 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:26:57 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall34.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:08:10 2011 PST by vadim
# Generated Tue Nov 8 18:26:57 2011 PST by vadim
#
# files: * firewall34.fw /etc/fw/firewall34.fw
#
@ -671,7 +671,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:08:10 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:26:57 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall35.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:08:11 2011 PST by vadim
# Generated Tue Nov 8 18:27:00 2011 PST by vadim
#
# files: * firewall35.fw /etc/fw/firewall35.fw
#
@ -563,7 +563,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:08:11 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:27:00 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall36-1.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:08:16 2011 PST by vadim
# Generated Tue Nov 8 18:27:02 2011 PST by vadim
#
# files: * firewall36-1.fw /etc/firewall36-1.fw
#
@ -454,7 +454,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:08:16 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:27:02 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall36-2.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:08:17 2011 PST by vadim
# Generated Tue Nov 8 18:27:03 2011 PST by vadim
#
# files: * firewall36-2.fw /etc/firewall36-2.fw
#
@ -454,7 +454,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:08:17 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:27:03 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall36.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:08:16 2011 PST by vadim
# Generated Tue Nov 8 18:27:02 2011 PST by vadim
#
# files: * firewall36.fw /etc/firewall36.fw
#
@ -518,7 +518,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:08:16 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:27:02 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall37-1.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:08:22 2011 PST by vadim
# Generated Tue Nov 8 18:27:08 2011 PST by vadim
#
# files: * firewall37-1.fw /etc/fw/firewall37-1.fw
#
@ -987,7 +987,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:08:22 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:27:08 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall37-2.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:08:22 2011 PST by vadim
# Generated Tue Nov 8 18:27:08 2011 PST by vadim
#
# files: * firewall37-2.fw /etc/fw/firewall37-2.fw
#
@ -704,7 +704,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:08:22 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:27:08 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall37.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:08:18 2011 PST by vadim
# Generated Tue Nov 8 18:27:05 2011 PST by vadim
#
# files: * firewall37.fw /etc/fw/firewall37.fw
#
@ -1313,7 +1313,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:08:18 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:27:05 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall38.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:08:22 2011 PST by vadim
# Generated Tue Nov 8 18:27:08 2011 PST by vadim
#
# files: * firewall38.fw /etc/fw/firewall38.fw
#
@ -540,7 +540,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:08:22 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:27:08 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall39.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:08:23 2011 PST by vadim
# Generated Tue Nov 8 18:27:10 2011 PST by vadim
#
# files: * firewall39.fw /etc/fw/firewall39.fw
#
@ -820,7 +820,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:08:23 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:27:10 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall4.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:08:27 2011 PST by vadim
# Generated Tue Nov 8 18:27:14 2011 PST by vadim
#
# files: * firewall4.fw /etc/fw/firewall4.fw
#
@ -733,7 +733,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:08:27 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:27:14 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall40-1.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:08:28 2011 PST by vadim
# Generated Tue Nov 8 18:27:14 2011 PST by vadim
#
# files: * firewall40-1.fw /etc/firewall40-1.fw
#
@ -462,7 +462,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:08:28 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:27:14 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall40-2.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:08:28 2011 PST by vadim
# Generated Tue Nov 8 18:27:15 2011 PST by vadim
#
# files: * firewall40-2.fw /etc/firewall40-2.fw
#
@ -449,7 +449,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:08:28 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:27:15 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall40.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:08:28 2011 PST by vadim
# Generated Tue Nov 8 18:27:14 2011 PST by vadim
#
# files: * firewall40.fw /etc/firewall40.fw
#
@ -455,7 +455,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:08:28 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:27:14 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall41-1.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:08:33 2011 PST by vadim
# Generated Tue Nov 8 18:27:20 2011 PST by vadim
#
# files: * firewall41-1.fw /etc/firewall41-1.fw
#
@ -596,7 +596,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:08:33 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:27:20 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall41.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:08:32 2011 PST by vadim
# Generated Tue Nov 8 18:27:20 2011 PST by vadim
#
# files: * firewall41.fw /etc/firewall41.fw
#
@ -480,7 +480,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:08:32 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:27:20 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall42.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:08:33 2011 PST by vadim
# Generated Tue Nov 8 18:27:20 2011 PST by vadim
#
# files: * firewall42.fw /etc/fw/firewall42.fw
#
@ -405,7 +405,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:08:33 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:27:20 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall5.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:08:37 2011 PST by vadim
# Generated Tue Nov 8 18:27:25 2011 PST by vadim
#
# files: * firewall5.fw /etc/fw/firewall5.fw
#
@ -647,7 +647,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:08:37 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:27:25 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall50.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:08:39 2011 PST by vadim
# Generated Tue Nov 8 18:27:26 2011 PST by vadim
#
# files: * firewall50.fw /etc/fw/firewall50.fw
#
@ -439,7 +439,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:08:39 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:27:26 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall51.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:08:39 2011 PST by vadim
# Generated Tue Nov 8 18:27:26 2011 PST by vadim
#
# files: * firewall51.fw /etc/fw/firewall51.fw
#
@ -512,7 +512,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:08:39 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:27:26 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall6.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:08:39 2011 PST by vadim
# Generated Tue Nov 8 18:27:26 2011 PST by vadim
#
# files: * firewall6.fw /etc/fw/firewall6.fw
#
@ -534,7 +534,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:08:39 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:27:26 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall60.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:08:40 2011 PST by vadim
# Generated Tue Nov 8 18:27:31 2011 PST by vadim
#
# files: * firewall60.fw /etc/firewall60.fw
#
@ -440,7 +440,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:08:40 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:27:31 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall61-1.2.5.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:08:44 2011 PST by vadim
# Generated Tue Nov 8 18:27:31 2011 PST by vadim
#
# files: * firewall61-1.2.5.fw /etc/firewall61-1.2.5.fw
#
@ -520,7 +520,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:08:44 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:27:31 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall61-1.2.6.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:08:44 2011 PST by vadim
