diff --git a/doc/ChangeLog b/doc/ChangeLog index c93271952..c47120103 100644 --- a/doc/ChangeLog +++ b/doc/ChangeLog @@ -1,5 +1,8 @@ 2011-01-04 vadim + * platform/fwsm.xml: FWSM v4.x does not have "fixup" command, instead, + we should use policy-map and class commands. + * OSConfigurator_pix_os_inspectors_pix8.cpp (_printPolicyMapTypeInspect): refs #1893 fixes #1883 "inspect ip options in pix8". Added support for "policy-map type inspect ip-options" command in PIX v8.2 and later. diff --git a/src/cisco_lib/OSConfigurator_pix_os.h b/src/cisco_lib/OSConfigurator_pix_os.h index ec6d3ea83..3fd820b1e 100644 --- a/src/cisco_lib/OSConfigurator_pix_os.h +++ b/src/cisco_lib/OSConfigurator_pix_os.h @@ -79,7 +79,7 @@ namespace fwcompiler { int arg2, bool ov); std::string _printFixups(); - std::string _printPolicyMapGlobalPolicy(); + std::string _printMPFPolicyMap(); std::string _printPolicyMapTypeInspect(); public: diff --git a/src/cisco_lib/OSConfigurator_pix_os_fixups.cpp b/src/cisco_lib/OSConfigurator_pix_os_fixups.cpp index 200112c15..c0055dae7 100644 --- a/src/cisco_lib/OSConfigurator_pix_os_fixups.cpp +++ b/src/cisco_lib/OSConfigurator_pix_os_fixups.cpp @@ -173,15 +173,22 @@ string OSConfigurator_pix_os::getProtocolInspectionCommands() string platform = fw->getStr("platform"); string version = fw->getStr("version"); + ostringstream res; + if (Resources::platform_res[platform]->getResourceBool( "/FWBuilderResources/Target/options/version_" + version + - "/fixups/use_policy_map_global_policy")) - return _printPolicyMapGlobalPolicy(); + "/fixups/use_fixup_commands")) + res << _printFixups(); + + if (Resources::platform_res[platform]->getResourceBool( + "/FWBuilderResources/Target/options/version_" + version + + "/fixups/use_mpf_policy_map")) + res << _printMPFPolicyMap(); if (Resources::platform_res[platform]->getResourceBool( "/FWBuilderResources/Target/options/version_" + version + "/fixups/use_policy_map_type_inspect")) - return _printPolicyMapTypeInspect(); + res << _printPolicyMapTypeInspect(); - return _printFixups(); + return res.str(); } diff --git a/src/cisco_lib/OSConfigurator_pix_os_inspectors.cpp b/src/cisco_lib/OSConfigurator_pix_os_inspectors.cpp index 7bed1934e..0b5b56419 100644 --- a/src/cisco_lib/OSConfigurator_pix_os_inspectors.cpp +++ b/src/cisco_lib/OSConfigurator_pix_os_inspectors.cpp @@ -55,7 +55,7 @@ using namespace std; * ********************************************************************/ -string OSConfigurator_pix_os::_printPolicyMapGlobalPolicy() +string OSConfigurator_pix_os::_printMPFPolicyMap() { ostringstream res; string platform = fw->getStr("platform"); @@ -167,9 +167,10 @@ string OSConfigurator_pix_os::_printPolicyMapGlobalPolicy() } } } - res << endl; + res << endl; res << "service-policy global_policy global" << endl; + res << endl; return res.str(); } diff --git a/src/cisco_lib/OSConfigurator_pix_os_inspectors_pix8.cpp b/src/cisco_lib/OSConfigurator_pix_os_inspectors_pix8.cpp index df2047ca8..9bed28f0c 100644 --- a/src/cisco_lib/OSConfigurator_pix_os_inspectors_pix8.cpp +++ b/src/cisco_lib/OSConfigurator_pix_os_inspectors_pix8.cpp @@ -126,9 +126,6 @@ string OSConfigurator_pix_os::_printPolicyMapTypeInspect() res << endl; - // now generate class-map and "policy-map global_policy" commands - res << _printPolicyMapGlobalPolicy(); - return res.str(); } diff --git a/src/res/platform/fwsm.xml b/src/res/platform/fwsm.xml index 7126f18fc..226c32048 100644 --- a/src/res/platform/fwsm.xml +++ b/src/res/platform/fwsm.xml @@ -112,7 +112,11 @@ nameif %in %il security%sl dns_fixup,espike_fixup,ftp_fixup,h323_h225_fixup,h323_ras_fixup,http_fixup,icmp_error_fixup,ils_fixup,mgcp_fixup,rsh_fixup,rtsp_fixup,sip_fixup,sip_udp_fixup,skinny_fixup,smtp_fixup,sqlnet_fixup,tftp_fixup - false + + true + false + false + @@ -202,8 +206,13 @@ nameif %in %il security%sl dns_fixup,espike_fixup,ftp_fixup,h323_h225_fixup,h323_ras_fixup,http_fixup,icmp_error_fixup,ils_fixup,mgcp_fixup,rsh_fixup,rtsp_fixup,sip_fixup,sip_udp_fixup,skinny_fixup,smtp_fixup,sqlnet_fixup,tftp_fixup - false + + false + true + true + + diff --git a/src/res/platform/pix.xml b/src/res/platform/pix.xml index e0a79bdb3..9f52a6107 100644 --- a/src/res/platform/pix.xml +++ b/src/res/platform/pix.xml @@ -104,7 +104,9 @@ ftp_fixup,http_fixup,h323_h225_fixup,h323_ras_fixup,rsh_fixup,rtsp_fixup,sip_fixup,skinny_fixup,smtp_fixup,sqlnet_fixup - false + + true + false false @@ -185,7 +187,9 @@ ftp_fixup,http_fixup,h323_h225_fixup,h323_ras_fixup,ils_fixup,rsh_fixup,rtsp_fixup,sip_fixup,skinny_fixup,smtp_fixup,sqlnet_fixup - false + + true + false false @@ -266,7 +270,9 @@ ctiqbe_fixup,dns_fixup,espike_fixup,ftp_fixup,h323_h225_fixup,h323_ras_fixup,http_fixup,icmp_error_fixup,ils_fixup,mgcp_fixup,pptp_fixup,rsh_fixup,rtsp_fixup,sip_fixup,sip_udp_fixup,skinny_fixup,smtp_fixup,sqlnet_fixup,tftp_fixup - false + + true + false false @@ -348,7 +354,8 @@ ctiqbe_fixup,dns_fixup,ftp_fixup,h323_h225_fixup,h323_ras_fixup,http_fixup,icmp_error_fixup,ils_fixup,mgcp_fixup,rsh_fixup,rtsp_fixup,sip_fixup,sip_udp_fixup,skinny_fixup,smtp_fixup,sqlnet_fixup,tftp_fixup - true + false + true false @@ -431,7 +438,8 @@ ctiqbe_fixup,dns_fixup,ftp_fixup,h323_h225_fixup,h323_ras_fixup,http_fixup,icmp_error_fixup,ils_fixup,mgcp_fixup,rsh_fixup,rtsp_fixup,sip_fixup,sip_udp_fixup,skinny_fixup,smtp_fixup,sqlnet_fixup,tftp_fixup - false + false + true true @@ -514,7 +522,8 @@ ctiqbe_fixup,dns_fixup,ftp_fixup,h323_h225_fixup,h323_ras_fixup,http_fixup,icmp_error_fixup,ils_fixup,mgcp_fixup,rsh_fixup,rtsp_fixup,sip_fixup,sip_udp_fixup,skinny_fixup,smtp_fixup,sqlnet_fixup,tftp_fixup,ip_options_eool_fixup,ip_options_nop_fixup,ip_options_rtralt_fixup - false + false + true true @@ -597,7 +606,10 @@ ctiqbe_fixup,dns_fixup,ftp_fixup,h323_h225_fixup,h323_ras_fixup,http_fixup,icmp_error_fixup,ils_fixup,mgcp_fixup,rsh_fixup,rtsp_fixup,sip_fixup,sip_udp_fixup,skinny_fixup,smtp_fixup,sqlnet_fixup,tftp_fixup,ip_options_eool_fixup,ip_options_nop_fixup,ip_options_rtralt_fixup - true + + false + true + true diff --git a/test/pix/cluster1-1_pix1.fw.orig b/test/pix/cluster1-1_pix1.fw.orig index e33740b6c..bdb68c52e 100755 --- a/test/pix/cluster1-1_pix1.fw.orig +++ b/test/pix/cluster1-1_pix1.