mirror of
https://github.com/fwbuilder/fwbuilder
synced 2025-10-15 23:18:51 +02:00
making lists of interface configuration commands come out in a stable order, sorted by interface name; added test cases for vlan interfaces in shell and rc.conf formats; added vlan interfaces to cloned_interfaces line
This commit is contained in:
Vadim Kurland
parent
e2f05c1e0a
commit
bef9936ed5
@ -76,39 +76,46 @@ string OSConfigurator_bsd::configureInterfaces()
|
||||
{
|
||||
// http://blog.scottlowe.org/2007/08/31/vlan-interfaces-with-openbsd-41/
|
||||
// ifconfig <VLAN interface name> vlan <VLAN ID> vlandev <physical network device>
|
||||
QMap<Interface*, QStringList> vlan_subinterfaces;
|
||||
QStringList vlan_interfaces; // all vlan interfaces
|
||||
|
||||
QStringList all_physical_interfaces;
|
||||
QMap<QString, Interface*> parent_interfaces;
|
||||
QMap<QString, QStringList> vlans;
|
||||
QStringList all_vlan_interfaces; // all vlan interfaces
|
||||
|
||||
FWObjectTypedChildIterator i=fw->findByType(Interface::TYPENAME);
|
||||
for ( ; i!=i.end(); ++i )
|
||||
{
|
||||
Interface *iface = Interface::cast(*i);
|
||||
assert(iface);
|
||||
QString iface_name = iface->getName().c_str();
|
||||
parent_interfaces[iface_name] = iface;
|
||||
all_physical_interfaces << iface_name;
|
||||
|
||||
FWObjectTypedChildIterator si=iface->findByType(Interface::TYPENAME);
|
||||
for ( ; si!=si.end(); ++si )
|
||||
{
|
||||
Interface *subinterface = Interface::cast(*si);
|
||||
assert(subinterface);
|
||||
|
||||
if (subinterface->getOptionsObject()->getStr("type") == "8021q")
|
||||
{
|
||||
vlan_subinterfaces[iface] << subinterface->getName().c_str();
|
||||
vlan_interfaces << subinterface->getName().c_str();
|
||||
vlans[iface_name] << subinterface->getName().c_str();
|
||||
all_vlan_interfaces << subinterface->getName().c_str();
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
QMap<Interface*,QStringList>::iterator it;
|
||||
// sort interfaces by name
|
||||
all_vlan_interfaces.sort();
|
||||
all_physical_interfaces.sort();
|
||||
|
||||
// issue sync_vlan_interfaces command even if there are no vlans
|
||||
// since it deletes them on the firewall if they exist
|
||||
summaryConfigLineVlan(vlan_interfaces);
|
||||
summaryConfigLineVlan(all_vlan_interfaces);
|
||||
|
||||
for (it=vlan_subinterfaces.begin(); it!=vlan_subinterfaces.end(); ++it)
|
||||
foreach (QString iface_name, all_physical_interfaces)
|
||||
{
|
||||
Interface *iface = it.key();
|
||||
QStringList vlan_subinterfaces = it.value();
|
||||
Interface *iface = parent_interfaces[iface_name];
|
||||
QStringList vlan_subinterfaces = vlans[iface_name];
|
||||
if (vlan_subinterfaces.size() > 0)
|
||||
interfaceConfigLineVlan(iface, vlan_subinterfaces);
|
||||
}
|
||||
@ -118,42 +125,38 @@ string OSConfigurator_bsd::configureInterfaces()
|
||||
{
|
||||
list<Interface*> all_bridges = fw->getInterfacesByType("bridge");
|
||||
|
||||
QMap<Interface*, QStringList> bridge_subinterfaces;
|
||||
QStringList bridge_interfaces;
|
||||
QStringList all_bridge_interfaces;
|
||||
QMap<QString, Interface*> bridge_interfaces_by_name;
|
||||
QMap<QString, QStringList> bridge_ports;
|
||||
|
||||
for (list<Interface*>::iterator it=all_bridges.begin();
|
||||
it!=all_bridges.end(); ++it)
|
||||
{
|
||||
Interface *iface = Interface::cast(*it);
|
||||
assert(iface);
|
||||
QString iface_name = iface->getName().c_str();
|
||||
all_bridge_interfaces << iface_name;
|
||||
bridge_interfaces_by_name[iface_name] = iface;
|
||||
|
||||
bridge_interfaces << iface->getName().c_str();
|
||||
|
||||
// this if() is superfluous
|
||||
if (iface->getOptionsObject()->getStr("type") == "bridge")
|
||||
FWObjectTypedChildIterator si = iface->findByType(Interface::TYPENAME);
|
||||
for ( ; si!=si.end(); ++si )
|
||||
{
|
||||
FWObjectTypedChildIterator si =
|
||||
iface->findByType(Interface::TYPENAME);
|
||||
for ( ; si!=si.end(); ++si )
|
||||
{
|
||||
Interface *subinterface = Interface::cast(*si);
|
||||
assert(subinterface);
|
||||
bridge_subinterfaces[iface] << subinterface->getName().c_str();
|
||||
}
|
||||
Interface *subinterface = Interface::cast(*si);
|
||||
assert(subinterface);
|
||||
bridge_ports[iface_name] << subinterface->getName().c_str();
|
||||
}
|
||||
}
|
||||
|
||||
QMap<Interface*,QStringList>::iterator it;
|
||||
// sort interfaces by name
|
||||
all_bridge_interfaces.sort();
|
||||
|
||||
summaryConfigLineBridge(bridge_interfaces);
|
||||
summaryConfigLineBridge(all_bridge_interfaces);
|
||||
|
||||
for (it=bridge_subinterfaces.begin(); it!=bridge_subinterfaces.end(); ++it)
|
||||
foreach (QString iface_name, all_bridge_interfaces)
|
||||
{
|
||||
Interface *iface = it.key();
|
||||
QStringList bridge_ports = it.value();
|
||||
|
||||
Interface *iface = bridge_interfaces_by_name[iface_name];
|
||||
if (bridge_ports.size() > 0)
|
||||
interfaceConfigLineBridge(iface, bridge_ports);
|
||||
interfaceConfigLineBridge(iface, bridge_ports[iface_name]);
|
||||
}
|
||||
}
|
||||
|
||||
@ -169,34 +172,37 @@ string OSConfigurator_bsd::configureInterfaces()
|
||||
*
|
||||
*/
|
||||
QStringList carp_interfaces;
|
||||
QMap<Interface*, FWObject*> failover_groups;
|
||||
QMap<QString, Interface*> carp_interfaces_by_name;
|
||||
QMap<QString, FWObject*> failover_groups;
|
||||
|
||||
FWObjectTypedChildIterator i=fw->findByType(Interface::TYPENAME);
|
||||
for ( ; i!=i.end(); ++i )
|
||||
{
|
||||
Interface *iface = Interface::cast(*i);
|
||||
assert(iface);
|
||||
|
||||
QString iface_name = iface->getName().c_str();
|
||||
if ( ! iface->isFailoverInterface()) continue;
|
||||
|
||||
FWObject *failover_group =
|
||||
iface->getFirstByType(FailoverClusterGroup::TYPENAME);
|
||||
if (failover_group && failover_group->getStr("type") == "carp")
|
||||
{
|
||||
carp_interfaces << iface->getName().c_str();
|
||||
failover_groups[iface] = failover_group;
|
||||
carp_interfaces << iface_name;
|
||||
carp_interfaces_by_name[iface_name] = iface;
|
||||
failover_groups[iface_name] = failover_group;
|
||||
}
|
||||
}
|
||||
|
||||
// sort interfaces by name
|
||||
carp_interfaces.sort();
|
||||
|
||||
// issue "sync_carp_interfaces" call even when we have none, it will
|
||||
// delete those that might exist on the firewall
|
||||
summaryConfigLineCARP(carp_interfaces);
|
||||
|
||||
QMap<Interface*, FWObject*>::iterator it;
|
||||
for (it=failover_groups.begin(); it!=failover_groups.end(); ++it)
|
||||
foreach (QString iface_name, carp_interfaces)
|
||||
{
|
||||
Interface *iface = it.key();
|
||||
FWObject* failover_group = it.value();
|
||||
Interface *iface = carp_interfaces_by_name[iface_name];
|
||||
FWObject* failover_group = failover_groups[iface_name];
|
||||
interfaceConfigLineCARP(iface, failover_group);
|
||||
}
|
||||
}
|
||||
@ -214,15 +220,18 @@ string OSConfigurator_bsd::configureInterfaces()
|
||||
QStringList configure_intf_commands;
|
||||
QStringList intf_names;
|
||||
QStringList ipv6_names;
|
||||
QMap<Interface*, list<pair<InetAddr,InetAddr> > > all_addresses;
|
||||
QStringList all_names;
|
||||
QMap<QString, list<pair<InetAddr,InetAddr> > > all_addresses;
|
||||
QMap<QString, Interface*> interfaces_by_name;
|
||||
|
||||
for (list<FWObject*>::iterator i=all_interfaces.begin();
|
||||
i != all_interfaces.end(); ++i )
|
||||
{
|
||||
Interface *iface = Interface::cast(*i);
|
||||
assert(iface);
|
||||
|
||||
//if (!iface->isRegular()) continue;
|
||||
QString iface_name = iface->getName().c_str();
|
||||
interfaces_by_name[iface_name] = iface;
|
||||
all_names << iface_name;
|
||||
|
||||
QStringList update_addresses;
|
||||
QStringList ignore_addresses;
|
||||
@ -238,19 +247,7 @@ string OSConfigurator_bsd::configureInterfaces()
|
||||
list<FWObject*> all_ipv6 = iface->getByType(IPv6::TYPENAME);
|
||||
all_addr.insert(all_addr.begin(), all_ipv6.begin(), all_ipv6.end());
|
||||
|
||||
// see #2032. About interfaces with no addresses:
|
||||
//
|
||||
// - when we generate rc.conf file, we should add line
|
||||
// "ifconfig_em0="DHCP"" for dynamic interfaces, so we should
|
||||
// include them in the management list as well.
|
||||
//
|
||||
// Note that int_prop returns false for dynamic interfaces on
|
||||
// OpenBSD because we do not support rc.conf format for it atm
|
||||
// and should not try to manage dynamic interfaces in the shell
|
||||
// script format.
|
||||
//
|
||||
intf_names << iface->getName().c_str();
|
||||
ipv6_names << iface->getName().c_str();
|
||||
bool have_ipv6 = false;
|
||||
|
||||
const InetAddr *netmask = iface->getNetmaskPtr();
|
||||
|
||||
@ -264,12 +261,14 @@ string OSConfigurator_bsd::configureInterfaces()
|
||||
const InetAddr *ipnetm = iaddr->getNetmaskPtr();
|
||||
iface_all_addresses.push_back(
|
||||
pair<InetAddr,InetAddr>(*ipaddr, *ipnetm));
|
||||
if (ipaddr->isV6()) have_ipv6 = true;
|
||||
}
|
||||
|
||||
set<const Address*>::iterator it;
|
||||
for (it=virtual_addresses.begin(); it!=virtual_addresses.end(); ++it)
|
||||
{
|
||||
const Address *addr = *it;
|
||||
const InetAddr *ipaddr = addr->getAddressPtr();
|
||||
FWObject *iaddr = findAddressFor(addr, fw );
|
||||
if (iaddr!=NULL)
|
||||
{
|
||||
@ -277,27 +276,42 @@ string OSConfigurator_bsd::configureInterfaces()
|
||||
if (iface_2 == iface)
|
||||
{
|
||||
iface_all_addresses.push_back(
|
||||
pair<InetAddr,InetAddr>(
|
||||
*(addr->getAddressPtr()), *netmask));
|
||||
pair<InetAddr,InetAddr>(*ipaddr, *netmask));
|
||||
if (ipaddr->isV6()) have_ipv6 = true;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
all_addresses[iface] = iface_all_addresses;
|
||||
// see #2032. About interfaces with no addresses:
|
||||
//
|
||||
// - when we generate rc.conf file, we should add line
|
||||
// "ifconfig_em0="DHCP"" for dynamic interfaces, so we should
|
||||
// include them in the management list as well.
|
||||
//
|
||||
// Note that int_prop returns false for dynamic interfaces on
|
||||
// OpenBSD because we do not support rc.conf format for it atm
|
||||
// and should not try to manage dynamic interfaces in the shell
|
||||
// script format.