# Generated Tue Nov 8 18:27:31 2011 PST by vadim
#
# files: * firewall61-1.2.6.fw /etc/firewall61-1.2.6.fw
#
@ -526,7 +526,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:08:44 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:27:31 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall61-1.3.x.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:08:44 2011 PST by vadim
# Generated Tue Nov 8 18:27:31 2011 PST by vadim
#
# files: * firewall61-1.3.x.fw /etc/firewall61-1.3.x.fw
#
@ -513,7 +513,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:08:44 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:27:31 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall61-1.4.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:08:45 2011 PST by vadim
# Generated Tue Nov 8 18:27:36 2011 PST by vadim
#
# files: * firewall61-1.4.fw /etc/firewall61-1.4.fw
#
@ -514,7 +514,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:08:45 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:27:36 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall62.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:08:50 2011 PST by vadim
# Generated Tue Nov 8 18:27:37 2011 PST by vadim
#
# files: * firewall62.fw /etc/firewall62.fw
#
@ -590,7 +590,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:08:50 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:27:37 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall63.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:08:50 2011 PST by vadim
# Generated Tue Nov 8 18:27:37 2011 PST by vadim
#
# files: * firewall63.fw /etc/firewall63.fw
#
@ -410,7 +410,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:08:50 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:27:37 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall7.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:08:50 2011 PST by vadim
# Generated Tue Nov 8 18:27:37 2011 PST by vadim
#
# files: * firewall7.fw /etc/fw/firewall7.fw
#
@ -494,7 +494,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:08:50 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:27:37 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall70.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:08:50 2011 PST by vadim
# Generated Tue Nov 8 18:27:41 2011 PST by vadim
#
# files: * firewall70.fw iptables.sh
#
@ -433,7 +433,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:08:50 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:27:41 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall71.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:08:55 2011 PST by vadim
# Generated Tue Nov 8 18:27:42 2011 PST by vadim
#
# files: * firewall71.fw /etc/fw/firewall71.fw
#
@ -449,7 +449,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:08:55 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:27:42 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall72-1.3.x.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:08:55 2011 PST by vadim
# Generated Tue Nov 8 18:27:42 2011 PST by vadim
#
# files: * firewall72-1.3.x.fw /etc/fw/firewall72-1.3.x.fw
#
@ -581,7 +581,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:08:55 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:27:42 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall72-1.4.3.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:08:55 2011 PST by vadim
# Generated Tue Nov 8 18:27:42 2011 PST by vadim
#
# files: * firewall72-1.4.3.fw /etc/fw/firewall72-1.4.3.fw
#
@ -581,7 +581,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:08:55 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:27:42 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall73.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:08:55 2011 PST by vadim
# Generated Tue Nov 8 18:27:44 2011 PST by vadim
#
# files: * firewall73.fw /etc/fw/firewall73.fw
#
@ -544,7 +544,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:08:55 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:27:44 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall74.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:01 2011 PST by vadim
# Generated Tue Nov 8 18:27:48 2011 PST by vadim
#
# files: * firewall74.fw /etc/fw/firewall74.fw
#
@ -396,7 +396,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:01 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:27:48 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall8.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:01 2011 PST by vadim
# Generated Tue Nov 8 18:27:48 2011 PST by vadim
#
# files: * firewall8.fw /etc/fw/firewall8.fw
#
@ -381,7 +381,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:01 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:27:48 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall80.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:01 2011 PST by vadim
# Generated Tue Nov 8 18:27:48 2011 PST by vadim
#
# files: * firewall80.fw /etc/fw/firewall80.fw
#
@ -420,7 +420,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:01 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:27:48 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall81.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:01 2011 PST by vadim
# Generated Tue Nov 8 18:27:48 2011 PST by vadim
#
# files: * firewall81.fw /etc/fw/firewall81.fw
#
@ -441,7 +441,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:01 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:27:48 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall82.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:07 2011 PST by vadim
# Generated Tue Nov 8 18:27:53 2011 PST by vadim
#
# files: * firewall82.fw /etc/firewall82.fw
#
@ -434,7 +434,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:07 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:27:53 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall82_A.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:07 2011 PST by vadim
# Generated Tue Nov 8 18:27:53 2011 PST by vadim
#
# files: * firewall82_A.fw /etc/fw/firewall82_A.fw
#
@ -421,7 +421,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:07 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:27:53 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall82_B.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:07 2011 PST by vadim
# Generated Tue Nov 8 18:27:53 2011 PST by vadim
#
# files: * firewall82_B.fw /etc/fw/firewall82_B.fw
#
@ -384,7 +384,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:07 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:27:53 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall9.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:07 2011 PST by vadim
# Generated Tue Nov 8 18:27:54 2011 PST by vadim
#
# files: * firewall9.fw /etc/fw/firewall9.fw
#
@ -642,7 +642,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:07 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:27:54 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall90.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:12 2011 PST by vadim
# Generated Tue Nov 8 18:27:59 2011 PST by vadim
#
# files: * firewall90.fw /etc/fw/firewall90.fw
#
@ -404,7 +404,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:12 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:27:59 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall91.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:13 2011 PST by vadim
# Generated Tue Nov 8 18:27:59 2011 PST by vadim
#
# files: * firewall91.fw /etc/fw/firewall91.fw
#
@ -404,7 +404,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:13 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:27:59 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall92.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:13 2011 PST by vadim
# Generated Tue Nov 8 18:27:59 2011 PST by vadim
#
# files: * firewall92.fw /etc/fw/firewall92.fw
#
@ -440,7 +440,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:13 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:27:59 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall93.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:13 2011 PST by vadim
# Generated Tue Nov 8 18:27:59 2011 PST by vadim
#
# files: * firewall93.fw /etc/fw/firewall93.fw
#
@ -483,7 +483,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:13 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:27:59 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/firewall94.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:17 2011 PST by vadim
# Generated Tue Nov 8 18:28:04 2011 PST by vadim
#
# files: * firewall94.fw /etc/fw/firewall94.fw
#
@ -535,7 +535,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:17 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:28:04 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

452
test/ipt/firewall95.fw.orig Executable file
View File