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3425 ! -! Generated Tue Jan 4 17:00:29 2011 PST by vadim +! Generated Tue Jan 4 19:05:48 2011 PST by vadim ! ! Compiled for pix 7.0 ! Outbound ACLs: supported diff --git a/test/pix/cluster1-1_pix2.fw.orig b/test/pix/cluster1-1_pix2.fw.orig index f37d2aeff..167378768 100755 --- a/test/pix/cluster1-1_pix2.fw.orig +++ b/test/pix/cluster1-1_pix2.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3425 ! -! Generated Tue Jan 4 17:00:29 2011 PST by vadim +! Generated Tue Jan 4 19:05:48 2011 PST by vadim ! ! Compiled for pix 7.0 ! Outbound ACLs: supported diff --git a/test/pix/cluster1_pix1.fw.orig b/test/pix/cluster1_pix1.fw.orig index 048e70eda..bfe12aea6 100755 --- a/test/pix/cluster1_pix1.fw.orig +++ b/test/pix/cluster1_pix1.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3425 ! -! Generated Tue Jan 4 17:00:28 2011 PST by vadim +! Generated Tue Jan 4 19:05:48 2011 PST by vadim ! ! Compiled for pix 7.0 ! Outbound ACLs: supported diff --git a/test/pix/cluster1_pix2.fw.orig b/test/pix/cluster1_pix2.fw.orig index 632a74649..929f40851 100755 --- a/test/pix/cluster1_pix2.fw.orig +++ b/test/pix/cluster1_pix2.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3425 ! -! Generated Tue Jan 4 17:00:29 2011 PST by vadim +! Generated Tue Jan 4 19:05:48 2011 PST by vadim ! ! Compiled for pix 7.0 ! Outbound ACLs: supported diff --git a/test/pix/firewall.fw.orig b/test/pix/firewall.fw.orig index 73baafc45..3a4021100 100755 --- a/test/pix/firewall.fw.orig +++ b/test/pix/firewall.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3425 ! -! Generated Tue Jan 4 17:00:10 2011 PST by vadim +! Generated Tue Jan 4 19:05:30 2011 PST by vadim ! ! Compiled for pix 6.2 ! Outbound ACLs: not supported diff --git a/test/pix/firewall1.fw.orig b/test/pix/firewall1.fw.orig index 2ef946d8b..3d965a368 100755 --- a/test/pix/firewall1.fw.orig +++ b/test/pix/firewall1.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3425 ! -! Generated Tue Jan 4 17:00:11 2011 PST by vadim +! Generated Tue Jan 4 19:05:31 2011 PST by vadim ! ! Compiled for pix 6.1 ! Outbound ACLs: not supported diff --git a/test/pix/firewall10.fw.orig b/test/pix/firewall10.fw.orig index 8f113ee79..0a32446cf 100755 --- a/test/pix/firewall10.fw.orig +++ b/test/pix/firewall10.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3425 ! -! Generated Tue Jan 4 17:00:12 2011 PST by vadim +! Generated Tue Jan 4 19:05:31 2011 PST by vadim ! ! Compiled for pix 6.3 ! Outbound ACLs: not supported diff --git a/test/pix/firewall11.fw.orig b/test/pix/firewall11.fw.orig index 3ebef2355..c87c3f532 100755 --- a/test/pix/firewall11.fw.orig +++ b/test/pix/firewall11.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3425 ! -! Generated Tue Jan 4 17:00:12 2011 PST by vadim +! Generated Tue Jan 4 19:05:32 2011 PST by vadim ! ! Compiled for pix 6.2 ! Outbound ACLs: not supported diff --git a/test/pix/firewall12.fw.orig b/test/pix/firewall12.fw.orig index d16bb75ac..d271817df 100755 --- a/test/pix/firewall12.fw.orig +++ b/test/pix/firewall12.