|
||||
//
|
||||
intf_names << iface_name;
|
||||
if (have_ipv6) ipv6_names << iface_name;
|
||||
|
||||
all_addresses[iface_name] = iface_all_addresses;
|
||||
}
|
||||
}
|
||||
|
||||
summaryConfigLineIP(ipv6_names, true);
|
||||
// sort interfaces by name
|
||||
all_names.sort();
|
||||
ipv6_names.sort();
|
||||
intf_names.sort();
|
||||
|
||||
summaryConfigLineIP(ipv6_names, true);
|
||||
summaryConfigLineIP(intf_names, false);
|
||||
|
||||
QMap<Interface*, list<pair<InetAddr,InetAddr> > >::iterator it;
|
||||
for (it=all_addresses.begin(); it!=all_addresses.end(); ++it)
|
||||
foreach (QString iface_name, all_names)
|
||||
{
|
||||
// qDebug() << "interfaceConfigLineIP:"
|
||||
// << it.key()
|
||||
// << it.value().size();
|
||||
interfaceConfigLineIP(it.key(), it.value());
|
||||
interfaceConfigLineIP(interfaces_by_name[iface_name],
|
||||
all_addresses[iface_name]);
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
@ -100,11 +100,10 @@ int OSConfigurator_freebsd::prolog()
|
||||
return 0;
|
||||
}
|
||||
|
||||
void OSConfigurator_freebsd::summaryConfigLineIP(QStringList names,
|
||||
bool ipv6)
|
||||
void OSConfigurator_freebsd::summaryConfigLineIP(QStringList names, bool ipv6)
|
||||
{
|
||||
FWOptions* options = fw->getOptionsObject();
|
||||
if (options->getBool("generate_rc_conf_file"))
|
||||
if (options->getBool("generate_rc_conf_file") && !names.isEmpty())
|
||||
{
|
||||
if (ipv6)
|
||||
{
|
||||
@ -203,7 +202,7 @@ void OSConfigurator_freebsd::summaryConfigLineVlan(QStringList vlan_names)
|
||||
FWOptions* options = fw->getOptionsObject();
|
||||
if (options->getBool("generate_rc_conf_file"))
|
||||
{
|
||||
;
|
||||
cloned_interfaces += vlan_names;
|
||||
} else
|
||||
interface_configuration_lines <<
|
||||
QString("sync_vlan_interfaces %1").arg(vlan_names.join(" "));
|
||||
@ -455,7 +454,8 @@ QString OSConfigurator_freebsd::printAllInterfaceConfigurationLines()
|
||||
return OSConfigurator_bsd::printAllInterfaceConfigurationLines();
|
||||
}
|
||||
|
||||
void OSConfigurator_freebsd::printIfconfigLines(const QMap<QString, QStringList> &lines)
|
||||
void OSConfigurator_freebsd::printIfconfigLines(const QMap<QString, QStringList>
|
||||
&lines)
|
||||
{
|
||||
if (!lines.isEmpty())
|
||||
{
|
||||
|
||||
@ -1638,10 +1638,16 @@
|
||||
<Option name="vlan_id">100</Option>
|
||||
</InterfaceOptions>
|
||||
</Interface>
|
||||
<FailoverClusterGroup id="id3663X20162" type="none" name="pf_cluster_3:lo0:members" comment="">
|
||||
<ClusterGroupOptions>
|
||||
<Option name="vrrp_secret">vrrp_secret</Option>
|
||||
<Option name="vrrp_vrid">1</Option>
|
||||
</ClusterGroupOptions>
|
||||
</FailoverClusterGroup>
|
||||
</Library>
|
||||
<Library id="id1495X69605" color="#d2ffd0" name="User" comment="" ro="False">
|
||||
<ObjectGroup id="id1502X69605" name="Clusters" comment="" ro="False">
|
||||
<Cluster id="id3631X95766" host_OS="openbsd" inactive="False" lastCompiled="1248551815" lastInstalled="0" lastModified="1269718315" platform="pf" name="pf_cluster_1" comment=" " ro="False">
|
||||
<Cluster id="id3631X95766" host_OS="openbsd" inactive="False" lastCompiled="1248551815" lastInstalled="0" lastModified="1297119444" platform="pf" name="pf_cluster_1" comment=" " ro="False">
|
||||
<NAT id="id3640X95766" name="NAT" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="True">
|
||||
<NATRule id="id3162X39764" disabled="False" group="" position="0" action="Translate" comment="">
|
||||
<OSrc neg="False">
|
||||
@ -2013,8 +2019,8 @@
|
||||
</ClusterGroupOptions>
|
||||
</FailoverClusterGroup>
|
||||
</Interface>
|
||||
<Interface id="id3695X33400" dedicated_failover="False" dyn="False" label="" mgmt="False" security_level="0" unnum="False" unprotected="False" name="lo" comment="" ro="False">
|
||||
<IPv4 id="id3697X33400" name="pf_cluster_1:lo:ip" comment="" ro="False" address="127.0.0.1" netmask="255.0.0.0"/>
|
||||
<Interface id="id3695X33400" dedicated_failover="False" dyn="False" label="" mgmt="False" security_level="0" unnum="False" unprotected="False" name="lo0" comment="" ro="False">
|
||||
<IPv4 id="id3697X33400" name="pf_cluster_1:lo0:ip" comment="" ro="False" address="127.0.0.1" netmask="255.0.0.0"/>
|
||||
<InterfaceOptions>
|
||||
<Option name="carp_password">my_secret</Option>
|
||||
<Option name="type">carp</Option>
|
||||
@ -2105,7 +2111,7 @@
|
||||
</ClusterGroupOptions>
|
||||
</StateSyncClusterGroup>
|
||||
</Cluster>
|
||||
<Cluster id="id3642X20162" host_OS="openbsd" inactive="False" lastCompiled="0" lastInstalled="0" lastModified="1269892711" platform="pf" name="pf_cluster_3" comment="" ro="False">
|
||||
<Cluster id="id3642X20162" host_OS="openbsd" inactive="False" lastCompiled="0" lastInstalled="0" lastModified="1297119370" platform="pf" name="pf_cluster_3" comment="" ro="False">
|
||||
<NAT id="id3646X20162" name="NAT" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="True">
|
||||
<RuleSetOptions/>
|
||||
</NAT>
|
||||
@ -2417,14 +2423,6 @@
|
||||
<InterfaceOptions>
|
||||
<Option name="type">cluster_interface</Option>
|
||||
</InterfaceOptions>
|
||||
<FailoverClusterGroup id="id3663X20162" type="carp" name="pf_cluster_3:lo0:members" comment="">
|
||||
<ObjectRef ref="id39583X50958"/>
|
||||
<ObjectRef ref="id39632X50958"/>
|
||||
<ClusterGroupOptions>
|
||||
<Option name="vrrp_secret">vrrp_secret</Option>
|
||||
<Option name="vrrp_vrid">1</Option>
|
||||
</ClusterGroupOptions>
|
||||
</FailoverClusterGroup>
|
||||
</Interface>
|
||||
<Interface id="id39675X50958" dedicated_failover="False" dyn="False" label="" mgmt="False" security_level="0" unnum="False" unprotected="False" name="carp2" comment="" ro="False">
|
||||
<IPv4 id="id39723X50958" name="pf_cluster_3:carp2:ip" comment="" ro="False" address="172.20.0.1" netmask="255.255.255.0"/>
|
||||
@ -2549,7 +2547,7 @@
|
||||
<ServiceGroup id="id1513X69605" name="TagServices" comment="" ro="False"/>
|
||||
</ServiceGroup>
|
||||
<ObjectGroup id="id1514X69605" name="Firewalls" comment="" ro="False">
|
||||
<Firewall id="id2827X26920" host_OS="openbsd" inactive="False" lastCompiled="0" lastInstalled="0" lastModified="1264267318" platform="pf" version="4.x" name="openbsd-1" comment="" ro="False">
|
||||
<Firewall id="id2827X26920" host_OS="openbsd" inactive="False" lastCompiled="0" lastInstalled="0" lastModified="1297119438" platform="pf" version="4.x" name="openbsd-1" comment="" ro="False">
|
||||
<NAT id="id2831X26920" name="NAT" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="True">
|
||||
<RuleSetOptions/>
|
||||
</NAT>
|
||||
@ -2567,6 +2565,12 @@
|
||||
<IPv4 id="id2836X26920" name="openbsd-1:en1:ip" comment="" ro="False" address="192.168.1.2" netmask="255.255.255.0"/>
|
||||
<InterfaceOptions/>
|
||||
</Interface>
|
||||
<Interface id="id6137X30671" dedicated_failover="False" dyn="False" label="" mgmt="False" security_level="0" unnum="False" unprotected="False" name="lo0" comment="" ro="False">
|
||||
<IPv4 id="id6138X30671" name="openbsd-3:lo0:ip" comment="" ro="False" address="127.0.0.1" netmask="255.0.0.0"/>
|
||||
<InterfaceOptions>
|
||||
<Option name="type">ethernet</Option>
|
||||
</InterfaceOptions>
|
||||
</Interface>
|
||||
<Management address="0.0.0.0">
|
||||
<SNMPManagement enabled="False" snmp_read_community="" snmp_write_community=""/>
|
||||
<FWBDManagement enabled="False" identity="" port="-1"/>
|
||||
@ -2663,7 +2667,7 @@
|
||||
<Option name="sshArgs"></Option>
|
||||
</FirewallOptions>
|
||||
</Firewall>
|
||||
<Firewall id="id3337X26920" host_OS="openbsd" inactive="False" lastCompiled="1264267285" lastInstalled="0" lastModified="1244757413" platform="pf" version="4.x" name="openbsd-2" comment="" ro="False">
|
||||
<Firewall id="id3337X26920" host_OS="openbsd" inactive="False" lastCompiled="1264267285" lastInstalled="0" lastModified="1297119444" platform="pf" version="4.x" name="openbsd-2" comment="" ro="False">
|
||||
<NAT id="id3344X26920" name="NAT" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="True">
|
||||
<RuleSetOptions/>
|
||||
</NAT>
|
||||
@ -2681,6 +2685,12 @@
|
||||
<IPv4 id="id3351X26920" name="openbsd-2:en1:ip" comment="" ro="False" address="192.168.1.3" netmask="255.255.255.0"/>
|
||||
<InterfaceOptions/>
|
||||
</Interface>
|
||||
<Interface id="id6164X30671" dedicated_failover="False" dyn="False" label="" mgmt="False" security_level="0" unnum="False" unprotected="False" name="lo0" comment="" ro="False">
|
||||
<IPv4 id="id6165X30671" name="openbsd-3:lo0:ip" comment="" ro="False" address="127.0.0.1" netmask="255.0.0.0"/>
|
||||
<InterfaceOptions>
|
||||
<Option name="type">ethernet</Option>
|
||||
</InterfaceOptions>
|
||||
</Interface>
|
||||
<Management address="0.0.0.0">
|
||||
<SNMPManagement enabled="False" snmp_read_community="" snmp_write_community=""/>
|
||||
<FWBDManagement enabled="False" identity="" port="-1"/>
|
||||
@ -3007,7 +3017,7 @@
|
||||
<Option name="sshArgs"></Option>
|
||||
</FirewallOptions>
|
||||
</Firewall>
|
||||
<Firewall id="id39233X50958" host_OS="openbsd" inactive="False" lastCompiled="0" lastInstalled="0" lastModified="1269724579" platform="pf" version="4.6" name="openbsd-3" comment="" ro="False">
|
||||
<Firewall id="id39233X50958" host_OS="openbsd" inactive="False" lastCompiled="0" lastInstalled="0" lastModified="1297119363" platform="pf" version="4.6" name="openbsd-3" comment="" ro="False">
|
||||
<NAT id="id39253X50958" name="NAT" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="True">
|
||||
<RuleSetOptions/>
|
||||
</NAT>
|
||||
@ -3037,8 +3047,8 @@
|
||||
</InterfaceOptions>
|
||||
</Interface>
|
||||
</Interface>
|
||||
<Interface id="id39583X50958" dedicated_failover="False" dyn="False" label="" mgmt="False" security_level="0" unnum="False" unprotected="False" name="lo" comment="" ro="False">
|
||||
<IPv4 id="id39623X50958" name="openbsd-3:lo:ip" comment="" ro="False" address="127.0.0.1" netmask="255.0.0.0"/>
|
||||
<Interface id="id39583X50958" dedicated_failover="False" dyn="False" label="" mgmt="False" security_level="0" unnum="False" unprotected="False" name="lo0" comment="" ro="False">
|
||||
<IPv4 id="id39623X50958" name="openbsd-3:lo0:ip" comment="" ro="False" address="127.0.0.1" netmask="255.0.0.0"/>
|
||||
<InterfaceOptions>
|
||||
<Option name="type">ethernet</Option>
|
||||
</InterfaceOptions>
|
||||
@ -3139,7 +3149,7 @@
|
||||
<Option name="sshArgs"></Option>
|
||||
</FirewallOptions>
|
||||
</Firewall>
|
||||
<Firewall id="id39405X50958" host_OS="openbsd" inactive="False" lastCompiled="1264267285" lastInstalled="0" lastModified="1269724587" platform="pf" version="4.6" name="openbsd-4" comment="" ro="False">
|
||||
<Firewall id="id39405X50958" host_OS="openbsd" inactive="False" lastCompiled="1264267285" lastInstalled="0" lastModified="1297119370" platform="pf" version="4.6" name="openbsd-4" comment="" ro="False">
|
||||
<NAT id="id39425X50958" name="NAT" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="True">
|
||||
<RuleSetOptions/>
|
||||
</NAT>
|
||||
@ -3169,8 +3179,8 @@
|
||||
</InterfaceOptions>
|
||||
</Interface>
|
||||
</Interface>
|
||||
<Interface id="id39632X50958" dedicated_failover="False" dyn="False" label="" mgmt="False" security_level="0" unnum="False" unprotected="False" name="lo" comment="" ro="False">
|
||||
<IPv4 id="id39634X50958" name="openbsd-3:lo:ip" comment="" ro="False" address="127.0.0.1" netmask="255.0.0.0"/>
|
||||
<Interface id="id39632X50958" dedicated_failover="False" dyn="False" label="" mgmt="False" security_level="0" unnum="False" unprotected="False" name="lo0" comment="" ro="False">
|
||||
<IPv4 id="id39634X50958" name="openbsd-4:lo0:ip" comment="" ro="False" address="127.0.0.1" netmask="255.0.0.0"/>
|
||||
<InterfaceOptions>
|
||||
<Option name="type">ethernet</Option>
|
||||
</InterfaceOptions>
|
||||
|
||||
@ -2,9 +2,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:52:12 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:53:02 2011 PST by vadim
|
||||
#
|
||||
# files: * firewall-base-rulesets.fw /etc/fw/firewall-base-rulesets.fw
|
||||
# files: firewall-base-rulesets.conf /etc/fw/firewall-base-rulesets.conf
|
||||
@ -163,7 +163,7 @@ configure_interfaces() {
|
||||
update_addresses_of_interface "en2 192.168.100.1/0xffffff00" ""
|
||||
}
|
||||
|
||||
log "Activating firewall script generated Sun Feb 6 14:52:12 2011 by vadim"
|
||||
log "Activating firewall script generated Mon Feb 7 14:53:02 2011 by vadim"
|
||||
|
||||
set_kernel_vars
|
||||
configure_interfaces
|
||||
|
||||
@ -2,9 +2,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:52:12 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:53:02 2011 PST by vadim
|
||||
#
|
||||
# files: * firewall-ipv6-1.fw pf-ipv6.fw
|
||||
# files: firewall-ipv6-1-Policy_ipv4.conf /etc/fw/pf-ipv6.conf
|
||||
@ -175,7 +175,7 @@ configure_interfaces() {
|
||||
update_addresses_of_interface "lo ::1/128 127.0.0.1/0xff000000" ""
|
||||
}
|
||||
|
||||
log "Activating firewall script generated Sun Feb 6 14:52:12 2011 by vadim"
|
||||
log "Activating firewall script generated Mon Feb 7 14:53:02 2011 by vadim"
|
||||
|
||||
set_kernel_vars
|
||||
configure_interfaces
|
||||
|
||||
@ -2,9 +2,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:52:14 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:53:03 2011 PST by vadim
|
||||
#
|
||||
# files: * firewall-ipv6-2.fw pf.fw
|
||||
# files: firewall-ipv6-2.conf pf.conf
|
||||
@ -179,7 +179,7 @@ configure_interfaces() {
|
||||
update_addresses_of_interface "lo ::1/128 127.0.0.1/0xff000000" ""
|
||||
}
|
||||
|
||||
log "Activating firewall script generated Sun Feb 6 14:52:14 2011 by vadim"
|
||||
log "Activating firewall script generated Mon Feb 7 14:53:03 2011 by vadim"
|
||||
|
||||
set_kernel_vars
|
||||
configure_interfaces
|
||||
|
||||
@ -1,9 +1,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:52:14 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:53:03 2011 PST by vadim
|
||||
#
|
||||
# files: * firewall-ipv6-3.fw /etc/firewall-ipv6-3.fw
|
||||
# files: firewall-ipv6-3-Policy_ipv4.conf /etc/firewall-ipv6-3-Policy_ipv4.conf
|
||||
@ -19,10 +19,11 @@ ipv6_gateway_enable="YES"
|
||||
|
||||
|
||||
|
||||