@ -0,0 +1,452 @@
#!/bin/sh
#
# This is automatically generated file. DO NOT MODIFY !
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:37:40 2011 PST by vadim
#
# files: * firewall95.fw /etc/fw/firewall95.fw
#
# Compiled for iptables 1.3.0
#
# testing rules that use address ranges that include or not include fw
FWBDEBUG=""
PATH="/sbin:/usr/sbin:/bin:/usr/bin:${PATH}"
export PATH
LSMOD="/sbin/lsmod"
MODPROBE="/sbin/modprobe"
IPTABLES="/sbin/iptables"
IP6TABLES="/sbin/ip6tables"
IPTABLES_RESTORE="/sbin/iptables-restore"
IP6TABLES_RESTORE="/sbin/ip6tables-restore"
IP="/sbin/ip"
IFCONFIG="/sbin/ifconfig"
VCONFIG="/sbin/vconfig"
BRCTL="/sbin/brctl"
IFENSLAVE="/sbin/ifenslave"
IPSET="/usr/sbin/ipset"
LOGGER="/usr/bin/logger"
log() {
echo "$1"
which "$LOGGER" >/dev/null 2>&1 && $LOGGER -p info "$1"
}
getInterfaceVarName() {
echo $1 | sed 's/\./_/'
}
getaddr_internal() {
dev=$1
name=$2
af=$3
L=$($IP $af addr show dev $dev | sed -n '/inet/{s!.*inet6* !!;s!/.*!!p}' | sed 's/peer.*//')
test -z "$L" && {
eval "$name=''"
return
}
eval "${name}_list=\"$L\""
}
getnet_internal() {
dev=$1
name=$2
af=$3
L=$($IP route list proto kernel | grep $dev | grep -v default | sed 's! .*$!!')
test -z "$L" && {
eval "$name=''"
return
}
eval "${name}_list=\"$L\""
}
getaddr() {
getaddr_internal $1 $2 "-4"
}
getaddr6() {
getaddr_internal $1 $2 "-6"
}
getnet() {
getnet_internal $1 $2 "-4"
}
getnet6() {
getnet_internal $1 $2 "-6"
}
# function getinterfaces is used to process wildcard interfaces
getinterfaces() {
NAME=$1
$IP link show | grep ": $NAME" | while read L; do
OIFS=$IFS
IFS=" :"
set $L
IFS=$OIFS
echo $2
done
}
diff_intf() {
func=$1
list1=$2
list2=$3
cmd=$4
for intf in $list1
do
echo $list2 | grep -q $intf || {
# $vlan is absent in list 2
$func $intf $cmd
}
done
}
find_program() {
PGM=$1
which $PGM >/dev/null 2>&1 || {
echo "$PGM not found"
exit 1
}
}
check_tools() {
find_program $IPTABLES
find_program $MODPROBE
find_program $IP
}
reset_iptables_v4() {
$IPTABLES -P OUTPUT DROP
$IPTABLES -P INPUT DROP
$IPTABLES -P FORWARD DROP
cat /proc/net/ip_tables_names | while read table; do
$IPTABLES -t $table -L -n | while read c chain rest; do
if test "X$c" = "XChain" ; then
$IPTABLES -t $table -F $chain
fi
done
$IPTABLES -t $table -X
done
}
reset_iptables_v6() {
$IP6TABLES -P OUTPUT DROP
$IP6TABLES -P INPUT DROP
$IP6TABLES -P FORWARD DROP
cat /proc/net/ip6_tables_names | while read table; do
$IP6TABLES -t $table -L -n | while read c chain rest; do
if test "X$c" = "XChain" ; then
$IP6TABLES -t $table -F $chain
fi
done
$IP6TABLES -t $table -X
done
}
P2P_INTERFACE_WARNING=""
missing_address() {
address=$1
cmd=$2
oldIFS=$IFS
IFS="@"
set $address
addr=$1
interface=$2
IFS=$oldIFS
$IP addr show dev $interface | grep -q POINTOPOINT && {
test -z "$P2P_INTERFACE_WARNING" && echo "Warning: Can not update address of interface $interface. fwbuilder can not manage addresses of point-to-point interfaces yet"
P2P_INTERFACE_WARNING="yes"
return
}
test "$cmd" = "add" && {
echo "# Adding ip address: $interface $addr"
echo $addr | grep -q ':' && {
$FWBDEBUG $IP addr $cmd $addr dev $interface
} || {
$FWBDEBUG $IP addr $cmd $addr broadcast + dev $interface
}
}
test "$cmd" = "del" && {
echo "# Removing ip address: $interface $addr"
$FWBDEBUG $IP addr $cmd $addr dev $interface || exit 1
}
$FWBDEBUG $IP link set $interface up
}
list_addresses_by_scope() {
interface=$1
scope=$2
ignore_list=$3
$IP addr ls dev $interface | \
awk -v IGNORED="$ignore_list" -v SCOPE="$scope" \
'BEGIN {
split(IGNORED,ignored_arr);
for (a in ignored_arr) {ignored_dict[ignored_arr[a]]=1;}
}
(/inet |inet6 / && $0 ~ SCOPE && !($2 in ignored_dict)) {print $2;}' | \
while read addr; do
echo "${addr}@$interface"
done | sort
}
update_addresses_of_interface() {
ignore_list=$2
set $1
interface=$1
shift
FWB_ADDRS=$(
for addr in $*; do
echo "${addr}@$interface"
done | sort
)
CURRENT_ADDRS_ALL_SCOPES=""
CURRENT_ADDRS_GLOBAL_SCOPE=""
$IP link show dev $interface >/dev/null 2>&1 && {