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3425 ! -! Generated Tue Jan 4 17:00:13 2011 PST by vadim +! Generated Tue Jan 4 19:05:32 2011 PST by vadim ! ! Compiled for pix 6.3 ! Outbound ACLs: not supported diff --git a/test/pix/firewall13.fw.orig b/test/pix/firewall13.fw.orig index 656e6d2e7..cc17db0ae 100755 --- a/test/pix/firewall13.fw.orig +++ b/test/pix/firewall13.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3425 ! -! Generated Tue Jan 4 17:00:13 2011 PST by vadim +! Generated Tue Jan 4 19:05:33 2011 PST by vadim ! ! Compiled for pix 6.3 ! Outbound ACLs: not supported diff --git a/test/pix/firewall14.fw.orig b/test/pix/firewall14.fw.orig index 49b5a3bb6..e69c7719c 100755 --- a/test/pix/firewall14.fw.orig +++ b/test/pix/firewall14.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3425 ! -! Generated Tue Jan 4 17:00:14 2011 PST by vadim +! Generated Tue Jan 4 19:05:34 2011 PST by vadim ! ! Compiled for pix 6.3 ! Outbound ACLs: not supported diff --git a/test/pix/firewall2.fw.orig b/test/pix/firewall2.fw.orig index 2d389dc59..03a9b4de5 100755 --- a/test/pix/firewall2.fw.orig +++ b/test/pix/firewall2.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3425 ! -! Generated Tue Jan 4 17:00:15 2011 PST by vadim +! Generated Tue Jan 4 19:05:34 2011 PST by vadim ! ! Compiled for pix 6.3 ! Outbound ACLs: not supported diff --git a/test/pix/firewall20.fw.orig b/test/pix/firewall20.fw.orig index 06d9035fc..e643dc137 100755 --- a/test/pix/firewall20.fw.orig +++ b/test/pix/firewall20.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3425 ! -! Generated Tue Jan 4 17:00:15 2011 PST by vadim +! Generated Tue Jan 4 19:05:35 2011 PST by vadim ! ! Compiled for pix 6.3 ! Outbound ACLs: not supported diff --git a/test/pix/firewall21-1.fw.orig b/test/pix/firewall21-1.fw.orig index 9e6f0af34..f026bd253 100755 --- a/test/pix/firewall21-1.fw.orig +++ b/test/pix/firewall21-1.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3425 ! -! Generated Tue Jan 4 17:00:16 2011 PST by vadim +! Generated Tue Jan 4 19:05:36 2011 PST by vadim ! ! Compiled for pix 6.3 ! Outbound ACLs: not supported diff --git a/test/pix/firewall21.fw.orig b/test/pix/firewall21.fw.orig index 05658876e..04260847b 100755 --- a/test/pix/firewall21.fw.orig +++ b/test/pix/firewall21.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3425 ! -! Generated Tue Jan 4 17:00:16 2011 PST by vadim +! Generated Tue Jan 4 19:05:36 2011 PST by vadim ! ! Compiled for pix 7.0 ! Outbound ACLs: supported diff --git a/test/pix/firewall22.fw.orig b/test/pix/firewall22.fw.orig index aa4b8a366..ba7fb9fcc 100755 --- a/test/pix/firewall22.fw.orig +++ b/test/pix/firewall22.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3425 ! -! Generated Tue Jan 4 17:00:17 2011 PST by vadim +! Generated Tue Jan 4 19:05:37 2011 PST by vadim ! ! Compiled for pix 7.0 ! Outbound ACLs: supported diff --git a/test/pix/firewall3.fw.orig b/test/pix/firewall3.fw.orig index b975c3e78..09292f1b4 100755 --- a/test/pix/firewall3.fw.orig +++ b/test/pix/firewall3.