cloned_interfaces="vlan100 vlan101"
|
||||
vlans_ed1="vlan100 vlan101"
|
||||
create_args_vlan100="vlan 100"
|
||||
create_args_vlan101="vlan 101"
|
||||
ipv6_network_interfaces="ed0 lo0 vlan100 vlan101"
|
||||
ipv6_network_interfaces="ed0 lo0"
|
||||
network_interfaces="ed0 lo0 vlan100 vlan101"
|
||||
pfsync_enable="YES"
|
||||
ifconfig_ed0="1.1.1.1 netmask 0xffffff00"
|
||||
|
||||
@ -2,9 +2,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:51:44 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:52:36 2011 PST by vadim
|
||||
#
|
||||
# files: * firewall.fw /etc/pf.fw
|
||||
# files: firewall.conf /etc/pf.conf
|
||||
@ -167,7 +167,7 @@ configure_interfaces() {
|
||||
update_addresses_of_interface "lo 127.0.0.1/0xff000000" ""
|
||||
}
|
||||
|
||||
log "Activating firewall script generated Sun Feb 6 14:51:44 2011 by vadim"
|
||||
log "Activating firewall script generated Mon Feb 7 14:52:36 2011 by vadim"
|
||||
|
||||
set_kernel_vars
|
||||
configure_interfaces
|
||||
|
||||
@ -2,9 +2,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:51:45 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:52:36 2011 PST by vadim
|
||||
#
|
||||
# files: * firewall1.fw /etc/fw/firewall1.fw
|
||||
# files: firewall1.conf /etc/fw/firewall1.conf
|
||||
@ -79,7 +79,7 @@ configure_interfaces() {
|
||||
|
||||
}
|
||||
|
||||
log "Activating firewall script generated Sun Feb 6 14:51:45 2011 by vadim"
|
||||
log "Activating firewall script generated Mon Feb 7 14:52:36 2011 by vadim"
|
||||
|
||||
set_kernel_vars
|
||||
configure_interfaces
|
||||
|
||||
@ -2,9 +2,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:51:46 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:52:38 2011 PST by vadim
|
||||
#
|
||||
# files: * firewall10-1.fw /etc/fw/firewall10-1.fw
|
||||
# files: firewall10-1.conf /etc/fw/firewall10-1.conf
|
||||
@ -74,7 +74,7 @@ configure_interfaces() {
|
||||
|
||||
}
|
||||
|
||||
log "Activating firewall script generated Sun Feb 6 14:51:46 2011 by vadim"
|
||||
log "Activating firewall script generated Mon Feb 7 14:52:38 2011 by vadim"
|
||||
|
||||
set_kernel_vars
|
||||
configure_interfaces
|
||||
|
||||
@ -2,9 +2,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:51:47 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:52:38 2011 PST by vadim
|
||||
#
|
||||
# files: * firewall10-2.fw /etc/fw/firewall10-2.fw
|
||||
# files: firewall10-2.conf /etc/fw/firewall10-2.conf
|
||||
@ -74,7 +74,7 @@ configure_interfaces() {
|
||||
|
||||
}
|
||||
|
||||
log "Activating firewall script generated Sun Feb 6 14:51:47 2011 by vadim"
|
||||
log "Activating firewall script generated Mon Feb 7 14:52:38 2011 by vadim"
|
||||
|
||||
set_kernel_vars
|
||||
configure_interfaces
|
||||
|
||||
@ -2,9 +2,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:51:49 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:52:40 2011 PST by vadim
|
||||
#
|
||||
# files: * firewall10-3.fw /etc/fw/firewall10-3.fw
|
||||
# files: firewall10-3.conf /etc/fw/firewall10-3.conf
|
||||
@ -76,7 +76,7 @@ configure_interfaces() {
|
||||
|
||||
}
|
||||
|
||||
log "Activating firewall script generated Sun Feb 6 14:51:49 2011 by vadim"
|
||||
log "Activating firewall script generated Mon Feb 7 14:52:40 2011 by vadim"
|
||||
|
||||
set_kernel_vars
|
||||
configure_interfaces
|
||||
|
||||
@ -2,9 +2,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:51:50 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:52:41 2011 PST by vadim
|
||||
#
|
||||
# files: * firewall10-4.fw /etc/fw/firewall10-4.fw
|
||||
# files: firewall10-4.conf /etc/fw/firewall10-4.conf
|
||||
@ -76,7 +76,7 @@ configure_interfaces() {
|
||||
|
||||
}
|
||||
|
||||
log "Activating firewall script generated Sun Feb 6 14:51:50 2011 by vadim"
|
||||
log "Activating firewall script generated Mon Feb 7 14:52:41 2011 by vadim"
|
||||
|
||||
set_kernel_vars
|
||||
configure_interfaces
|
||||
|
||||
@ -2,9 +2,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:51:51 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:52:43 2011 PST by vadim
|
||||
#
|
||||
# files: * firewall10-5.fw /etc/fw/firewall10-5.fw
|
||||
# files: firewall10-5.conf /etc/fw/firewall10-5.conf
|
||||
@ -77,7 +77,7 @@ configure_interfaces() {
|
||||
|
||||
}
|
||||
|
||||
log "Activating firewall script generated Sun Feb 6 14:51:51 2011 by vadim"
|
||||
log "Activating firewall script generated Mon Feb 7 14:52:43 2011 by vadim"
|
||||
|
||||
set_kernel_vars
|
||||
configure_interfaces
|
||||
|
||||
@ -2,9 +2,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:51:52 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:52:43 2011 PST by vadim
|
||||
#
|
||||
# files: * firewall10-6.fw /etc/fw/firewall10-6.fw
|
||||
# files: firewall10-6.conf /etc/fw/firewall10-6.conf
|
||||
@ -77,7 +77,7 @@ configure_interfaces() {
|
||||
|
||||
}
|
||||
|
||||
log "Activating firewall script generated Sun Feb 6 14:51:52 2011 by vadim"
|
||||
log "Activating firewall script generated Mon Feb 7 14:52:43 2011 by vadim"
|
||||
|
||||
set_kernel_vars
|
||||
configure_interfaces
|
||||
|
||||
@ -2,9 +2,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:51:45 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:52:36 2011 PST by vadim
|
||||
#
|
||||
# files: * firewall100.fw /etc/fw/pf.fw
|
||||
# files: firewall100.conf /etc/fw/path\ with\ space/pf.conf
|
||||
@ -159,7 +159,7 @@ configure_interfaces() {
|
||||
update_addresses_of_interface "em1 10.1.1.81/0xffffff00" ""
|
||||
}
|
||||
|
||||
log "Activating firewall script generated Sun Feb 6 14:51:45 2011 by vadim"
|
||||
log "Activating firewall script generated Mon Feb 7 14:52:36 2011 by vadim"
|
||||
|
||||
set_kernel_vars
|
||||
configure_interfaces
|
||||
|
||||
@ -2,9 +2,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:51:46 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:52:37 2011 PST by vadim
|
||||
#
|
||||
# files: * firewall101.fw /etc/fw/pf.fw
|
||||
# files: firewall101.conf /etc/fw/path\ with\ space/pf.conf
|
||||
@ -162,7 +162,7 @@ configure_interfaces() {
|
||||
update_addresses_of_interface "em1 10.1.1.81/0xffffff00" ""
|
||||
}
|
||||
|
||||
log "Activating firewall script generated Sun Feb 6 14:51:46 2011 by vadim"
|
||||
log "Activating firewall script generated Mon Feb 7 14:52:37 2011 by vadim"
|
||||
|
||||
set_kernel_vars
|
||||
configure_interfaces
|
||||
|
||||
@ -1,9 +1,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:51:47 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:52:38 2011 PST by vadim
|
||||
#
|
||||
# files: * firewall102.fw /etc/fw/pf.fw
|
||||
# files: firewall102.conf /etc/fw/path\ with\ space/pf.conf
|
||||
@ -19,7 +19,6 @@ gateway_enable="YES"
|
||||
|
||||
|
||||
|
||||
ipv6_network_interfaces="em0 em1"
|
||||
network_interfaces="em0 em1"
|
||||
ifconfig_em0="10.3.14.81 netmask 0xffffff00"
|
||||
ifconfig_em1="10.1.1.81 netmask 0xffffff00"
|
||||
@ -27,11 +26,11 @@ ifconfig_em1="10.1.1.81 netmask 0xffffff00"
|
||||
pf_enable="YES"
|
||||
pf_rules="/etc/fw/path\ with\ space/pf.conf"
|
||||
|
||||
static_routes="id160538X13459 id160560X13459 id160582X13459 id160604X13459 id160629X13459 id160648X13459"
|
||||
route_id160538X13459="default 10.1.1.1 "
|
||||
route_id160560X13459="default "
|
||||
route_id160582X13459="192.168.171.2 10.1.1.1 "
|
||||
route_id160604X13459="22.22.22.0/24 10.1.1.1 "
|
||||
route_id160629X13459="22.22.22.0/24 10.1.1.1 "
|
||||
route_id160648X13459="33.33.33.0/24 10.1.1.1 "
|
||||
static_routes="id161808X29798 id161830X29798 id161852X29798 id161874X29798 id161899X29798 id161918X29798"
|
||||
route_id161808X29798="default 10.1.1.1 "
|
||||
route_id161830X29798="default "
|
||||
route_id161852X29798="192.168.171.2 10.1.1.1 "
|
||||
route_id161874X29798="22.22.22.0/24 10.1.1.1 "
|
||||
route_id161899X29798="22.22.22.0/24 10.1.1.1 "
|
||||
route_id161918X29798="33.33.33.0/24 10.1.1.1 "
|
||||
|
||||
|
||||
@ -2,9 +2,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:51:48 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:52:39 2011 PST by vadim
|
||||
#
|
||||
# files: * firewall103.fw /etc/fw/pf.fw
|
||||
# files: firewall103.conf /etc/fw/path\ with\ space/pf.conf
|
||||
@ -287,9 +287,11 @@ configure_interfaces() {
|
||||
update_addresses_of_interface "bridge0 192.168.1.1/0xffffff00" ""
|
||||
update_addresses_of_interface "em0 10.3.14.81/0xffffff00" ""
|
||||
update_addresses_of_interface "em1 10.1.1.81/0xffffff00" ""
|
||||
update_addresses_of_interface "em2" ""
|
||||
update_addresses_of_interface "em3" ""
|
||||
}
|
||||
|
||||
log "Activating firewall script generated Sun Feb 6 14:51:48 2011 by vadim"
|
||||
log "Activating firewall script generated Mon Feb 7 14:52:39 2011 by vadim"
|
||||
|
||||
set_kernel_vars
|
||||
configure_interfaces
|
||||
|
||||
@ -2,9 +2,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:51:49 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:52:40 2011 PST by vadim
|
||||
#
|
||||
# files: * firewall104.fw /etc/fw/pf.fw
|
||||
# files: firewall104.conf /etc/fw/path\ with\ space/pf.conf
|
||||
@ -284,11 +284,14 @@ configure_interfaces() {
|
||||
update_bridge_interface "bridge0 em2 em3"
|
||||
sync_carp_interfaces
|
||||
sync_pfsync_interfaces
|
||||
update_addresses_of_interface "bridge0" ""
|
||||
update_addresses_of_interface "em0 10.3.14.81/0xffffff00" ""
|
||||
update_addresses_of_interface "em1 10.1.1.81/0xffffff00" ""
|
||||
update_addresses_of_interface "em2" ""
|
||||
update_addresses_of_interface "em3" ""
|
||||
}
|
||||
|
||||
log "Activating firewall script generated Sun Feb 6 14:51:49 2011 by vadim"
|
||||
log "Activating firewall script generated Mon Feb 7 14:52:40 2011 by vadim"
|
||||
|
||||
set_kernel_vars
|
||||
configure_interfaces
|
||||
|
||||
@ -1,9 +1,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:51:51 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:52:41 2011 PST by vadim
|
||||
#
|
||||
# files: * firewall105.fw /etc/fw/pf.fw
|
||||
# files: firewall105.conf /etc/fw/path\ with\ space/pf.conf
|
||||
@ -20,7 +20,6 @@ gateway_enable="YES"
|
||||
|
||||
cloned_interfaces="bridge0"
|
||||
|
||||
ipv6_network_interfaces="bridge0 em0 em1"
|
||||
network_interfaces="bridge0 em0 em1"
|
||||
pfsync_enable="YES"
|
||||
ifconfig_bridge0="addm em2 stp em2 addm em3 stp em3 up 192.168.1.1 netmask 0xffffff00"
|
||||
|
||||
@ -1,9 +1,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:51:52 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:52:42 2011 PST by vadim
|
||||
#
|
||||
# files: * firewall106.fw /etc/fw/pf.fw
|
||||
# files: firewall106.conf /etc/fw/path\ with\ space/pf.conf
|
||||
@ -21,7 +21,6 @@ gateway_enable="YES"
|
||||
|
||||
cloned_interfaces="bridge0"
|
||||
|
||||
ipv6_network_interfaces="bridge0 em0 em1"
|
||||
network_interfaces="bridge0 em0 em1"
|
||||
pfsync_enable="YES"
|
||||
ifconfig_bridge0="addm em2 stp em2 addm em3 stp em3 up DHCP"
|
||||
@ -33,11 +32,11 @@ ifconfig_em3="up"
|
||||
pf_enable="YES"
|
||||
pf_rules="/etc/fw/path\ with\ space/pf.conf"
|
||||
|
||||
static_routes="id160577X13467 id160599X13467 id160621X13467 id160643X13467 id160668X13467 id160687X13467"
|
||||
route_id160577X13467="default 10.1.1.1 "
|
||||
route_id160599X13467="default "
|
||||
route_id160621X13467="192.168.171.2 10.1.1.1 "
|
||||
route_id160643X13467="22.22.22.0/24 10.1.1.1 "
|
||||
route_id160668X13467="22.22.22.0/24 10.1.1.1 "
|
||||
route_id160687X13467="33.33.33.0/24 10.1.1.1 "
|
||||
static_routes="id161847X29806 id161869X29806 id161891X29806 id161913X29806 id161938X29806 id161957X29806"
|
||||
route_id161847X29806="default 10.1.1.1 "
|
||||
route_id161869X29806="default "
|
||||
route_id161891X29806="192.168.171.2 10.1.1.1 "
|
||||
route_id161913X29806="22.22.22.0/24 10.1.1.1 "
|
||||
route_id161938X29806="22.22.22.0/24 10.1.1.1 "
|
||||
route_id161957X29806="33.33.33.0/24 10.1.1.1 "
|
||||
|
||||
|
||||
25
test/pf/firewall107.conf.orig
Normal file
25
test/pf/firewall107.conf.orig
Normal file
@ -0,0 +1,25 @@
|
||||
|
||||
set timeout udp.single 5
|
||||
|
||||
#
|
||||
# Scrub rules
|
||||
#
|
||||
match all scrub (reassemble tcp no-df )
|
||||
match out all scrub (random-id min-ttl 1 max-mss 1460)
|
||||
|
||||
|
||||
# Tables: (1)
|
||||
table <tbl.r9998.d> { 10.1.1.81 , 10.3.14.81 , 192.168.101.1 , 192.168.102.1 }
|
||||
|
||||
#
|
||||
# Rule backup ssh access rule
|
||||
# backup ssh access rule
|
||||
pass in quick inet proto tcp from 10.3.14.30 to <tbl.r9998.d> port 22 label "RULE 9998 -- ACCEPT "
|
||||
#
|
||||
# Rule 0 (global)
|
||||
block log quick inet from any to any no state label "RULE 0 -- DROP "
|
||||
#
|
||||
# Rule fallback rule
|
||||
# fallback rule
|
||||
block quick inet from any to any no state label "RULE 10000 -- DROP "
|
||||
|
||||
310
test/pf/firewall107.fw.orig
Executable file
310
test/pf/firewall107.fw.orig
Executable file
@ -0,0 +1,310 @@
|
||||
#!/bin/sh
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Mon Feb 7 14:52:43 2011 PST by vadim
|
||||
#
|
||||
# files: * firewall107.fw /etc/fw/pf.fw
|
||||
# files: firewall107.conf /etc/fw/path\ with\ space/pf.conf
|
||||
#
|
||||
# Compiled for pf 4.7
|
||||
#
|
||||
# vlan interface, static address, shell script format
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
FWDIR=`dirname $0`
|
||||
|
||||
IFCONFIG="/sbin/ifconfig"
|
||||
PFCTL="/sbin/pfctl"
|
||||
IPFW="/sbin/ipfw"
|
||||
IPF="/sbin/ipf"
|
||||
IPNAT="/sbin/ipnat"
|
||||
SYSCTL="/sbin/sysctl"
|
||||
LOGGER="/usr/bin/logger"
|
||||
|
||||
log() {
|
||||
echo "$1"
|
||||
test -x "$LOGGER" && $LOGGER -p info "$1"
|
||||
}
|
||||
|
||||
diff_intf() {
|
||||
func=$1
|
||||
list1=$2
|
||||
list2=$3
|
||||
cmd=$4
|
||||
for intf in $list1
|
||||
do
|
||||
echo $list2 | grep -q $intf || {
|
||||
# $vlan is absent in list 2
|
||||
$func $intf $cmd
|
||||
}
|
||||
done
|
||||
}
|
||||
|
||||
|
||||
missing_address() {
|
||||
address=$1
|
||||
cmd=$2
|
||||
|
||||
oldIFS=$IFS
|
||||
IFS="@"
|
||||
set $address
|
||||
addr=$1
|
||||
interface=$2
|
||||
IFS=$oldIFS
|
||||
|
||||
if echo "$addr" | grep -q ':'
|
||||
then
|
||||
inet="inet6"
|
||||
addr=$(echo "$addr" | sed 's!/! prefixlen !')