CURRENT_ADDRS_ALL_SCOPES=$(list_addresses_by_scope $interface 'scope .*' "$ignore_list")
CURRENT_ADDRS_GLOBAL_SCOPE=$(list_addresses_by_scope $interface 'scope global' "$ignore_list")
} || {
echo "# Interface $interface does not exist"
# Stop the script if we are not in test mode
test -z "$FWBDEBUG" && exit 1
}
diff_intf missing_address "$FWB_ADDRS" "$CURRENT_ADDRS_ALL_SCOPES" add
diff_intf missing_address "$CURRENT_ADDRS_GLOBAL_SCOPE" "$FWB_ADDRS" del
}
clear_addresses_except_known_interfaces() {
$IP link show | sed 's/://g' | awk -v IGNORED="$*" \
'BEGIN {
split(IGNORED,ignored_arr);
for (a in ignored_arr) {ignored_dict[ignored_arr[a]]=1;}
}
(/state/ && !($2 in ignored_dict)) {print $2;}' | \
while read intf; do
echo "# Removing addresses not configured in fwbuilder from interface $intf"
$FWBDEBUG $IP addr flush dev $intf scope global
$FWBDEBUG $IP link set $intf down
done
}
check_file() {
test -r "$2" || {
echo "Can not find file $2 referenced by address table object $1"
exit 1
}
}
check_run_time_address_table_files() {
:
}
load_modules() {
:
OPTS=$1
MODULES_DIR="/lib/modules/`uname -r`/kernel/net/"
MODULES=$(find $MODULES_DIR -name '*conntrack*' \! -name '*ipv6*'|sed -e 's/^.*\///' -e 's/\([^\.]\)\..*/\1/')
echo $OPTS | grep -q nat && {
MODULES="$MODULES $(find $MODULES_DIR -name '*nat*'|sed -e 's/^.*\///' -e 's/\([^\.]\)\..*/\1/')"
}
echo $OPTS | grep -q ipv6 && {
MODULES="$MODULES $(find $MODULES_DIR -name nf_conntrack_ipv6|sed -e 's/^.*\///' -e 's/\([^\.]\)\..*/\1/')"
}
for module in $MODULES; do
if $LSMOD | grep ${module} >/dev/null; then continue; fi
$MODPROBE ${module} || exit 1
done
}
verify_interfaces() {
:
echo "Verifying interfaces: eth0"
for i in eth0 ; do
$IP link show "$i" > /dev/null 2>&1 || {
log "Interface $i does not exist"
exit 1
}
done
}
prolog_commands() {
echo "Running prolog script"
}
epilog_commands() {
echo "Running epilog script"
}
run_epilog_and_exit() {
epilog_commands
exit $1
}
configure_interfaces() {
:
# Configure interfaces
update_addresses_of_interface "eth0 192.168.1.10/31" ""
}
script_body() {
# ================ IPv4
# ================ Table 'filter', automatic rules
# accept established sessions
$IPTABLES -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
$IPTABLES -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
$IPTABLES -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
# ================ Table 'filter', rule set Policy
#
# Rule 0 (global)
#
echo "Rule 0 (global)"
#
# address 192.168.1.11 should not be considered a broadcast on the subnet attached to eth0
$IPTABLES -A OUTPUT -d 192.168.1.11 -m state --state NEW -j ACCEPT
$IPTABLES -A FORWARD -d 192.168.1.11 -m state --state NEW -j ACCEPT
}
ip_forward() {
:
echo 1 > /proc/sys/net/ipv4/ip_forward
}
reset_all() {
:
reset_iptables_v4
}
block_action() {
reset_all
}
stop_action() {
reset_all
$IPTABLES -P OUTPUT ACCEPT
$IPTABLES -P INPUT ACCEPT
$IPTABLES -P FORWARD ACCEPT
}
check_iptables() {
IP_TABLES="$1"
[ ! -e $IP_TABLES ] && return 151
NF_TABLES=$(cat $IP_TABLES 2>/dev/null)
[ -z "$NF_TABLES" ] && return 152
return 0
}
status_action() {
check_iptables "/proc/net/ip_tables_names"
ret_ipv4=$?
check_iptables "/proc/net/ip6_tables_names"
ret_ipv6=$?
[ $ret_ipv4 -eq 0 -o $ret_ipv6 -eq 0 ] && return 0
[ $ret_ipv4 -eq 151 -o $ret_ipv6 -eq 151 ] && {
echo "iptables modules are not loaded"
}
[ $ret_ipv4 -eq 152 -o $ret_ipv6 -eq 152 ] && {
echo "Firewall is not configured"
}
exit 3
}
# See how we were called.
# For backwards compatibility missing argument is equivalent to 'start'
cmd=$1
test -z "$cmd" && {
cmd="start"
}
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:37:40 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files
load_modules " "
configure_interfaces
verify_interfaces
reset_all
script_body
ip_forward
epilog_commands
RETVAL=$?
;;
stop)
stop_action
RETVAL=$?
;;
status)
status_action
RETVAL=$?
;;
block)
block_action
RETVAL=$?
;;
reload)
$0 stop
$0 start
RETVAL=$?