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3425 ! -! Generated Tue Jan 4 17:00:18 2011 PST by vadim +! Generated Tue Jan 4 19:05:37 2011 PST by vadim ! ! Compiled for pix 6.2 ! Outbound ACLs: not supported diff --git a/test/pix/firewall33.fw.orig b/test/pix/firewall33.fw.orig index b84118b20..d30e69302 100755 --- a/test/pix/firewall33.fw.orig +++ b/test/pix/firewall33.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3425 ! -! Generated Tue Jan 4 17:00:19 2011 PST by vadim +! Generated Tue Jan 4 19:05:38 2011 PST by vadim ! ! Compiled for pix 6.3 ! Outbound ACLs: not supported diff --git a/test/pix/firewall34.fw.orig b/test/pix/firewall34.fw.orig index 8b762e301..138681d12 100755 --- a/test/pix/firewall34.fw.orig +++ b/test/pix/firewall34.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3425 ! -! Generated Tue Jan 4 17:00:19 2011 PST by vadim +! Generated Tue Jan 4 19:05:39 2011 PST by vadim ! ! Compiled for pix 6.3 ! Outbound ACLs: not supported diff --git a/test/pix/firewall4.fw.orig b/test/pix/firewall4.fw.orig index daf63c554..cd367fa42 100755 --- a/test/pix/firewall4.fw.orig +++ b/test/pix/firewall4.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3425 ! -! Generated Tue Jan 4 17:00:20 2011 PST by vadim +! Generated Tue Jan 4 19:05:40 2011 PST by vadim ! ! Compiled for pix 6.2 ! Outbound ACLs: not supported diff --git a/test/pix/firewall50.fw.orig b/test/pix/firewall50.fw.orig index b63abb01d..22d89a367 100755 --- a/test/pix/firewall50.fw.orig +++ b/test/pix/firewall50.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3425 ! -! Generated Tue Jan 4 17:00:21 2011 PST by vadim +! Generated Tue Jan 4 19:05:40 2011 PST by vadim ! ! Compiled for pix 7.0 ! Outbound ACLs: supported diff --git a/test/pix/firewall6.fw.orig b/test/pix/firewall6.fw.orig index 6b22da213..b3a2c96be 100755 --- a/test/pix/firewall6.fw.orig +++ b/test/pix/firewall6.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3425 ! -! Generated Tue Jan 4 17:00:21 2011 PST by vadim +! Generated Tue Jan 4 19:05:41 2011 PST by vadim ! ! Compiled for pix 6.2 ! Outbound ACLs: not supported diff --git a/test/pix/firewall8.fw.orig b/test/pix/firewall8.fw.orig index 34a27617a..b0cbcac97 100755 --- a/test/pix/firewall8.fw.orig +++ b/test/pix/firewall8.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3425 ! -! Generated Tue Jan 4 17:00:22 2011 PST by vadim +! Generated Tue Jan 4 19:05:42 2011 PST by vadim ! ! Compiled for pix 6.2 ! Outbound ACLs: not supported diff --git a/test/pix/firewall80.fw.orig b/test/pix/firewall80.fw.orig index 1f579d664..ca13eaccd 100755 --- a/test/pix/firewall80.fw.orig +++ b/test/pix/firewall80.