|
||||
else
|
||||
inet="inet"
|
||||
addr=$(echo "$addr" | sed 's!/! netmask !')
|
||||
fi
|
||||
|
||||
parameter=""
|
||||
test "$cmd" = "add" && {
|
||||
echo "# Adding ip address: $interface $addr"
|
||||
parameter="alias"
|
||||
}
|
||||
test "$cmd" = "del" && {
|
||||
echo "# Removing ip address: $interface $addr"
|
||||
parameter="delete"
|
||||
}
|
||||
|
||||
$FWBDEBUG $IFCONFIG $interface $inet $addr $parameter
|
||||
$FWBDEBUG $IFCONFIG $interface up
|
||||
}
|
||||
|
||||
list_addresses_by_scope() {
|
||||
interface=$1
|
||||
scope=$2
|
||||
ignore_list=$3
|
||||
|
||||
scope_regex="1"
|
||||
if test -n "$scope"; then scope_regex=" \$0 !~ \"$scope\" "; fi
|
||||
|
||||
$IFCONFIG $interface | sed "s/%$interface//" | \
|
||||
awk -v IGNORED="$ignore_list" \
|
||||
"BEGIN {
|
||||
split(IGNORED,ignored_arr);
|
||||
for (a in ignored_arr) {ignored_dict[ignored_arr[a]]=1;}
|
||||
}
|
||||
(/inet |inet6 / && $scope_regex && !(\$2 in ignored_dict)) {printf \"%s/%s\n\",\$2,\$4;}" | \
|
||||
while read addr; do
|
||||
echo "${addr}@$interface"
|
||||
done | sort
|
||||
|
||||
}
|
||||
|
||||
update_addresses_of_interface() {
|
||||
ignore_list=$2
|
||||
set $1
|
||||
interface=$1
|
||||
shift
|
||||
|
||||
FWB_ADDRS=$(
|
||||
for addr in $*; do
|
||||
echo "${addr}@$interface"
|
||||
done | sort
|
||||
)
|
||||
|
||||
CURRENT_ADDRS_ALL_SCOPES=""
|
||||
CURRENT_ADDRS_GLOBAL_SCOPE=""
|
||||
|
||||
$IFCONFIG $interface >/dev/null 2>&1 && {
|
||||
CURRENT_ADDRS_ALL_SCOPES=$(list_addresses_by_scope $interface '' "$ignore_list")
|
||||
CURRENT_ADDRS_GLOBAL_SCOPE=$(list_addresses_by_scope $interface 'scopeid .*' "$ignore_list")
|
||||
} || {
|
||||
echo "# Interface $interface does not exist"
|
||||
# Stop the script if we are not in test mode
|
||||
test -z "$FWBDEBUG" && exit 1
|
||||
}
|
||||
|
||||
diff_intf missing_address "$FWB_ADDRS" "$CURRENT_ADDRS_ALL_SCOPES" add
|
||||
diff_intf missing_address "$CURRENT_ADDRS_GLOBAL_SCOPE" "$FWB_ADDRS" del
|
||||
}
|
||||
|
||||
missing_vlan() {
|
||||
vlan=$1
|
||||
cmd=$2
|
||||
|
||||
oldIFS=$IFS
|
||||
IFS="@"
|
||||
set $vlan
|
||||
subint=$1
|
||||
parent=$2
|
||||
IFS=$oldIFS
|
||||
|
||||
vlan_id=$(echo $subint | sed 's/vlan//')
|
||||
test "$cmd" = "add" && {
|
||||
echo "# Adding VLAN interface $subint (parent: $parent)"
|
||||
$FWBDEBUG $IFCONFIG $subint vlan $vlan_id vlandev $parent
|
||||
$FWBDEBUG $IFCONFIG $subint up
|
||||
}
|
||||
test "$cmd" = "rem" && {
|
||||
echo "# Removing VLAN interface $subint (parent: $parent)"
|
||||
$FWBDEBUG $IFCONFIG $subint vlan $vlan_id -vlandev
|
||||
$FWBDEBUG $IFCONFIG $subint destroy
|
||||
}
|
||||
}
|
||||
|
||||
parse_fwb_vlans() {
|
||||
set $1
|
||||
vlan_parent_interface=$1
|
||||
shift
|
||||
|
||||
FWB_VLANS=$(
|
||||
for subint in $*; do
|
||||
echo "${subint}@$vlan_parent_interface"
|
||||
done | sort
|
||||
)
|
||||
echo $FWB_VLANS
|
||||
}
|
||||
|
||||
parse_current_vlans() {
|
||||
vlan_parent_interface=$1
|
||||
$IFCONFIG -A | grep 'vlan: ' | sed 's/priority:.*parent interface://' | \
|
||||
while read x vlan_id parent
|
||||
do
|
||||
test "$parent" = "$vlan_parent_interface" && echo "vlan$vlan_id@$parent"
|
||||
done | sort
|
||||
}
|
||||
|
||||
update_vlans_of_interface() {
|
||||
args="$1"
|
||||
set $1
|
||||
vlan_parent_interface=$1
|
||||
|
||||
FWB_VLANS=$(parse_fwb_vlans "$args")
|
||||
CURRENT_VLANS=$(parse_current_vlans $vlan_parent_interface)
|
||||
|
||||
$IFCONFIG $vlan_parent_interface up
|
||||
diff_intf missing_vlan "$FWB_VLANS" "$CURRENT_VLANS" add
|
||||
diff_intf missing_vlan "$CURRENT_VLANS" "$FWB_VLANS" rem
|
||||
}
|
||||
|
||||
sync_vlan_interfaces() {
|
||||
$IFCONFIG -A | awk -v IGNORED="$*" \
|
||||
'BEGIN {
|
||||
split(IGNORED,ignored_arr);
|
||||
for (a in ignored_arr) {ii=ignored_arr[a]":"; ignored_dict[ii]=1;}
|
||||
}
|
||||
($1 ~ /^vlan[0-9]/ && !($1 in ignored_dict)) {print $1;}' | sed 's/://' |\
|
||||
while read intf; do
|
||||
echo "# Deleting vlan interface $intf"
|
||||
$FWBDEBUG $IFCONFIG $intf destroy
|
||||
done
|
||||
|
||||
for intf in $*; do
|
||||
$IFCONFIG $intf >/dev/null 2>&1 || {
|
||||
echo "# Creating vlan interface $intf"
|
||||
$FWBDEBUG $IFCONFIG $intf create
|
||||
}
|
||||
done
|
||||
}
|
||||
|
||||
|
||||
sync_carp_interfaces() {
|
||||
$IFCONFIG -A | awk -v IGNORED="$*" \
|
||||
'BEGIN {
|
||||
split(IGNORED,ignored_arr);
|
||||
for (a in ignored_arr) {ii=ignored_arr[a]":"; ignored_dict[ii]=1;}
|
||||
}
|
||||
($1 ~ /^carp[0-9]/ && !($1 in ignored_dict)) {print $1;}' | sed 's/://' |\
|
||||
while read intf; do
|
||||
echo "# Deleting carp interface $intf"
|
||||
$FWBDEBUG $IFCONFIG $intf destroy
|
||||
done
|
||||
|
||||
for intf in $*; do
|
||||
$IFCONFIG $intf >/dev/null 2>&1 || {
|
||||
echo "# Creating carp interface $intf"
|
||||
$SYSCTL -w net.inet.carp.allow=1
|
||||
$FWBDEBUG $IFCONFIG $intf create
|
||||
}
|
||||
done
|
||||
}
|
||||
|
||||
|
||||
sync_pfsync_interfaces() {
|
||||
$IFCONFIG -A | awk -v IGNORED="$*" \
|
||||
'BEGIN {
|
||||
split(IGNORED,ignored_arr);
|
||||
for (a in ignored_arr) {ii=ignored_arr[a]":"; ignored_dict[ii]=1;}
|
||||
}
|
||||
($1 ~ /^pfsync[0-9]/ && !($1 in ignored_dict)) {print $1;}' | sed 's/://' |\
|
||||
while read intf; do
|
||||
echo "# Deleting pfsync interface $intf"
|
||||
$FWBDEBUG $IFCONFIG $intf destroy
|
||||
done
|
||||
|
||||
for intf in $*; do
|
||||
$IFCONFIG $intf >/dev/null 2>&1 || {
|
||||
echo "# Creating pfsync interface $intf"
|
||||
$FWBDEBUG $IFCONFIG $intf create
|
||||
}
|
||||
done
|
||||
}
|
||||
|
||||
verify_interfaces() {
|
||||
:
|
||||
|
||||
}
|
||||
|
||||
set_kernel_vars() {
|
||||
:
|
||||
$SYSCTL -w net.inet.ip.forwarding=1
|
||||
}
|
||||
|
||||
prolog_commands() {
|
||||
:
|
||||
|
||||
}
|
||||
|
||||
epilog_commands() {
|
||||
:
|
||||
|
||||
}
|
||||
|
||||
run_epilog_and_exit() {
|
||||
epilog_commands
|
||||
exit $1
|
||||
}
|
||||
|
||||
configure_interfaces() {
|
||||
:
|
||||
sync_vlan_interfaces vlan101 vlan102
|
||||
update_vlans_of_interface "em2 vlan101 vlan102"
|
||||
sync_bridge_interfaces
|
||||
sync_carp_interfaces
|
||||
sync_pfsync_interfaces
|
||||
update_addresses_of_interface "em0 10.3.14.81/0xffffff00" ""
|
||||
update_addresses_of_interface "em1 10.1.1.81/0xffffff00" ""
|
||||
update_addresses_of_interface "em2" ""
|
||||
update_addresses_of_interface "vlan101 192.168.101.1/0xffffff00" ""
|
||||
update_addresses_of_interface "vlan102 192.168.102.1/0xffffff00" ""
|
||||
}
|
||||
|
||||
log "Activating firewall script generated Mon Feb 7 14:52:43 2011 by vadim"
|
||||
|
||||
set_kernel_vars
|
||||
configure_interfaces
|
||||
prolog_commands
|
||||
|
||||
$PFCTL \
|
||||
-f \
|
||||
/etc/fw/path\ with\ space/pf.conf || exit 1
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
epilog_commands
|
||||
25
test/pf/firewall108.conf.orig
Normal file
25
test/pf/firewall108.conf.orig
Normal file
@ -0,0 +1,25 @@
|
||||
|
||||
set timeout udp.single 5
|
||||
|
||||
#
|
||||
# Scrub rules
|
||||
#
|
||||
match all scrub (reassemble tcp no-df )
|
||||
match out all scrub (random-id min-ttl 1 max-mss 1460)
|
||||
|
||||
|
||||
# Tables: (1)
|
||||
table <tbl.r9998.d> { 10.1.1.81 , 10.3.14.81 , 192.168.101.1 , 192.168.102.1 }
|
||||
|
||||
#
|
||||
# Rule backup ssh access rule
|
||||
# backup ssh access rule
|
||||
pass in quick inet proto tcp from 10.3.14.30 to <tbl.r9998.d> port 22 label "RULE 9998 -- ACCEPT "
|
||||
#
|
||||
# Rule 0 (global)
|
||||
block log quick inet from any to any no state label "RULE 0 -- DROP "
|
||||
#
|
||||
# Rule fallback rule
|
||||
# fallback rule
|
||||
block quick inet from any to any no state label "RULE 10000 -- DROP "
|
||||
|
||||
36
test/pf/firewall108.fw.orig
Executable file
36
test/pf/firewall108.fw.orig
Executable file
@ -0,0 +1,36 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Mon Feb 7 14:52:45 2011 PST by vadim
|
||||
#
|
||||
# files: * firewall108.fw /etc/fw/pf.fw
|
||||
# files: firewall108.conf /etc/fw/path\ with\ space/pf.conf
|
||||
#
|
||||
# Compiled for pf 4.7
|
||||
#
|
||||
# vlan interface, static address, rc.conf format
|
||||
|
||||
|
||||
|
||||
gateway_enable="YES"
|
||||
|
||||
|
||||
|
||||
cloned_interfaces="vlan101 vlan102"
|
||||
vlans_em2="vlan101 vlan102"
|
||||
create_args_vlan101="vlan 101"
|
||||
create_args_vlan102="vlan 102"
|
||||
network_interfaces="em0 em1 vlan101 vlan102"
|
||||
pfsync_enable="YES"
|
||||
ifconfig_em0="10.3.14.81 netmask 0xffffff00"
|
||||
ifconfig_em1="10.1.1.81 netmask 0xffffff00"
|
||||
ifconfig_vlan101="192.168.101.1 netmask 0xffffff00"
|
||||
ifconfig_vlan102="192.168.102.1 netmask 0xffffff00"
|
||||
|
||||
pf_enable="YES"
|
||||
pf_rules="/etc/fw/path\ with\ space/pf.conf"
|
||||
|
||||
|
||||
|
||||
@ -2,9 +2,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:51:53 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:52:45 2011 PST by vadim
|
||||
#
|
||||
# files: * firewall11.fw /etc/firewall11.fw
|
||||
# files: firewall11.conf /etc/firewall11.conf
|
||||
@ -77,7 +77,7 @@ configure_interfaces() {
|
||||
|
||||
}
|
||||
|
||||
log "Activating firewall script generated Sun Feb 6 14:51:53 2011 by vadim"
|
||||
log "Activating firewall script generated Mon Feb 7 14:52:45 2011 by vadim"
|
||||
|
||||
set_kernel_vars
|
||||
configure_interfaces
|
||||
|
||||
@ -2,9 +2,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:51:53 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:52:46 2011 PST by vadim
|
||||
#
|
||||
# files: * firewall12.fw /etc/fw/firewall12.fw
|
||||
# files: firewall12.conf /etc/fw/firewall12.conf
|
||||
@ -159,7 +159,7 @@ configure_interfaces() {
|
||||
update_addresses_of_interface "lo0 127.0.0.1/0xff000000" ""
|
||||
}
|
||||
|
||||
log "Activating firewall script generated Sun Feb 6 14:51:53 2011 by vadim"
|
||||
log "Activating firewall script generated Mon Feb 7 14:52:46 2011 by vadim"
|
||||
|
||||
set_kernel_vars
|
||||
configure_interfaces
|
||||
|
||||
@ -2,9 +2,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:51:54 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:52:46 2011 PST by vadim
|
||||
#
|
||||
# files: * firewall13.fw /etc/fw/firewall13.fw
|
||||
# files: firewall13.conf /etc/fw/firewall13.conf
|
||||
@ -88,7 +88,7 @@ configure_interfaces() {
|
||||
|
||||
}
|
||||
|
||||
log "Activating firewall script generated Sun Feb 6 14:51:54 2011 by vadim"
|
||||
log "Activating firewall script generated Mon Feb 7 14:52:46 2011 by vadim"
|
||||
|
||||
set_kernel_vars
|
||||
configure_interfaces
|
||||
|
||||
@ -2,9 +2,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:51:55 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:52:47 2011 PST by vadim
|
||||
#
|
||||
# files: * firewall14-1.fw /etc/firewall14-1.fw
|
||||
# files: firewall14-1.conf /etc/firewall14-1.conf
|
||||
@ -241,7 +241,7 @@ configure_interfaces() {
|
||||
update_addresses_of_interface "vlan103 10.100.103.1/0xffffff00" ""
|
||||
}
|
||||
|
||||
log "Activating firewall script generated Sun Feb 6 14:51:55 2011 by vadim"
|
||||
log "Activating firewall script generated Mon Feb 7 14:52:47 2011 by vadim"
|
||||
|
||||
set_kernel_vars
|
||||
configure_interfaces
|
||||
|
||||
@ -2,9 +2,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:51:54 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:52:47 2011 PST by vadim
|
||||
#
|
||||
# files: * firewall14.fw /etc/firewall14.fw
|
||||
# files: firewall14.conf /etc/firewall14.conf
|
||||
@ -241,7 +241,7 @@ configure_interfaces() {
|
||||
update_addresses_of_interface "vlan103 10.100.103.1/0xffffff00" ""
|
||||
}
|
||||
|
||||
log "Activating firewall script generated Sun Feb 6 14:51:54 2011 by vadim"