;;
interfaces)
configure_interfaces
RETVAL=$?
;;
test_interfaces)
FWBDEBUG="echo"
configure_interfaces
RETVAL=$?
;;
*)
echo "Usage $0 [start|stop|status|block|reload|interfaces|test_interfaces]"
;;
esac
exit $RETVAL

4
test/ipt/fw-A.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:45 2011 PST by vadim
# Generated Tue Nov 8 18:28:33 2011 PST by vadim
#
# files: * fw-A.fw /sw/FWbuilder/fw-A.fw
#
@ -745,7 +745,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:45 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:28:33 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/fw1.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:45 2011 PST by vadim
# Generated Tue Nov 8 18:28:33 2011 PST by vadim
#
# files: * fw1.fw /etc/fw1.fw
#
@ -546,7 +546,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:45 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:28:33 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/fwbuilder.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:08:33 2011 PST by vadim
# Generated Tue Nov 8 18:27:20 2011 PST by vadim
#
# files: * fwbuilder.fw /etc/init.d/fwbuilder.fw
#
@ -504,7 +504,7 @@ status_action() {
}
start() {
log "Activating firewall script generated Tue Nov 8 18:08:33 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:27:20 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/heartbeat_cluster_1_d_linux-1-d.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:52 2011 PST by vadim
# Generated Tue Nov 8 18:28:40 2011 PST by vadim
#
# files: * heartbeat_cluster_1_d_linux-1-d.fw firewall.sh
#
@ -747,7 +747,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:52 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:28:40 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/heartbeat_cluster_1_d_linux-2-d.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:52 2011 PST by vadim
# Generated Tue Nov 8 18:28:40 2011 PST by vadim
#
# files: * heartbeat_cluster_1_d_linux-2-d.fw firewall.sh
#
@ -749,7 +749,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:52 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:28:40 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/heartbeat_cluster_1_linux-1.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:51 2011 PST by vadim
# Generated Tue Nov 8 18:28:40 2011 PST by vadim
#
# files: * heartbeat_cluster_1_linux-1.fw /etc/heartbeat_cluster_1_linux-1.fw
#
@ -864,7 +864,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:51 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:28:40 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/heartbeat_cluster_1_linux-2.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:51 2011 PST by vadim
# Generated Tue Nov 8 18:28:40 2011 PST by vadim
#
# files: * heartbeat_cluster_1_linux-2.fw /etc/heartbeat_cluster_1_linux-2.fw
#
@ -762,7 +762,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:51 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:28:40 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/heartbeat_cluster_2_linux-1.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:52 2011 PST by vadim
# Generated Tue Nov 8 18:28:41 2011 PST by vadim
#
# files: * heartbeat_cluster_2_linux-1.fw /etc/heartbeat_cluster_2_linux-1.fw
#
@ -728,7 +728,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:52 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:28:41 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/heartbeat_cluster_2_linux-2.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:52 2011 PST by vadim
# Generated Tue Nov 8 18:28:41 2011 PST by vadim
#
# files: * heartbeat_cluster_2_linux-2.fw /etc/heartbeat_cluster_2_linux-2.fw
#
@ -641,7 +641,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:52 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:28:41 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/host.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:45 2011 PST by vadim
# Generated Tue Nov 8 18:28:34 2011 PST by vadim
#
# files: * host.fw /etc/fw/host.fw
#
@ -443,7 +443,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:45 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:28:34 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

110
test/ipt/objects-for-regression-tests.fwb
View File

@ -1,6 +1,6 @@
<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE FWObjectDatabase SYSTEM "fwbuilder.dtd">
<FWObjectDatabase xmlns="http://www.fwbuilder.org/1.0/" version="22" lastModified="1320796455" id="root">
<FWObjectDatabase xmlns="http://www.fwbuilder.org/1.0/" version="22" lastModified="1320805960" id="root">
<Library id="syslib000" color="#d4f8ff" name="Standard" comment="Standard objects" ro="True">
<AnyNetwork id="sysid0" name="Any" comment="Any Network" ro="False" address="0.0.0.0" netmask="0.0.0.0"/>
<AnyIPService id="sysid1" protocol_num="0" name="Any" comment="Any IP Service" ro="False"/>
@ -4755,6 +4755,7 @@
<Interface id="id100922X6006" dedicated_failover="False" dyn="True" label="" security_level="0" unnum="False" unprotected="False" name="ppp0" comment="" ro="False">
<InterfaceOptions/>
</Interface>
<IPv6 id="id101907X15152" name="firewall95:eth0:ip6" comment="" ro="False" address="fe80::20c:29ff:fe28:c078" netmask="64"/>
</Library>
<Library id="syslib001" color="#d2ffd0" name="User" comment="User defined objects" ro="False">
<ObjectGroup id="stdid01_1_clusters" name="Clusters" comment="" ro="False"/>
@ -4809,6 +4810,7 @@
<IPv6 id="id3110516X16199" name="addr on fw-ipv6-8 local net" comment="this address belongs to the subnet of interface eth0 of firewall-ipv6-8" ro="False" address="fe80::21d:9ff:fe8b:aaaa" netmask="128"/>
<IPv4 id="id58601X22302" name="Address" comment="comment&#10;foo&#10;bar&#10;" ro="False" address="192.0.2.100" netmask="0.0.0.0"/>
<IPv4 id="id1880621X8221" name="addr-222.222.222.40" comment="" ro="False" address="222.222.222.40" netmask="0.0.0.0"/>
<IPv4 id="id102617X15152" name="a-192.168.1.11" comment="" ro="False" address="192.168.1.11" netmask="0.0.0.0"/>
</ObjectGroup>
<ObjectGroup id="stdid04_1" name="Groups" comment="" ro="False">
<ObjectGroup id="id3B4572AF" name="group1" comment="" ro="False">
