mirror of
https://github.com/fwbuilder/fwbuilder
synced 2026-09-13 16:39:48 +02:00
see #1970 ASA Policy - single IPv6 icmp object allowed in rules
This commit is contained in:
@@ -331,8 +331,8 @@ void NATCompiler_asa8::compile()
|
||||
*/
|
||||
add( new DropIPv6RulesWithWarning(
|
||||
"drop ipv6 rules",
|
||||
"Rule has been suppressed because it contains IPv6 addresses"));
|
||||
//add( new dropRuleWithEmptyRE("drop rules with empty rule elements"));
|
||||
"Rule has been suppressed because it contains IPv6 objects and "
|
||||
"Firewall Builder does not support IPv6 for this platform"));
|
||||
|
||||
add( new eliminateDuplicatesInOSRC("eliminate duplicates in OSRC"));
|
||||
add( new eliminateDuplicatesInODST("eliminate duplicates in ODST"));
|
||||
|
||||
@@ -1690,8 +1690,8 @@ void NATCompiler_pix::compile()
|
||||
*/
|
||||
add( new DropIPv6RulesWithWarning(
|
||||
"drop ipv6 rules",
|
||||
"Rule has been suppressed because it contains IPv6 addresses"));
|
||||
//add( new dropRuleWithEmptyRE("drop rules with empty rule elements"));
|
||||
"Rule has been suppressed because it contains IPv6 objects and "
|
||||
"Firewall Builder does not support IPv6 for this platform"));
|
||||
|
||||
add( new eliminateDuplicatesInOSRC("eliminate duplicates in OSRC"));
|
||||
add( new eliminateDuplicatesInODST("eliminate duplicates in ODST"));
|
||||
|
||||
@@ -525,8 +525,8 @@ void PolicyCompiler_pix::compile()
|
||||
*/
|
||||
add( new DropIPv6RulesWithWarning(
|
||||
"drop ipv6 rules",
|
||||
"Rule has been suppressed because it contains IPv6 addresses"));
|
||||
//add( new dropRuleWithEmptyRE("drop rules with empty rule elements"));
|
||||
"Rule has been suppressed because it contains IPv6 objects and "
|
||||
"Firewall Builder does not support IPv6 for this platform"));
|
||||
|
||||
if ( fwopt->getBool("pix_assume_fw_part_of_any"))
|
||||
{
|
||||
|
||||
Reference in New Issue
Block a user