|
||||
log "Activating firewall script generated Mon Feb 7 14:52:47 2011 by vadim"
|
||||
|
||||
set_kernel_vars
|
||||
configure_interfaces
|
||||
|
||||
@ -2,9 +2,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:51:57 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:52:49 2011 PST by vadim
|
||||
#
|
||||
# files: * firewall2-1.fw /etc/fw/firewall2-1.fw
|
||||
# files: firewall2-1.conf /etc/fw/firewall2-1.conf
|
||||
@ -89,7 +89,7 @@ configure_interfaces() {
|
||||
|
||||
}
|
||||
|
||||
log "Activating firewall script generated Sun Feb 6 14:51:57 2011 by vadim"
|
||||
log "Activating firewall script generated Mon Feb 7 14:52:49 2011 by vadim"
|
||||
|
||||
set_kernel_vars
|
||||
configure_interfaces
|
||||
|
||||
@ -2,9 +2,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:51:56 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:52:48 2011 PST by vadim
|
||||
#
|
||||
# files: * firewall2.fw /etc/fw/firewall2.fw
|
||||
# files: firewall2.conf /etc/fw/firewall2.conf
|
||||
@ -73,7 +73,7 @@ configure_interfaces() {
|
||||
|
||||
}
|
||||
|
||||
log "Activating firewall script generated Sun Feb 6 14:51:56 2011 by vadim"
|
||||
log "Activating firewall script generated Mon Feb 7 14:52:48 2011 by vadim"
|
||||
|
||||
set_kernel_vars
|
||||
configure_interfaces
|
||||
|
||||
@ -2,9 +2,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:51:56 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:52:48 2011 PST by vadim
|
||||
#
|
||||
# files: * firewall20.fw /etc/fw/firewall20.fw
|
||||
# files: firewall20.conf /etc/fw/firewall20.conf
|
||||
@ -73,7 +73,7 @@ configure_interfaces() {
|
||||
|
||||
}
|
||||
|
||||
log "Activating firewall script generated Sun Feb 6 14:51:56 2011 by vadim"
|
||||
log "Activating firewall script generated Mon Feb 7 14:52:48 2011 by vadim"
|
||||
|
||||
set_kernel_vars
|
||||
configure_interfaces
|
||||
|
||||
@ -2,9 +2,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:51:57 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:52:49 2011 PST by vadim
|
||||
#
|
||||
# files: * firewall21.fw /etc/fw/firewall21.fw
|
||||
# files: firewall21-NAT_1.conf /etc/fw/firewall21-NAT_1.conf
|
||||
@ -82,7 +82,7 @@ configure_interfaces() {
|
||||
|
||||
}
|
||||
|
||||
log "Activating firewall script generated Sun Feb 6 14:51:57 2011 by vadim"
|
||||
log "Activating firewall script generated Mon Feb 7 14:52:49 2011 by vadim"
|
||||
|
||||
set_kernel_vars
|
||||
configure_interfaces
|
||||
|
||||
@ -2,9 +2,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:51:58 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:52:50 2011 PST by vadim
|
||||
#
|
||||
# files: * firewall22.fw /etc/fw/firewall22.fw
|
||||
# files: firewall22-NAT_1.conf /etc/fw/firewall22-NAT_1.conf
|
||||
@ -80,7 +80,7 @@ configure_interfaces() {
|
||||
|
||||
}
|
||||
|
||||
log "Activating firewall script generated Sun Feb 6 14:51:58 2011 by vadim"
|
||||
log "Activating firewall script generated Mon Feb 7 14:52:50 2011 by vadim"
|
||||
|
||||
set_kernel_vars
|
||||
configure_interfaces
|
||||
|
||||
@ -2,9 +2,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:51:58 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:52:50 2011 PST by vadim
|
||||
#
|
||||
# files: * firewall3.fw /etc/firewall3.fw
|
||||
# files: firewall3.conf /etc/firewall3.conf
|
||||
@ -159,7 +159,7 @@ configure_interfaces() {
|
||||
update_addresses_of_interface "lo 127.0.0.1/0xff000000" ""
|
||||
}
|
||||
|
||||
log "Activating firewall script generated Sun Feb 6 14:51:58 2011 by vadim"
|
||||
log "Activating firewall script generated Mon Feb 7 14:52:50 2011 by vadim"
|
||||
|
||||
set_kernel_vars
|
||||
configure_interfaces
|
||||
|
||||
@ -2,9 +2,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:51:59 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:52:51 2011 PST by vadim
|
||||
#
|
||||
# files: * firewall33.fw /etc/fw/firewall33.fw
|
||||
# files: firewall33.conf /etc/fw/firewall33.conf
|
||||
@ -158,11 +158,12 @@ run_epilog_and_exit() {
|
||||
|
||||
configure_interfaces() {
|
||||
:
|
||||
update_addresses_of_interface "eth0.100" ""
|
||||
update_addresses_of_interface "eth1 192.168.1.100/0xffffff00" ""
|
||||
update_addresses_of_interface "lo 127.0.0.1/0xff000000" ""
|
||||
}
|
||||
|
||||
log "Activating firewall script generated Sun Feb 6 14:51:59 2011 by vadim"
|
||||
log "Activating firewall script generated Mon Feb 7 14:52:51 2011 by vadim"
|
||||
|
||||
set_kernel_vars
|
||||
configure_interfaces
|
||||
|
||||
@ -2,9 +2,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:52:00 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:52:51 2011 PST by vadim
|
||||
#
|
||||
# files: * firewall34.fw /etc/fw/firewall34.fw
|
||||
# files: firewall34.conf /etc/fw/firewall34.conf
|
||||
@ -154,11 +154,12 @@ run_epilog_and_exit() {
|
||||
|
||||
configure_interfaces() {
|
||||
:
|
||||
update_addresses_of_interface "eth0.100" ""
|
||||
update_addresses_of_interface "eth1 192.168.1.100/0xffffff00" ""
|
||||
update_addresses_of_interface "lo 127.0.0.1/0xff000000" ""
|
||||
}
|
||||
|
||||
log "Activating firewall script generated Sun Feb 6 14:52:00 2011 by vadim"
|
||||
log "Activating firewall script generated Mon Feb 7 14:52:51 2011 by vadim"
|
||||
|
||||
set_kernel_vars
|
||||
configure_interfaces
|
||||
|
||||
@ -2,9 +2,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:52:00 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:52:52 2011 PST by vadim
|
||||
#
|
||||
# files: * firewall38.fw /etc/fw/firewall38.fw
|
||||
# files: firewall38.conf /etc/fw/firewall38.conf
|
||||
@ -76,7 +76,7 @@ configure_interfaces() {
|
||||
|
||||
}
|
||||
|
||||
log "Activating firewall script generated Sun Feb 6 14:52:00 2011 by vadim"
|
||||
log "Activating firewall script generated Mon Feb 7 14:52:52 2011 by vadim"
|
||||
|
||||
set_kernel_vars
|
||||
configure_interfaces
|
||||
|
||||
@ -2,9 +2,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:52:01 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:52:53 2011 PST by vadim
|
||||
#
|
||||
# files: * firewall39.fw pf.fw
|
||||
# files: firewall39.conf pf.conf
|
||||
@ -79,7 +79,7 @@ configure_interfaces() {
|
||||
|
||||
}
|
||||
|
||||
log "Activating firewall script generated Sun Feb 6 14:52:01 2011 by vadim"
|
||||
log "Activating firewall script generated Mon Feb 7 14:52:53 2011 by vadim"
|
||||
|
||||
set_kernel_vars
|
||||
configure_interfaces
|
||||
|
||||
@ -2,9 +2,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:52:01 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:52:53 2011 PST by vadim
|
||||
#
|
||||
# files: * firewall4.fw pf.fw
|
||||
# files: firewall4.conf /etc/fw/pf.conf
|
||||
@ -78,7 +78,7 @@ configure_interfaces() {
|
||||
|
||||
}
|
||||
|
||||
log "Activating firewall script generated Sun Feb 6 14:52:01 2011 by vadim"
|
||||
log "Activating firewall script generated Mon Feb 7 14:52:53 2011 by vadim"
|
||||
|
||||
set_kernel_vars
|
||||
configure_interfaces
|
||||
|
||||
@ -2,9 +2,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:52:03 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:52:54 2011 PST by vadim
|
||||
#
|
||||
# files: * firewall40-1.fw /etc/firewall40-1.fw
|
||||
# files: firewall40-1.conf /etc/firewall40-1.conf
|
||||
@ -176,7 +176,7 @@ configure_interfaces() {
|
||||
update_addresses_of_interface "lo0 127.0.0.1/0xff000000" ""
|
||||
}
|
||||
|
||||
log "Activating firewall script generated Sun Feb 6 14:52:03 2011 by vadim"
|
||||
log "Activating firewall script generated Mon Feb 7 14:52:54 2011 by vadim"
|
||||
|
||||
set_kernel_vars
|
||||
configure_interfaces
|
||||
|
||||
@ -2,9 +2,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:52:02 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:52:53 2011 PST by vadim
|
||||
#
|
||||
# files: * firewall40.fw /etc/firewall40.fw
|
||||
# files: firewall40.conf /etc/firewall40.conf
|
||||
@ -160,7 +160,7 @@ configure_interfaces() {
|
||||
update_addresses_of_interface "lo0 127.0.0.1/0xff000000" ""
|
||||
}
|
||||
|
||||
log "Activating firewall script generated Sun Feb 6 14:52:02 2011 by vadim"
|
||||
log "Activating firewall script generated Mon Feb 7 14:52:53 2011 by vadim"
|
||||
|
||||
set_kernel_vars
|
||||
configure_interfaces
|
||||
|
||||
@ -2,9 +2,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:52:03 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:52:55 2011 PST by vadim
|
||||
#
|
||||
# files: * firewall41.fw /etc/firewall41.fw
|
||||
# files: firewall41.conf /etc/firewall41.conf
|
||||
@ -163,7 +163,7 @@ configure_interfaces() {
|
||||
update_addresses_of_interface "eth1 2.2.2.2/0xffffff00" ""
|
||||
}
|
||||
|
||||
log "Activating firewall script generated Sun Feb 6 14:52:03 2011 by vadim"
|
||||
log "Activating firewall script generated Mon Feb 7 14:52:55 2011 by vadim"
|
||||
|
||||
set_kernel_vars
|
||||
configure_interfaces
|
||||
|
||||
@ -2,9 +2,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:52:04 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:52:55 2011 PST by vadim
|
||||
#
|
||||
# files: * firewall5.fw /etc/fw/firewall5.fw
|
||||
# files: firewall5.conf /etc/fw/firewall5.conf
|
||||
@ -77,7 +77,7 @@ configure_interfaces() {
|
||||
|
||||
}
|
||||
|
||||
log "Activating firewall script generated Sun Feb 6 14:52:04 2011 by vadim"
|
||||
log "Activating firewall script generated Mon Feb 7 14:52:55 2011 by vadim"
|
||||
|
||||
set_kernel_vars
|
||||
configure_interfaces
|
||||
|
||||
@ -2,9 +2,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:52:05 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:52:56 2011 PST by vadim
|
||||
#
|
||||
# files: * firewall51.fw /etc/fw/firewall51.fw
|
||||
# files: firewall51.conf /etc/fw/firewall51.conf
|
||||
@ -80,7 +80,7 @@ configure_interfaces() {
|
||||
|
||||
}
|
||||
|
||||
log "Activating firewall script generated Sun Feb 6 14:52:05 2011 by vadim"
|
||||
log "Activating firewall script generated Mon Feb 7 14:52:56 2011 by vadim"
|
||||
|
||||
set_kernel_vars
|
||||
configure_interfaces
|
||||
|
||||
@ -2,9 +2,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:52:05 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:52:56 2011 PST by vadim
|
||||
#
|
||||
# files: * firewall6.fw /etc/fw/firewall6.fw
|
||||
# files: firewall6.conf /etc/fw/firewall6.conf
|
||||
@ -73,7 +73,7 @@ configure_interfaces() {
|
||||
|
||||
}
|
||||
|
||||
log "Activating firewall script generated Sun Feb 6 14:52:05 2011 by vadim"
|
||||
log "Activating firewall script generated Mon Feb 7 14:52:56 2011 by vadim"
|
||||
|
||||
set_kernel_vars
|
||||
configure_interfaces
|
||||
|
||||
@ -2,9 +2,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:52:06 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:52:57 2011 PST by vadim
|
||||
#
|
||||
# files: * firewall62.fw /etc/firewall62.fw
|
||||
# files: firewall62.conf /etc/firewall62.conf
|
||||
@ -185,7 +185,7 @@ configure_interfaces() {
|
||||
update_addresses_of_interface "en1 222.222.222.222/0xffffff00" ""
|
||||
}
|
||||
|
||||
log "Activating firewall script generated Sun Feb 6 14:52:06 2011 by vadim"
|
||||
log "Activating firewall script generated Mon Feb 7 14:52:57 2011 by vadim"
|
||||
|
||||
set_kernel_vars
|
||||
configure_interfaces
|
||||
|
||||
@ -2,9 +2,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:52:06 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:52:57 2011 PST by vadim
|
||||
#
|
||||
# files: * firewall63.fw /etc/fw/firewall63.fw
|
||||
# files: firewall63.conf /etc/fw/firewall63.conf
|
||||
@ -77,7 +77,7 @@ configure_interfaces() {
|
||||
|
||||
}