@ -65202,6 +65204,112 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
<Option name="verify_interfaces">True</Option>
</FirewallOptions>
</Firewall>
<Firewall id="id101894X15152" host_OS="linux24" inactive="False" lastCompiled="0" lastInstalled="0" lastModified="1320806245" platform="iptables" version="1.3.0" name="firewall95" comment="testing rules that use address ranges that include or not include fw" ro="False">
<NAT id="id102533X15152" name="NAT" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="True">
<RuleSetOptions/>
</NAT>
<Policy id="id101909X15152" name="Policy" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="True">
<PolicyRule id="id101911X15152" disabled="False" group="" log="False" position="0" action="Accept" direction="Both" comment="address 192.168.1.11 should not be considered a broadcast on the subnet attached to eth0">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
<Dst neg="False">
<ObjectRef ref="id102617X15152"/>
</Dst>
<Srv neg="False">
<ServiceRef ref="sysid1"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="sysid0"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="color">#C86E6E</Option>
<Option name="pf_classify_str"></Option>
<Option name="stateless">False</Option>
</PolicyRuleOptions>
</PolicyRule>
<RuleSetOptions/>
</Policy>
<Policy id="id102530X15152" name="Policy_v6" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="True" top_rule_set="False">
<RuleSetOptions>
<Option name="mangle_only_rule_set">False</Option>
</RuleSetOptions>
</Policy>
<Routing id="id102536X15152" name="Routing" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="True">
<RuleSetOptions/>
</Routing>
<Interface id="id101902X15152" dedicated_failover="False" dyn="False" label="" security_level="0" unnum="False" unprotected="False" name="eth0" comment="" ro="False">
<IPv4 id="id101906X15152" name="firewall95:eth0:ip" comment="/31 netmask" ro="False" address="192.168.1.10" netmask="255.255.255.254"/>
<InterfaceOptions/>
</Interface>
<Management address="0.0.0.0">
<SNMPManagement enabled="False" snmp_read_community="" snmp_write_community=""/>
<FWBDManagement enabled="False" identity="" port="-1"/>
<PolicyInstallScript arguments="" command="" enabled="False"/>
</Management>
<FirewallOptions>
<Option name="accept_established">True</Option>
<Option name="accept_new_tcp_with_no_syn">True</Option>
<Option name="action_on_reject"></Option>
<Option name="activationCmd"></Option>
<Option name="add_mgmt_ssh_rule_when_stoped">False</Option>
<Option name="add_rules_for_ipv6_neighbor_discovery">False</Option>
<Option name="admUser"></Option>
<Option name="altAddress"></Option>
<Option name="bridging_fw">False</Option>
<Option name="check_shading">False</Option>
<Option name="clamp_mss_to_mtu">False</Option>
<Option name="clear_unknown_interfaces">False</Option>
<Option name="cmdline"></Option>
<Option name="compiler"></Option>
<Option name="configure_bonding_interfaces">False</Option>
<Option name="configure_bridge_interfaces">False</Option>
<Option name="configure_interfaces">True</Option>
<Option name="configure_vlan_interfaces">False</Option>
<Option name="debug">False</Option>
<Option name="drop_invalid">False</Option>
<Option name="epilog_script"></Option>
<Option name="firewall_dir"></Option>
<Option name="firewall_is_part_of_any_and_networks">True</Option>
<Option name="flush_and_set_default_policy">True</Option>
<Option name="ignore_empty_groups">False</Option>
<Option name="ipv4_6_order">ipv4_first</Option>
<Option name="limit_suffix"></Option>
<Option name="limit_value">0</Option>
<Option name="linux24_ip_forward">1</Option>
<Option name="load_modules">True</Option>
<Option name="local_nat">False</Option>
<Option name="log_all">False</Option>
<Option name="log_invalid">False</Option>
<Option name="log_ip_opt">False</Option>
<Option name="log_level">info</Option>
<Option name="log_prefix">RULE %N -- %A</Option>
<Option name="log_tcp_opt">False</Option>
<Option name="log_tcp_seq">False</Option>
<Option name="loopback_interface">lo</Option>
<Option name="manage_virtual_addr">True</Option>
<Option name="mgmt_addr"></Option>
<Option name="mgmt_ssh">False</Option>
<Option name="modules_dir">/lib/modules/`uname -r`/kernel/net/</Option>
<Option name="output_file"></Option>
<Option name="prolog_place">top</Option>
<Option name="prolog_script"></Option>
<Option name="scpArgs"></Option>
<Option name="script_name_on_firewall"></Option>
<Option name="sshArgs"></Option>
<Option name="ulog_cprange">0</Option>
<Option name="ulog_nlgroup">1</Option>
<Option name="ulog_qthreshold">1</Option>
<Option name="use_ULOG">False</Option>
<Option name="use_iptables_restore">False</Option>
<Option name="use_m_set">False</Option>
<Option name="use_numeric_log_levels">False</Option>
<Option name="verify_interfaces">True</Option>
</FirewallOptions>
</Firewall>
</ObjectGroup>
<IntervalGroup id="stdid11_1" name="Time" comment="" ro="False">
<Interval id="id3D6864D0" days_of_week="0,1" from_day="-1" from_hour="1" from_minute="1" from_month="-1" from_weekday="0" from_year="-1" to_day="-1" to_hour="2" to_minute="2" to_month="-1" to_weekday="1" to_year="-1" name="test time 1" comment="" ro="False"/>

4
test/ipt/openais_cluster_1_linux-1.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:53 2011 PST by vadim
# Generated Tue Nov 8 18:28:41 2011 PST by vadim
#
# files: * openais_cluster_1_linux-1.fw /etc/openais_cluster_1_linux-1.fw
#
@ -728,7 +728,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:53 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:28:41 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/openais_cluster_1_linux-2.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:53 2011 PST by vadim
# Generated Tue Nov 8 18:28:41 2011 PST by vadim
#
# files: * openais_cluster_1_linux-2.fw /etc/openais_cluster_1_linux-2.fw
#
@ -632,7 +632,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:53 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:28:41 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

233
test/ipt/rc.firewall.local
View File