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3425 ! -! Generated Tue Jan 4 17:00:23 2011 PST by vadim +! Generated Tue Jan 4 19:05:43 2011 PST by vadim ! ! Compiled for pix 8.2 ! Outbound ACLs: supported @@ -72,11 +72,6 @@ no sysopt nodnsalias inbound no sysopt nodnsalias outbound -policy-map type inspect ip-options ip-options-map -parameters - eool action allow - router-alert action clear - class-map inspection_default match default-inspection-traffic @@ -85,6 +80,11 @@ policy-map global_policy service-policy global_policy global +policy-map type inspect ip-options ip-options-map +parameters + eool action allow + router-alert action clear + !################ clear config access-list diff --git a/test/pix/firewall9.fw.orig b/test/pix/firewall9.fw.orig index 303e7b122..79b707940 100755 --- a/test/pix/firewall9.fw.orig +++ b/test/pix/firewall9.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3425 ! -! Generated Tue Jan 4 17:00:23 2011 PST by vadim +! Generated Tue Jan 4 19:05:43 2011 PST by vadim ! ! Compiled for pix 6.3 ! Outbound ACLs: not supported diff --git a/test/pix/fwsm1.fw.orig b/test/pix/fwsm1.fw.orig index 837ea5fab..f69953bc2 100755 --- a/test/pix/fwsm1.fw.orig +++ b/test/pix/fwsm1.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3425 ! -! Generated Tue Jan 4 17:00:24 2011 PST by vadim +! Generated Tue Jan 4 19:05:44 2011 PST by vadim ! ! Compiled for fwsm 2.3 ! Outbound ACLs: supported diff --git a/test/pix/fwsm2.fw.orig b/test/pix/fwsm2.fw.orig index 6419e91cb..53a5794b0 100755 --- a/test/pix/fwsm2.fw.orig +++ b/test/pix/fwsm2.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3425 ! -! Generated Tue Jan 4 17:00:25 2011 PST by vadim +! Generated Tue Jan 4 19:05:45 2011 PST by vadim ! ! Compiled for fwsm 4.x ! Outbound ACLs: supported @@ -82,17 +82,28 @@ sysopt nodnsalias outbound floodguard disable -fixup protocol ftp 21 -fixup protocol h323 h225 1720 -fixup protocol h323 ras 1718-1719 -fixup protocol http 80 -fixup protocol ils 389 -fixup protocol rsh 514 -fixup protocol rtsp 554 -fixup protocol sip 5060 -fixup protocol skinny 2000 -fixup protocol smtp 25 -fixup protocol sqlnet 1521 +class-map inspection_default + match default-inspection-traffic + +class-map custom_espike_inspection + match port + + +policy-map global_policy + class inspection_default + inspect ftp + inspect h323 h225 + inspect h323 ras + inspect http + inspect ils + inspect rsh + inspect rtsp + inspect sip + inspect skinny + inspect esmtp + inspect sqlnet + +service-policy global_policy global !################ diff --git a/test/pix/pix515.fw.orig b/test/pix/pix515.fw.orig index dbcdcb0bf..ffad3fbb7 100755 --- a/test/pix/pix515.fw.orig +++ b/test/pix/pix515.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3425 ! -! Generated Tue Jan 4 17:00:26 2011 PST by vadim +! Generated Tue Jan 4 19:05:46 2011 PST by vadim ! ! Compiled for pix 7.0 ! Outbound ACLs: supported diff --git a/test/pix/real.fw.orig b/test/pix/real.fw.orig index 8aafe6176..cd08f8a28 100755 --- a/test/pix/real.fw.orig +++ b/test/pix/real.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3425 ! -! Generated Tue Jan 4 17:00:27 2011 PST by vadim +! Generated Tue Jan 4 19:05:46 2011 PST by vadim ! ! Compiled for pix 6.3 ! Outbound ACLs: not supported