|
||||
|
||||
log "Activating firewall script generated Sun Feb 6 14:52:06 2011 by vadim"
|
||||
log "Activating firewall script generated Mon Feb 7 14:52:57 2011 by vadim"
|
||||
|
||||
set_kernel_vars
|
||||
configure_interfaces
|
||||
|
||||
@ -2,9 +2,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:52:07 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:52:58 2011 PST by vadim
|
||||
#
|
||||
# files: * firewall7.fw /etc/fw/firewall7.fw
|
||||
# files: firewall7.conf /etc/fw/firewall7.conf
|
||||
@ -73,7 +73,7 @@ configure_interfaces() {
|
||||
|
||||
}
|
||||
|
||||
log "Activating firewall script generated Sun Feb 6 14:52:07 2011 by vadim"
|
||||
log "Activating firewall script generated Mon Feb 7 14:52:58 2011 by vadim"
|
||||
|
||||
set_kernel_vars
|
||||
configure_interfaces
|
||||
|
||||
@ -2,9 +2,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:52:07 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:52:58 2011 PST by vadim
|
||||
#
|
||||
# files: * firewall70.fw /etc/fw/firewall70.fw
|
||||
# files: firewall70.conf /etc/fw/firewall70.conf
|
||||
@ -82,7 +82,7 @@ configure_interfaces() {
|
||||
|
||||
}
|
||||
|
||||
log "Activating firewall script generated Sun Feb 6 14:52:07 2011 by vadim"
|
||||
log "Activating firewall script generated Mon Feb 7 14:52:58 2011 by vadim"
|
||||
|
||||
set_kernel_vars
|
||||
configure_interfaces
|
||||
|
||||
@ -2,9 +2,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:52:08 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:52:59 2011 PST by vadim
|
||||
#
|
||||
# files: * firewall8.fw /etc/firewall8.fw
|
||||
# files: firewall8.conf /etc/firewall8.conf
|
||||
@ -72,7 +72,7 @@ configure_interfaces() {
|
||||
|
||||
}
|
||||
|
||||
log "Activating firewall script generated Sun Feb 6 14:52:08 2011 by vadim"
|
||||
log "Activating firewall script generated Mon Feb 7 14:52:59 2011 by vadim"
|
||||
|
||||
set_kernel_vars
|
||||
configure_interfaces
|
||||
|
||||
@ -2,9 +2,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:52:10 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:53:00 2011 PST by vadim
|
||||
#
|
||||
# files: * firewall80-4.5.fw /etc/firewall80-4.5.fw
|
||||
# files: firewall80-4.5.conf /etc/firewall80-4.5.conf
|
||||
@ -73,7 +73,7 @@ configure_interfaces() {
|
||||
|
||||
}
|
||||
|
||||
log "Activating firewall script generated Sun Feb 6 14:52:10 2011 by vadim"
|
||||
log "Activating firewall script generated Mon Feb 7 14:53:00 2011 by vadim"
|
||||
|
||||
set_kernel_vars
|
||||
configure_interfaces
|
||||
|
||||
@ -2,9 +2,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:52:08 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:52:59 2011 PST by vadim
|
||||
#
|
||||
# files: * firewall80.fw /etc/firewall80.fw
|
||||
# files: firewall80.conf /etc/firewall80.conf
|
||||
@ -73,7 +73,7 @@ configure_interfaces() {
|
||||
|
||||
}
|
||||
|
||||
log "Activating firewall script generated Sun Feb 6 14:52:08 2011 by vadim"
|
||||
log "Activating firewall script generated Mon Feb 7 14:52:59 2011 by vadim"
|
||||
|
||||
set_kernel_vars
|
||||
configure_interfaces
|
||||
|
||||
@ -2,9 +2,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:52:10 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:53:00 2011 PST by vadim
|
||||
#
|
||||
# files: * firewall9.fw /etc/fw/firewall9.fw
|
||||
# files: firewall9.conf /etc/fw/firewall9.conf
|
||||
@ -76,7 +76,7 @@ configure_interfaces() {
|
||||
|
||||
}
|
||||
|
||||
log "Activating firewall script generated Sun Feb 6 14:52:10 2011 by vadim"
|
||||
log "Activating firewall script generated Mon Feb 7 14:53:00 2011 by vadim"
|
||||
|
||||
set_kernel_vars
|
||||
configure_interfaces
|
||||
|
||||
@ -2,9 +2,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:52:11 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:53:01 2011 PST by vadim
|
||||
#
|
||||
# files: * firewall91.fw /etc/fw/pf.fw
|
||||
# files: firewall91.conf /etc/fw/pf.conf
|
||||
@ -240,7 +240,7 @@ configure_interfaces() {
|
||||
update_addresses_of_interface "vlan103 10.100.103.1/0xffffff00" ""
|
||||
}
|
||||
|
||||
log "Activating firewall script generated Sun Feb 6 14:52:11 2011 by vadim"
|
||||
log "Activating firewall script generated Mon Feb 7 14:53:01 2011 by vadim"
|
||||
|
||||
set_kernel_vars
|
||||
configure_interfaces
|
||||
|
||||
@ -2,9 +2,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:52:11 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:53:01 2011 PST by vadim
|
||||
#
|
||||
# files: * firewall92.fw /etc/fw/pf.fw
|
||||
# files: firewall92.conf /etc/fw/path\ with\ space/pf.conf
|
||||
@ -160,7 +160,7 @@ configure_interfaces() {
|
||||
update_addresses_of_interface "em1 10.1.1.81/0xffffff00" ""
|
||||
}
|
||||
|
||||
log "Activating firewall script generated Sun Feb 6 14:52:11 2011 by vadim"
|
||||
log "Activating firewall script generated Mon Feb 7 14:53:01 2011 by vadim"
|
||||
|
||||
set_kernel_vars
|
||||
configure_interfaces
|
||||
|
||||
@ -1,6 +1,6 @@
|
||||
<?xml version="1.0" encoding="utf-8"?>
|
||||
<!DOCTYPE FWObjectDatabase SYSTEM "fwbuilder.dtd">
|
||||
<FWObjectDatabase xmlns="http://www.fwbuilder.org/1.0/" version="17" lastModified="1297029236" id="root">
|
||||
<FWObjectDatabase xmlns="http://www.fwbuilder.org/1.0/" version="17" lastModified="1297116276" id="root">
|
||||
<Library id="syslib000" color="#d4f8ff" name="Standard" comment="Standard objects" ro="True">
|
||||
<AnyNetwork id="sysid0" name="Any" comment="Any Network" ro="False" address="0.0.0.0" netmask="0.0.0.0"/>
|
||||
<AnyIPService id="sysid1" protocol_num="0" name="Any" comment="Any IP Service" ro="False"/>
|
||||
@ -1513,6 +1513,23 @@
|
||||
<IPv4 id="id20710X27133" name="fw2:eth3:ip" comment="" ro="False" address="22.22.23.23" netmask="255.255.255.0"/>
|
||||
<IPv4 id="id119356X58767" name="openbsd47:em0:ip-1" comment="" ro="False" address="0.0.0.0" netmask="0.0.0.0"/>
|
||||
<IPv4 id="id33933X2131" name="firewall104:bridge0:ip" comment="" ro="False" address="192.168.1.1" netmask="255.255.255.0"/>
|
||||
<Interface id="id34202X23052" dedicated_failover="False" dyn="False" label="" mgmt="False" security_level="0" unnum="False" unprotected="False" name="bridge0" comment="" ro="False">
|
||||
<IPv4 id="id34209X23052" name="firewall107:bridge0:ip" comment="" ro="False" address="192.168.1.1" netmask="255.255.255.0"/>
|
||||
<InterfaceOptions>
|
||||
<Option name="type">bridge</Option>
|
||||
<Option name="vlan_id">0</Option>
|
||||
</InterfaceOptions>
|
||||
<Interface id="id34211X23052" dedicated_failover="False" dyn="False" label="" mgmt="False" security_level="0" unnum="False" unprotected="False" name="em2" comment="" ro="False">
|
||||
<InterfaceOptions>
|
||||
<Option name="type">ethernet</Option>
|
||||
</InterfaceOptions>
|
||||
</Interface>
|
||||
<Interface id="id34214X23052" dedicated_failover="False" dyn="False" security_level="0" unnum="False" unprotected="False" name="em3" comment="" ro="False">
|
||||
<InterfaceOptions>
|
||||
<Option name="type">ethernet</Option>
|
||||
</InterfaceOptions>
|
||||
</Interface>
|
||||
</Interface>
|
||||
</Library>
|
||||
<Library id="syslib001" color="#d2ffd0" name="User" comment="User defined objects" ro="False">
|
||||
<ObjectGroup id="stdid01_1_clusters" name="Clusters" comment="" ro="False"/>
|
||||
@ -21300,6 +21317,330 @@
|
||||
<Option name="sshArgs"></Option>
|
||||
</FirewallOptions>
|
||||
</Firewall>
|
||||
<Firewall id="id34184X23052" host_OS="freebsd" inactive="False" lastCompiled="1296525125" lastInstalled="1271995582" lastModified="1297116311" platform="pf" version="4.7" name="firewall107" comment="vlan interface, static address, shell script format" ro="False">
|
||||
<NAT id="id34248X23052" name="NAT" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="True">
|
||||
<RuleSetOptions/>
|
||||
</NAT>
|
||||
<Policy id="id34217X23052" name="Policy" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="True">
|
||||
<PolicyRule id="id34219X23052" disabled="False" group="" log="True" position="0" action="Deny" direction="Both" comment="">
|
||||
<Src neg="False">
|
||||
<ObjectRef ref="sysid0"/>
|
||||
</Src>
|
||||
<Dst neg="False">
|
||||
<ObjectRef ref="sysid0"/>
|
||||
</Dst>
|
||||
<Srv neg="False">
|
||||
<ServiceRef ref="sysid1"/>
|
||||
</Srv>
|
||||
<Itf neg="False">
|
||||
<ObjectRef ref="sysid0"/>
|
||||
</Itf>
|
||||
<When neg="False">
|
||||
<IntervalRef ref="sysid2"/>
|
||||
</When>
|
||||
<PolicyRuleOptions>
|
||||
<Option name="stateless">True</Option>
|
||||
</PolicyRuleOptions>
|
||||
</PolicyRule>
|
||||
<RuleSetOptions/>
|
||||
</Policy>
|
||||
<Routing id="id34251X23052" name="Routing" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="True">
|
||||
<RuleSetOptions/>
|
||||
</Routing>
|
||||
<Interface id="id34192X23052" dedicated_failover="False" dyn="False" label="" mgmt="True" security_level="100" unnum="False" unprotected="False" name="em0" comment="" ro="False">
|
||||
<IPv4 id="id34195X23052" name="firewall107:em0:ip" comment="" ro="False" address="10.3.14.81" netmask="255.255.255.0"/>
|
||||
<InterfaceOptions/>
|
||||
</Interface>
|
||||
<Interface id="id34197X23052" dedicated_failover="False" dyn="False" label="" security_level="100" unnum="False" unprotected="False" name="em1" comment="" ro="False">
|
||||
<IPv4 id="id34200X23052" name="firewall107:em1:ip" comment="" ro="False" address="10.1.1.81" netmask="255.255.255.0"/>
|
||||
<InterfaceOptions/>
|
||||
</Interface>
|
||||
<Interface id="id34345X23052" dedicated_failover="False" dyn="False" label="" mgmt="False" security_level="0" unnum="True" unprotected="False" name="em2" comment="" ro="False">
|
||||
<InterfaceOptions>
|
||||
<Option name="type">ethernet</Option>
|
||||
</InterfaceOptions>
|
||||
<Interface id="id34371X23052" dedicated_failover="False" dyn="False" label="" mgmt="False" security_level="0" unnum="False" unprotected="False" name="vlan101" comment="" ro="False">
|
||||
<IPv4 id="id34385X23052" name="firewall107:em2:vlan101:ip" comment="" ro="False" address="192.168.101.1" netmask="255.255.255.0"/>
|
||||
<InterfaceOptions>
|
||||
<Option name="type">8021q</Option>
|
||||
<Option name="vlan_id">101</Option>
|
||||
</InterfaceOptions>
|
||||
</Interface>
|
||||
<Interface id="id34394X23052" dedicated_failover="False" dyn="False" security_level="0" unnum="False" unprotected="False" name="vlan102" comment="" ro="False">
|
||||
<IPv4 id="id34400X23052" name="firewall107:em2:vlan102:ip" comment="" ro="False" address="192.168.102.1" netmask="255.255.255.0"/>
|
||||
<InterfaceOptions>
|
||||
<Option name="type">8021q</Option>
|
||||
<Option name="vlan_id">102</Option>
|
||||
</InterfaceOptions>
|
||||
</Interface>
|
||||
</Interface>
|
||||
<Management address="0.0.0.0">
|
||||
<SNMPManagement enabled="False" snmp_read_community="" snmp_write_community=""/>
|
||||
<FWBDManagement enabled="False" identity="" port="-1"/>
|
||||
<PolicyInstallScript arguments="" command="" enabled="False"/>
|
||||
</Management>
|
||||
<FirewallOptions>
|
||||
<Option name="accept_new_tcp_with_no_syn">False</Option>
|
||||
<Option name="activationCmd"></Option>
|
||||
<Option name="admUser">root</Option>
|
||||
<Option name="altAddress"></Option>
|
||||
<Option name="check_shading">True</Option>
|
||||
<Option name="cmdline">-xt</Option>
|
||||
<Option name="compiler"></Option>
|
||||
<Option name="conf1_file"></Option>
|
||||
<Option name="conf_file_name_on_firewall">/etc/fw/path with space/pf.conf</Option>
|
||||
<Option name="configure_bridge_interfaces">True</Option>
|
||||
<Option name="configure_carp_interfaces">True</Option>
|
||||