@ -1,233 +0,0 @@
#!/bin/sh
#
# This is automatically generated file. DO NOT MODIFY !
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:50 2011 PST by vadim
#
# files: * rc.firewall.local /etc/rc.d//rc.firewall.local
#
# Compiled for iptables (any version)
#
# Endian firewall appliance, 2 interfaces:
# br0 is GREEN
# eth1 is RED
# Do not forget to change IP addresses to
# match your firewall.
PATH="/sbin:/usr/sbin:/bin:/usr/bin:${PATH}"
export PATH
LSMOD="/sbin/lsmod"
MODPROBE="/sbin/modprobe"
IPTABLES="/sbin/iptables"
IP6TABLES="/sbin/ip6tables"
IPTABLES_RESTORE="/sbin/iptables-restore"
IP6TABLES_RESTORE="/sbin/ip6tables-restore"
IP="/sbin/ip"
IFCONFIG="/sbin/ifconfig"
VCONFIG="/sbin/vconfig"
BRCTL="/sbin/brctl"
IFENSLAVE="/sbin/ifenslave"
IPSET="/usr/sbin/ipset"
LOGGER="/usr/bin/logger"
log() {
echo "$1"
which "$LOGGER" >/dev/null 2>&1 && $LOGGER -p info "$1"
}
check_file() {
test -r "$2" || {
echo "Can not find file $2 referenced by AddressTable object $1"
exit 1
}
}
getInterfaceVarName() {
echo $1 | sed 's/\./_/'
}
# function getinterfaces is used to process wildcard interfaces
getinterfaces() {
NAME=$1
$IP link show | grep ": $NAME" | while read L; do
OIFS=$IFS
IFS=" :"
set $L
IFS=$OIFS
echo $2
done
}
find_program() {
PGM=$1
which $PGM >/dev/null 2>&1 || {
echo "$PGM not found"
exit 1
}
}
check_tools() {
find_program $IPTABLES
find_program $MODPROBE
find_program $IP
}
reset_iptables_v4() {
$IPTABLES -P OUTPUT DROP
$IPTABLES -P INPUT DROP
$IPTABLES -P FORWARD DROP
cat /proc/net/ip_tables_names | while read table; do
$IPTABLES -t $table -L -n | while read c chain rest; do
if test "X$c" = "XChain" ; then
$IPTABLES -t $table -F $chain
fi
done
$IPTABLES -t $table -X
done
}
reset_iptables_v6() {
$IP6TABLES -P OUTPUT DROP
$IP6TABLES -P INPUT DROP
$IP6TABLES -P FORWARD DROP
cat /proc/net/ip6_tables_names | while read table; do
$IP6TABLES -t $table -L -n | while read c chain rest; do
if test "X$c" = "XChain" ; then
$IP6TABLES -t $table -F $chain
fi
done
$IP6TABLES -t $table -X
done
}
check_file() {
test -r "$2" || {
echo "Can not find file $2 referenced by address table object $1"
exit 1
}
}
check_run_time_address_table_files() {
:
check_file "atbl.1" "addr-table-1.tbl"
}
verify_interfaces() {
:
echo "Verifying interfaces: et0 eth1"
for i in et0 eth1 ; do
$IP link show "$i" > /dev/null 2>&1 || {
log "Interface $i does not exist"
exit 1
}
done
}
prolog_commands() {
echo "Running prolog script"
}
epilog_commands() {
echo "Running epilog script"
}
run_epilog_and_exit() {
epilog_commands
exit $1
}
script_body() {
# ================ IPv4
# ================ Table 'filter', rule set Policy
#
# Rule 0 (global)
#
echo "Rule 0 (global)"
#
$IPTABLES -A OUTPUT -p tcp -m tcp -d 10.3.14.40 --dport 80 -m state --state NEW -j ACCEPT
$IPTABLES -A FORWARD -p tcp -m tcp -d 10.3.14.40 --dport 80 -m state --state NEW -j ACCEPT
#
# Rule 1 (global)
#
echo "Rule 1 (global)"
#
$IPTABLES -N RULE_1
$IPTABLES -A INPUT -s 192.168.1.1 -j RULE_1
$IPTABLES -A INPUT -s 192.168.1.2 -j RULE_1
$IPTABLES -A INPUT -s 192.168.1.3/30 -j RULE_1
$IPTABLES -A INPUT -s 192.168.1.200 -j RULE_1
$IPTABLES -A INPUT -s 192.168.1.201 -j RULE_1
$IPTABLES -A INPUT -s 192.168.2.128/25 -j RULE_1
$IPTABLES -A FORWARD -s 192.168.1.1 -j RULE_1
$IPTABLES -A FORWARD -s 192.168.1.2 -j RULE_1
$IPTABLES -A FORWARD -s 192.168.1.3/30 -j RULE_1
$IPTABLES -A FORWARD -s 192.168.1.200 -j RULE_1
$IPTABLES -A FORWARD -s 192.168.1.201 -j RULE_1
$IPTABLES -A FORWARD -s 192.168.2.128/25 -j RULE_1
$IPTABLES -A RULE_1 -j LOG --log-level info --log-prefix "RULE 1 -- DENY "
$IPTABLES -A RULE_1 -j DROP
#
# Rule 2 (global)
#
echo "Rule 2 (global)"
#
$IPTABLES -N RULE_2
grep -Ev '^#|^;|^\s*$' addr-table-1.tbl | while read L ; do
set $L; at_atbl_1=$1; $IPTABLES -A INPUT -s $at_atbl_1 -j RULE_2
done
grep -Ev '^#|^;|^\s*$' addr-table-1.tbl | while read L ; do
set $L; at_atbl_1=$1; $IPTABLES -A FORWARD -s $at_atbl_1 -j RULE_2
done
$IPTABLES -A RULE_2 -j LOG --log-level info --log-prefix "RULE 2 -- DENY "
$IPTABLES -A RULE_2 -j DROP
}
reset_all() {
:
reset_iptables_v4
}
case "$1" in
start)
check_tools
check_run_time_address_table_files
verify_interfaces
prolog_commands
script_body
epilog_commands
;;
stop)
