onkelbeh/fwbuilder
1
0
Fork 0
mirror of https://github.com/fwbuilder/fwbuilder synced 2026-03-22 11:17:31 +01:00
Code Issues Releases Wiki Activity

see #1970 ASA Policy - single IPv6 icmp object allowed in rules

Browse Source
This commit is contained in:
Vadim Kurland 2011-01-25 11:09:34 -08:00
parent c1662a70b9
commit 979224573b
3 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/cisco_lib/NATCompiler_asa8.cpp
View File

@ -331,8 +331,8 @@ void NATCompiler_asa8::compile()
*/
add( new DropIPv6RulesWithWarning(
"drop ipv6 rules",
"Rule has been suppressed because it contains IPv6 addresses"));
//add( new dropRuleWithEmptyRE("drop rules with empty rule elements"));
"Rule has been suppressed because it contains IPv6 objects and "
"Firewall Builder does not support IPv6 for this platform"));
add( new eliminateDuplicatesInOSRC("eliminate duplicates in OSRC"));
add( new eliminateDuplicatesInODST("eliminate duplicates in ODST"));

4
src/cisco_lib/NATCompiler_pix.cpp
View File

@ -1690,8 +1690,8 @@ void NATCompiler_pix::compile()
*/
add( new DropIPv6RulesWithWarning(
"drop ipv6 rules",
"Rule has been suppressed because it contains IPv6 addresses"));
//add( new dropRuleWithEmptyRE("drop rules with empty rule elements"));
"Rule has been suppressed because it contains IPv6 objects and "
"Firewall Builder does not support IPv6 for this platform"));
add( new eliminateDuplicatesInOSRC("eliminate duplicates in OSRC"));
add( new eliminateDuplicatesInODST("eliminate duplicates in ODST"));

4
src/cisco_lib/PolicyCompiler_pix.cpp
View File

@ -525,8 +525,8 @@ void PolicyCompiler_pix::compile()
*/
add( new DropIPv6RulesWithWarning(
"drop ipv6 rules",
"Rule has been suppressed because it contains IPv6 addresses"));
//add( new dropRuleWithEmptyRE("drop rules with empty rule elements"));
"Rule has been suppressed because it contains IPv6 objects and "
"Firewall Builder does not support IPv6 for this platform"));
if ( fwopt->getBool("pix_assume_fw_part_of_any"))
{