<Option name="configure_interfaces">True</Option>
|
||||
<Option name="configure_pfsync_interfaces">True</Option>
|
||||
<Option name="configure_vlan_interfaces">True</Option>
|
||||
<Option name="debug">False</Option>
|
||||
<Option name="epilog_script"></Option>
|
||||
<Option name="fallback_log">False</Option>
|
||||
<Option name="firewall_dir">/etc</Option>
|
||||
<Option name="freebsd_ip_forward">1</Option>
|
||||
<Option name="generate_rc_conf_file">False</Option>
|
||||
<Option name="generate_shell_script">True</Option>
|
||||
<Option name="ignore_empty_groups">False</Option>
|
||||
<Option name="in_out_code">true</Option>
|
||||
<Option name="ipv4_6_order">ipv4_first</Option>
|
||||
<Option name="log_prefix">RULE %N -- %A </Option>
|
||||
<Option name="loopback_interface">lo0</Option>
|
||||
<Option name="manage_virtual_addr">True</Option>
|
||||
<Option name="mgmt_addr">10.3.14.30</Option>
|
||||
<Option name="mgmt_ssh">True</Option>
|
||||
<Option name="openbsd_ip_forward">1</Option>
|
||||
<Option name="output_file"></Option>
|
||||
<Option name="pass_all_out">false</Option>
|
||||
<Option name="pf_adaptive_end">0</Option>
|
||||
<Option name="pf_adaptive_start">0</Option>
|
||||
<Option name="pf_do_limit_frags">False</Option>
|
||||
<Option name="pf_do_limit_src_nodes">False</Option>
|
||||
<Option name="pf_do_limit_states">False</Option>
|
||||
<Option name="pf_do_limit_table_entries">False</Option>
|
||||
<Option name="pf_do_limit_tables">False</Option>
|
||||
<Option name="pf_do_scrub">True</Option>
|
||||
<Option name="pf_do_timeout_frag">False</Option>
|
||||
<Option name="pf_do_timeout_interval">False</Option>
|
||||
<Option name="pf_flush_states">False</Option>
|
||||
<Option name="pf_icmp_error">0</Option>
|
||||
<Option name="pf_icmp_first">0</Option>
|
||||
<Option name="pf_limit_frags">5000</Option>
|
||||
<Option name="pf_limit_src_nodes">0</Option>
|
||||
<Option name="pf_limit_states">10000</Option>
|
||||
<Option name="pf_limit_table_entries">0</Option>
|
||||
<Option name="pf_limit_tables">0</Option>
|
||||
<Option name="pf_modulate_state">False</Option>
|
||||
<Option name="pf_optimization"></Option>
|
||||
<Option name="pf_other_first">0</Option>
|
||||
<Option name="pf_other_multiple">0</Option>
|
||||
<Option name="pf_other_single">0</Option>
|
||||
<Option name="pf_scrub_fragm_crop">False</Option>
|
||||
<Option name="pf_scrub_fragm_drop_ovl">False</Option>
|
||||
<Option name="pf_scrub_maxmss">1460</Option>
|
||||
<Option name="pf_scrub_minttl">1</Option>
|
||||
<Option name="pf_scrub_no_df">True</Option>
|
||||
<Option name="pf_scrub_random_id">True</Option>
|
||||
<Option name="pf_scrub_reassemble">False</Option>
|
||||
<Option name="pf_scrub_reassemble_tcp">True</Option>
|
||||
<Option name="pf_scrub_use_maxmss">True</Option>
|
||||
<Option name="pf_scrub_use_minttl">True</Option>
|
||||
<Option name="pf_set_adaptive">False</Option>
|
||||
<Option name="pf_set_icmp_error">False</Option>
|
||||
<Option name="pf_set_icmp_first">False</Option>
|
||||
<Option name="pf_set_other_first">False</Option>
|
||||
<Option name="pf_set_other_multiple">False</Option>
|
||||
<Option name="pf_set_other_single">False</Option>
|
||||
<Option name="pf_set_tcp_closed">False</Option>
|
||||
<Option name="pf_set_tcp_closing">False</Option>
|
||||
<Option name="pf_set_tcp_established">False</Option>
|
||||
<Option name="pf_set_tcp_finwait">False</Option>
|
||||
<Option name="pf_set_tcp_first">False</Option>
|
||||
<Option name="pf_set_tcp_opening">False</Option>
|
||||
<Option name="pf_set_udp_first">False</Option>
|
||||
<Option name="pf_set_udp_multiple">False</Option>
|
||||
<Option name="pf_set_udp_single">True</Option>
|
||||
<Option name="pf_state_policy"></Option>
|
||||
<Option name="pf_tcp_closed">0</Option>
|
||||
<Option name="pf_tcp_closing">0</Option>
|
||||
<Option name="pf_tcp_established">0</Option>
|
||||
<Option name="pf_tcp_finwait">0</Option>
|
||||
<Option name="pf_tcp_first">0</Option>
|
||||
<Option name="pf_tcp_opening">0</Option>
|
||||
<Option name="pf_timeout_frag">30</Option>
|
||||
<Option name="pf_timeout_interval">10</Option>
|
||||
<Option name="pf_udp_first">0</Option>
|
||||
<Option name="pf_udp_multiple">0</Option>
|
||||
<Option name="pf_udp_single">5</Option>
|
||||
<Option name="prolog_place">fw_file</Option>
|
||||
<Option name="prolog_script"></Option>
|
||||
<Option name="scpArgs"></Option>
|
||||
<Option name="script_name_on_firewall">/etc/fw/pf.fw</Option>
|
||||
<Option name="sshArgs"></Option>
|
||||
</FirewallOptions>
|
||||
</Firewall>
|
||||
<Firewall id="id34409X23052" host_OS="freebsd" inactive="False" lastCompiled="1296525125" lastInstalled="1271995582" lastModified="1297116315" platform="pf" version="4.7" name="firewall108" comment="vlan interface, static address, rc.conf format" ro="False">
|
||||
<NAT id="id34477X23052" name="NAT" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="True">
|
||||
<RuleSetOptions/>
|
||||
</NAT>
|
||||
<Policy id="id34446X23052" name="Policy" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="True">
|
||||
<PolicyRule id="id34448X23052" disabled="False" group="" log="True" position="0" action="Deny" direction="Both" comment="">
|
||||
<Src neg="False">
|
||||
<ObjectRef ref="sysid0"/>
|
||||
</Src>
|
||||
<Dst neg="False">
|
||||
<ObjectRef ref="sysid0"/>
|
||||
</Dst>
|
||||
<Srv neg="False">
|
||||
<ServiceRef ref="sysid1"/>
|
||||
</Srv>
|
||||
<Itf neg="False">
|
||||
<ObjectRef ref="sysid0"/>
|
||||
</Itf>
|
||||
<When neg="False">
|
||||
<IntervalRef ref="sysid2"/>
|
||||
</When>
|
||||
<PolicyRuleOptions>
|
||||
<Option name="stateless">True</Option>
|
||||
</PolicyRuleOptions>
|
||||
</PolicyRule>
|
||||
<RuleSetOptions/>
|
||||
</Policy>
|
||||
<Routing id="id34480X23052" name="Routing" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="True">
|
||||
<RuleSetOptions/>
|
||||
</Routing>
|
||||
<Interface id="id34417X23052" dedicated_failover="False" dyn="False" label="" mgmt="True" security_level="100" unnum="False" unprotected="False" name="em0" comment="" ro="False">
|
||||
<IPv4 id="id34420X23052" name="firewall108:em0:ip" comment="" ro="False" address="10.3.14.81" netmask="255.255.255.0"/>
|
||||
<InterfaceOptions/>
|
||||
</Interface>
|
||||
<Interface id="id34422X23052" dedicated_failover="False" dyn="False" label="" security_level="100" unnum="False" unprotected="False" name="em1" comment="" ro="False">
|
||||
<IPv4 id="id34425X23052" name="firewall108:em1:ip" comment="" ro="False" address="10.1.1.81" netmask="255.255.255.0"/>
|
||||
<InterfaceOptions/>
|
||||
</Interface>
|
||||
<Interface id="id34427X23052" dedicated_failover="False" dyn="False" label="" mgmt="False" security_level="0" unnum="True" unprotected="False" name="em2" comment="" ro="False">
|
||||
<InterfaceOptions>
|
||||
<Option name="type">ethernet</Option>
|
||||
</InterfaceOptions>
|
||||
<Interface id="id34436X23052" dedicated_failover="False" dyn="False" label="" mgmt="False" security_level="0" unnum="False" unprotected="False" name="vlan101" comment="" ro="False">
|
||||
<IPv4 id="id34439X23052" name="firewall108:em2:vlan101:ip" comment="" ro="False" address="192.168.101.1" netmask="255.255.255.0"/>
|
||||
<InterfaceOptions>
|
||||
<Option name="type">8021q</Option>
|
||||
<Option name="vlan_id">101</Option>
|
||||
</InterfaceOptions>
|
||||
</Interface>
|
||||
<Interface id="id34441X23052" dedicated_failover="False" dyn="False" security_level="0" unnum="False" unprotected="False" name="vlan102" comment="" ro="False">
|
||||
<IPv4 id="id34444X23052" name="firewall108:em2:vlan102:ip" comment="" ro="False" address="192.168.102.1" netmask="255.255.255.0"/>
|
||||
<InterfaceOptions>
|
||||
<Option name="type">8021q</Option>
|
||||
<Option name="vlan_id">102</Option>
|
||||
</InterfaceOptions>
|
||||
</Interface>
|
||||
</Interface>
|
||||
<Management address="0.0.0.0">
|
||||
<SNMPManagement enabled="False" snmp_read_community="" snmp_write_community=""/>
|
||||
<FWBDManagement enabled="False" identity="" port="-1"/>
|
||||
<PolicyInstallScript arguments="" command="" enabled="False"/>
|
||||
</Management>
|
||||
<FirewallOptions>
|
||||
<Option name="accept_new_tcp_with_no_syn">False</Option>
|
||||
<Option name="activationCmd"></Option>
|
||||
<Option name="admUser">root</Option>
|
||||
<Option name="altAddress"></Option>
|
||||
<Option name="check_shading">True</Option>
|
||||
<Option name="cmdline">-xt</Option>
|
||||
<Option name="compiler"></Option>
|
||||
<Option name="conf1_file"></Option>
|
||||
<Option name="conf_file_name_on_firewall">/etc/fw/path with space/pf.conf</Option>
|
||||
<Option name="configure_bridge_interfaces">True</Option>
|
||||
<Option name="configure_carp_interfaces">True</Option>
|
||||
<Option name="configure_interfaces">True</Option>
|
||||
<Option name="configure_pfsync_interfaces">True</Option>
|
||||
<Option name="configure_vlan_interfaces">True</Option>
|
||||
<Option name="debug">False</Option>
|
||||
<Option name="epilog_script"></Option>
|
||||
<Option name="fallback_log">False</Option>
|
||||
<Option name="firewall_dir">/etc</Option>
|
||||
<Option name="freebsd_ip_forward">1</Option>
|
||||
<Option name="generate_rc_conf_file">True</Option>
|
||||
<Option name="generate_shell_script">False</Option>
|
||||
<Option name="ignore_empty_groups">False</Option>
|
||||
<Option name="in_out_code">true</Option>
|
||||
<Option name="ipv4_6_order">ipv4_first</Option>
|
||||
<Option name="log_prefix">RULE %N -- %A </Option>
|
||||
<Option name="loopback_interface">lo0</Option>
|
||||
<Option name="manage_virtual_addr">True</Option>
|
||||
<Option name="mgmt_addr">10.3.14.30</Option>
|
||||
<Option name="mgmt_ssh">True</Option>
|
||||
<Option name="openbsd_ip_forward">1</Option>
|
||||
<Option name="output_file"></Option>
|
||||
<Option name="pass_all_out">false</Option>
|
||||
<Option name="pf_adaptive_end">0</Option>
|
||||
<Option name="pf_adaptive_start">0</Option>
|
||||
<Option name="pf_do_limit_frags">False</Option>
|
||||
<Option name="pf_do_limit_src_nodes">False</Option>
|
||||
<Option name="pf_do_limit_states">False</Option>
|
||||
<Option name="pf_do_limit_table_entries">False</Option>
|
||||
<Option name="pf_do_limit_tables">False</Option>
|
||||
<Option name="pf_do_scrub">True</Option>
|
||||
<Option name="pf_do_timeout_frag">False</Option>
|
||||
<Option name="pf_do_timeout_interval">False</Option>
|
||||
<Option name="pf_flush_states">False</Option>
|
||||
<Option name="pf_icmp_error">0</Option>
|
||||
<Option name="pf_icmp_first">0</Option>
|
||||
<Option name="pf_limit_frags">5000</Option>
|
||||
<Option name="pf_limit_src_nodes">0</Option>
|
||||
<Option name="pf_limit_states">10000</Option>
|
||||
<Option name="pf_limit_table_entries">0</Option>
|
||||
<Option name="pf_limit_tables">0</Option>
|
||||
<Option name="pf_modulate_state">False</Option>
|
||||
<Option name="pf_optimization"></Option>
|
||||
<Option name="pf_other_first">0</Option>
|
||||
<Option name="pf_other_multiple">0</Option>
|
||||
<Option name="pf_other_single">0</Option>
|
||||
<Option name="pf_scrub_fragm_crop">False</Option>
|
||||
<Option name="pf_scrub_fragm_drop_ovl">False</Option>
|
||||
<Option name="pf_scrub_maxmss">1460</Option>
|
||||
<Option name="pf_scrub_minttl">1</Option>
|
||||
<Option name="pf_scrub_no_df">True</Option>
|
||||
<Option name="pf_scrub_random_id">True</Option>
|
||||
<Option name="pf_scrub_reassemble">False</Option>
|
||||
<Option name="pf_scrub_reassemble_tcp">True</Option>
|
||||
<Option name="pf_scrub_use_maxmss">True</Option>
|
||||
<Option name="pf_scrub_use_minttl">True</Option>