# on IPCOP "/etc/rc.firewall stop" purges all tables and chains
# and then calls this script with command "stop", but there is
# nothing left for us to do here.
;;
reload)
$0 stop
$0 start
;;
*)
echo "Usage $0 {start|stop|reload}"
;;
esac

4
test/ipt/rh90.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:50 2011 PST by vadim
# Generated Tue Nov 8 18:28:37 2011 PST by vadim
#
# files: * rh90.fw /etc/rh90.fw
#
@ -442,7 +442,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:50 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:28:37 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/secuwall_cluster_1_secuwall-1.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:53 2011 PST by vadim
# Generated Tue Nov 8 18:28:41 2011 PST by vadim
#
# files: * secuwall_cluster_1_secuwall-1.fw /etc/secuwall_cluster_1_secuwall-1.fw
#
@ -426,7 +426,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:53 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:28:41 2011 by vadim"
log "Database was cluster-tests.fwb"
check_tools
check_run_time_address_table_files

4
test/ipt/server-cluster-1_server-1.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:54 2011 PST by vadim
# Generated Tue Nov 8 18:28:41 2011 PST by vadim
#
# files: * server-cluster-1_server-1.fw /etc/fw/server-cluster-1_server-1.fw
#
@ -421,7 +421,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:54 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:28:41 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/server-cluster-1_server-2.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:54 2011 PST by vadim
# Generated Tue Nov 8 18:28:41 2011 PST by vadim
#
# files: * server-cluster-1_server-2.fw /etc/fw/server-cluster-1_server-2.fw
#
@ -418,7 +418,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:54 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:28:41 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/test-shadowing-1.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:50 2011 PST by vadim
# Generated Tue Nov 8 18:28:39 2011 PST by vadim
#
# files: * test-shadowing-1.fw /etc/test-shadowing-1.fw
#
@ -492,7 +492,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:50 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:28:39 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/test-shadowing-2.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:55 2011 PST by vadim
# Generated Tue Nov 8 18:28:39 2011 PST by vadim
#
# files: * test-shadowing-2.fw /etc/test-shadowing-2.fw
#
@ -450,7 +450,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:55 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:28:39 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/test-shadowing-3.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:55 2011 PST by vadim
# Generated Tue Nov 8 18:28:41 2011 PST by vadim
#
# files: * test-shadowing-3.fw /etc/test-shadowing-3.fw
#
@ -499,7 +499,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:55 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:28:41 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/test_fw.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:50 2011 PST by vadim
# Generated Tue Nov 8 18:28:39 2011 PST by vadim
#
# files: * test_fw.fw /etc/test_fw.fw
#
@ -591,7 +591,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:50 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:28:39 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/vrrp_cluster_1_linux-1.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:54 2011 PST by vadim
# Generated Tue Nov 8 18:28:41 2011 PST by vadim
#
# files: * vrrp_cluster_1_linux-1.fw /etc/vrrp_cluster_1_linux-1.fw
#
@ -731,7 +731,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:54 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:28:41 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/vrrp_cluster_1_linux-2.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:54 2011 PST by vadim
# Generated Tue Nov 8 18:28:42 2011 PST by vadim
#
# files: * vrrp_cluster_1_linux-2.fw /etc/vrrp_cluster_1_linux-2.fw
#
@ -636,7 +636,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:54 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:28:42 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/vrrp_cluster_2_linux-1.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:54 2011 PST by vadim
# Generated Tue Nov 8 18:28:42 2011 PST by vadim
#
# files: * vrrp_cluster_2_linux-1.fw /etc/vrrp_cluster_2_linux-1.fw
#
@ -663,7 +663,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:54 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:28:42 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/vrrp_cluster_2_linux-2.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:55 2011 PST by vadim
# Generated Tue Nov 8 18:28:42 2011 PST by vadim
#
# files: * vrrp_cluster_2_linux-2.fw /etc/vrrp_cluster_2_linux-2.fw
#
@ -568,7 +568,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:55 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:28:42 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files

4
test/ipt/vrrp_cluster_2_linux-3.fw.orig
View File

@ -4,7 +4,7 @@
#
# Firewall Builder fwb_ipt v5.0.1.3584
#
# Generated Tue Nov 8 18:09:55 2011 PST by vadim
# Generated Tue Nov 8 18:28:42 2011 PST by vadim
#
# files: * vrrp_cluster_2_linux-3.fw /etc/vrrp_cluster_2_linux-3.fw
#
@ -544,7 +544,7 @@ test -z "$cmd" && {
case "$cmd" in
start)
log "Activating firewall script generated Tue Nov 8 18:09:55 2011 by vadim"
log "Activating firewall script generated Tue Nov 8 18:28:42 2011 by vadim"
check_tools
prolog_commands
check_run_time_address_table_files