|
||||
<Option name="pf_set_adaptive">False</Option>
|
||||
<Option name="pf_set_icmp_error">False</Option>
|
||||
<Option name="pf_set_icmp_first">False</Option>
|
||||
<Option name="pf_set_other_first">False</Option>
|
||||
<Option name="pf_set_other_multiple">False</Option>
|
||||
<Option name="pf_set_other_single">False</Option>
|
||||
<Option name="pf_set_tcp_closed">False</Option>
|
||||
<Option name="pf_set_tcp_closing">False</Option>
|
||||
<Option name="pf_set_tcp_established">False</Option>
|
||||
<Option name="pf_set_tcp_finwait">False</Option>
|
||||
<Option name="pf_set_tcp_first">False</Option>
|
||||
<Option name="pf_set_tcp_opening">False</Option>
|
||||
<Option name="pf_set_udp_first">False</Option>
|
||||
<Option name="pf_set_udp_multiple">False</Option>
|
||||
<Option name="pf_set_udp_single">True</Option>
|
||||
<Option name="pf_state_policy"></Option>
|
||||
<Option name="pf_tcp_closed">0</Option>
|
||||
<Option name="pf_tcp_closing">0</Option>
|
||||
<Option name="pf_tcp_established">0</Option>
|
||||
<Option name="pf_tcp_finwait">0</Option>
|
||||
<Option name="pf_tcp_first">0</Option>
|
||||
<Option name="pf_tcp_opening">0</Option>
|
||||
<Option name="pf_timeout_frag">30</Option>
|
||||
<Option name="pf_timeout_interval">10</Option>
|
||||
<Option name="pf_udp_first">0</Option>
|
||||
<Option name="pf_udp_multiple">0</Option>
|
||||
<Option name="pf_udp_single">5</Option>
|
||||
<Option name="prolog_place">fw_file</Option>
|
||||
<Option name="prolog_script"></Option>
|
||||
<Option name="scpArgs"></Option>
|
||||
<Option name="script_name_on_firewall">/etc/fw/pf.fw</Option>
|
||||
<Option name="sshArgs"></Option>
|
||||
</FirewallOptions>
|
||||
</Firewall>
|
||||
</ObjectGroup>
|
||||
<IntervalGroup id="stdid11_1" name="Time" comment="" ro="False"/>
|
||||
</Library>
|
||||
|
||||
@ -44,8 +44,8 @@ pass quick on en1 inet proto carp from any to any label "RULE -2 -- ACCEPT "
|
||||
# Rule -1 CARP (automatic)
|
||||
pass quick on en0 inet proto carp from any to any label "RULE -1 -- ACCEPT "
|
||||
#
|
||||
# Rule 0 (lo)
|
||||
pass quick on lo inet from any to any label "RULE 0 -- ACCEPT "
|
||||
# Rule 0 (lo0)
|
||||
pass quick on lo0 inet from any to any label "RULE 0 -- ACCEPT "
|
||||
#
|
||||
# Rule 1 (global)
|
||||
pass quick inet from any to <tbl.r1.d> label "RULE 1 -- ACCEPT "
|
||||
|
||||
@ -2,9 +2,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:52:14 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:57:30 2011 PST by vadim
|
||||
#
|
||||
# files: * pf_cluster_1_openbsd-1.fw /etc/pf_cluster_1_openbsd-1.fw
|
||||
# files: pf_cluster_1_openbsd-1.conf /etc/pf_cluster_1_openbsd-1.conf
|
||||
@ -286,9 +286,10 @@ configure_interfaces() {
|
||||
update_addresses_of_interface "carp1 192.168.1.1/0xffffff00" ""
|
||||
update_addresses_of_interface "en0 172.24.0.2/0xffffff00 172.24.0.3/0xffffff00" ""
|
||||
update_addresses_of_interface "en1 192.168.1.2/0xffffff00" ""
|
||||
update_addresses_of_interface "lo0 127.0.0.1/0xff000000" ""
|
||||
}
|
||||
|
||||
log "Activating firewall script generated Sun Feb 6 14:52:14 2011 by vadim"
|
||||
log "Activating firewall script generated Mon Feb 7 14:57:30 2011 by vadim"
|
||||
|
||||
set_kernel_vars
|
||||
configure_interfaces
|
||||
|
||||
@ -44,8 +44,8 @@ pass quick on en1 inet proto carp from any to any label "RULE -2 -- ACCEPT "
|
||||
# Rule -1 CARP (automatic)
|
||||
pass quick on en0 inet proto carp from any to any label "RULE -1 -- ACCEPT "
|
||||
#
|
||||
# Rule 0 (lo)
|
||||
pass quick on lo inet from any to any label "RULE 0 -- ACCEPT "
|
||||
# Rule 0 (lo0)
|
||||
pass quick on lo0 inet from any to any label "RULE 0 -- ACCEPT "
|
||||
#
|
||||
# Rule 1 (global)
|
||||
pass quick inet from any to <tbl.r1.d> label "RULE 1 -- ACCEPT "
|
||||
|
||||
@ -2,9 +2,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:52:14 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:57:30 2011 PST by vadim
|
||||
#
|
||||
# files: * pf_cluster_1_openbsd-2.fw /etc/pf_cluster_1_openbsd-2.fw
|
||||
# files: pf_cluster_1_openbsd-2.conf /etc/pf_cluster_1_openbsd-2.conf
|
||||
@ -183,9 +183,10 @@ configure_interfaces() {
|
||||
update_addresses_of_interface "carp1 192.168.1.1/0xffffff00" ""
|
||||
update_addresses_of_interface "en0 172.24.0.3/0xffffff00 172.24.0.2/0xffffff00" ""
|
||||
update_addresses_of_interface "en1 192.168.1.3/0xffffff00" ""
|
||||
update_addresses_of_interface "lo0 127.0.0.1/0xff000000" ""
|
||||
}
|
||||
|
||||
log "Activating firewall script generated Sun Feb 6 14:52:14 2011 by vadim"
|
||||
log "Activating firewall script generated Mon Feb 7 14:57:30 2011 by vadim"
|
||||
|
||||
set_kernel_vars
|
||||
configure_interfaces
|
||||
|
||||
@ -2,9 +2,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:52:14 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:57:30 2011 PST by vadim
|
||||
#
|
||||
# files: * pf_cluster_2_freebsd-1.fw /etc/pf_cluster_2_freebsd-1.fw
|
||||
# files: pf_cluster_2_freebsd-1.conf /etc/pf_cluster_2_freebsd-1.conf
|
||||
@ -291,7 +291,7 @@ configure_interfaces() {
|
||||
update_addresses_of_interface "en1 192.168.1.2/0xffffff00" ""
|
||||
}
|
||||
|
||||
log "Activating firewall script generated Sun Feb 6 14:52:14 2011 by vadim"
|
||||
log "Activating firewall script generated Mon Feb 7 14:57:30 2011 by vadim"
|
||||
|
||||
set_kernel_vars
|
||||
configure_interfaces
|
||||
|
||||
@ -2,9 +2,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:52:14 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:57:30 2011 PST by vadim
|
||||
#
|
||||
# files: * pf_cluster_2_freebsd-2.fw /etc/pf_cluster_2_freebsd-2.fw
|
||||
# files: pf_cluster_2_freebsd-2.conf /etc/pf_cluster_2_freebsd-2.conf
|
||||
@ -188,7 +188,7 @@ configure_interfaces() {
|
||||
update_addresses_of_interface "en1 192.168.1.3/0xffffff00" ""
|
||||
}
|
||||
|
||||
log "Activating firewall script generated Sun Feb 6 14:52:14 2011 by vadim"
|
||||
log "Activating firewall script generated Mon Feb 7 14:57:30 2011 by vadim"
|
||||
|
||||
set_kernel_vars
|
||||
configure_interfaces
|
||||
|
||||
@ -5,12 +5,9 @@
|
||||
# Tables: (1)
|
||||
table <tbl.r0.s> { 172.20.0.1 , 172.20.0.2 , 172.24.0.1 , 172.24.0.2 , 192.168.1.1 , 192.168.1.2 }
|
||||
|
||||
#
|
||||
# Rule -4 CARP (automatic)
|
||||
pass quick on vlan100 inet proto carp from any to any label "RULE -4 -- ACCEPT "
|
||||
#
|
||||
# Rule -3 CARP (automatic)
|
||||
pass quick on lo inet proto carp from any to any label "RULE -3 -- ACCEPT "
|
||||
pass quick on vlan100 inet proto carp from any to any label "RULE -3 -- ACCEPT "
|
||||
#
|
||||
# Rule -2 CARP (automatic)
|
||||
pass quick on en1 inet proto carp from any to any label "RULE -2 -- ACCEPT "
|
||||
|
||||
@ -2,9 +2,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:52:15 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:57:30 2011 PST by vadim
|
||||
#
|
||||
# files: * pf_cluster_3_openbsd-3.fw /etc/pf_cluster_3_openbsd-3.fw
|
||||
# files: pf_cluster_3_openbsd-3.conf /etc/pf_cluster_3_openbsd-3.conf
|
||||
@ -277,22 +277,22 @@ configure_interfaces() {
|
||||
:
|
||||
sync_vlan_interfaces vlan100
|
||||
update_vlans_of_interface "en2 vlan100"
|
||||
sync_carp_interfaces carp0 carp1 lo0 carp2
|
||||
$IFCONFIG lo0 vhid pass "" advskew 1 carpdev lo
|
||||
$IFCONFIG carp2 vhid pass "" carpdev vlan100
|
||||
sync_carp_interfaces carp0 carp1 carp2
|
||||
$IFCONFIG carp0 vhid pass "" carpdev en0
|
||||
$IFCONFIG carp1 vhid pass "" carpdev en1
|
||||
$IFCONFIG carp2 vhid pass "" carpdev vlan100
|
||||
sync_pfsync_interfaces
|
||||
update_addresses_of_interface "carp0 172.24.0.1/0xffffff00" ""
|
||||
update_addresses_of_interface "carp1 192.168.1.1/0xffffff00" ""
|
||||
update_addresses_of_interface "carp2 172.20.0.1/0xffffff00" ""
|
||||
update_addresses_of_interface "en0 172.24.0.2/0xffffff00" ""
|
||||
update_addresses_of_interface "en1 192.168.1.2/0xffffff00" ""
|
||||
update_addresses_of_interface "lo 127.0.0.1/0xff000000" ""
|
||||
update_addresses_of_interface "en2" ""
|
||||
update_addresses_of_interface "lo0 127.0.0.1/0xff000000" ""
|
||||
update_addresses_of_interface "vlan100 172.20.0.2/0xffffff00" ""
|
||||
}
|
||||
|
||||
log "Activating firewall script generated Sun Feb 6 14:52:15 2011 by vadim"
|
||||
log "Activating firewall script generated Mon Feb 7 14:57:30 2011 by vadim"
|
||||
|
||||
set_kernel_vars
|
||||
configure_interfaces
|
||||
|
||||
@ -5,12 +5,9 @@
|
||||
# Tables: (1)
|
||||
table <tbl.r0.s> { 172.20.0.1 , 172.20.0.3 , 172.24.0.1 , 172.24.0.3 , 192.168.1.1 , 192.168.1.3 }
|
||||
|
||||
#
|
||||
# Rule -4 CARP (automatic)
|
||||
pass quick on vlan100 inet proto carp from any to any label "RULE -4 -- ACCEPT "
|
||||
#
|
||||
# Rule -3 CARP (automatic)
|
||||
pass quick on lo inet proto carp from any to any label "RULE -3 -- ACCEPT "
|
||||
pass quick on vlan100 inet proto carp from any to any label "RULE -3 -- ACCEPT "
|
||||
#
|
||||
# Rule -2 CARP (automatic)
|
||||
pass quick on en1 inet proto carp from any to any label "RULE -2 -- ACCEPT "
|
||||
|
||||
@ -2,9 +2,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 14:52:15 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:57:30 2011 PST by vadim
|
||||
#
|
||||
# files: * pf_cluster_3_openbsd-4.fw /etc/pf_cluster_3_openbsd-4.fw
|
||||
# files: pf_cluster_3_openbsd-4.conf /etc/pf_cluster_3_openbsd-4.conf
|
||||
@ -176,21 +176,21 @@ run_epilog_and_exit() {
|
||||
|
||||
configure_interfaces() {
|
||||
:
|
||||
sync_carp_interfaces carp0 carp1 lo0 carp2
|
||||
sync_carp_interfaces carp0 carp1 carp2
|
||||
$IFCONFIG carp0 vhid pass "" advskew 1 carpdev en0
|
||||
$IFCONFIG carp1 vhid pass "" advskew 1 carpdev en1
|
||||
$IFCONFIG lo0 vhid pass "" advskew 1 carpdev lo
|
||||
$IFCONFIG carp2 vhid pass "" advskew 1 carpdev vlan100
|
||||
update_addresses_of_interface "carp0 172.24.0.1/0xffffff00" ""
|
||||
update_addresses_of_interface "carp1 192.168.1.1/0xffffff00" ""
|
||||
update_addresses_of_interface "carp2 172.20.0.1/0xffffff00" ""
|
||||
update_addresses_of_interface "en0 172.24.0.3/0xffffff00" ""
|
||||
update_addresses_of_interface "en1 192.168.1.3/0xffffff00" ""
|
||||
update_addresses_of_interface "lo 127.0.0.1/0xff000000" ""
|
||||
update_addresses_of_interface "en2" ""
|
||||
update_addresses_of_interface "lo0 127.0.0.1/0xff000000" ""
|
||||
update_addresses_of_interface "vlan100 172.20.0.3/0xffffff00" ""
|
||||
}
|
||||
|
||||
log "Activating firewall script generated Sun Feb 6 14:52:15 2011 by vadim"
|
||||
log "Activating firewall script generated Mon Feb 7 14:57:30 2011 by vadim"
|
||||
|
||||
set_kernel_vars
|
||||
configure_interfaces
|
||||
|
||||
@ -1,9 +1,9 @@
|
||||
#
|
||||
# This is automatically generated file. DO NOT MODIFY !
|
||||
#
|
||||
# Firewall Builder fwb_pf v4.2.0.3460
|
||||
# Firewall Builder fwb_pf v4.2.0.3462
|
||||
#
|
||||
# Generated Sun Feb 6 15:05:40 2011 PST by vadim
|
||||
# Generated Mon Feb 7 14:57:30 2011 PST by vadim
|
||||
#
|
||||
# files: * pf_cluster_4_rc.conf.local /etc/pf_cluster_4_rc.conf.local
|
||||
# files: pf_cluster_4_pf.conf /etc/pf_cluster_4_pf.conf
|
||||
@ -20,8 +20,7 @@ gateway_enable="YES"
|
||||
cloned_interfaces="carp0 carp1"
|
||||
ifconfig_carp0="vhid 101 pass secret advskew 10 carpdev en0"
|
||||
ifconfig_carp1="vhid 100 pass secret advskew 10 carpdev en1"
|
||||
ipv6_network_interfaces="en0 en1 carp0 carp1"
|
||||
network_interfaces="en0 en1 carp0 carp1"
|
||||
network_interfaces="carp0 carp1 en0 en1"
|
||||
pfsync_enable="YES"
|
||||
pfsync_syncdev="en0"
|
||||
pfsync_syncpeer="172.24.0.2"
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user