onkelbeh/fwbuilder
1
0
Fork 0
mirror of https://github.com/fwbuilder/fwbuilder synced 2026-09-14 00:49:09 +02:00
Code Issues Releases Wiki Activity

* PIXImporterNat.cpp (buildDNATRule): see #2313 "NAT with

Browse Source 
access-list destination address and original service not set".
"Nat" and "static" commands that use access-list should import all
components of the access-list command (source, destination and
service/protocol).
This commit is contained in:
Vadim Kurland
2011-04-05 19:59:13 -07:00
parent e3383349b0
commit d5f95e0f2a
6 changed files with 682 additions and 579 deletions
Download Patch File Download Diff File Expand all files Collapse all files
doc/ChangeLog
+6
View File
@@ -1,5 +1,11 @@
2011-04-05 vadim <vadim@netcitadel.com> 2011-04-05 vadim <vadim@netcitadel.com>
* PIXImporterNat.cpp (buildDNATRule): see #2313 "NAT with
access-list destination address and original service not set".
"Nat" and "static" commands that use access-list should import all
components of the access-list command (source, destination and
service/protocol).
* PIXImporterNat.cpp (buildSNATRule): see #2310 "Imported global / * PIXImporterNat.cpp (buildSNATRule): see #2310 "Imported global /
nat rule has wrong interface defined". Importer mixed up inbound nat rule has wrong interface defined". Importer mixed up inbound
and outbound interfaces in NAT commands created from combination and outbound interfaces in NAT commands created from combination
src/import/PIXImporter.h
+1 -1
View File
@@ -70,7 +70,7 @@ class PIXImporter : public IOSImporter
{ {
libfwbuilder::FWObject* getMirroredServiceObject(libfwbuilder::FWObject *obj); libfwbuilder::FWObject* getMirroredServiceObject(libfwbuilder::FWObject *obj);
libfwbuilder::FWObject* mirrorServiceObjectRecursively(libfwbuilder::FWObject *obj); libfwbuilder::FWObject* mirrorServiceObjectRecursively(libfwbuilder::FWObject *obj);
public: public:
QString named_object_name; QString named_object_name;
src/import/PIXImporterNat.cpp
+45 -18
View File
@@ -167,20 +167,34 @@ void PIXImporter::buildDNATRule()
UnidirectionalRuleSet *rs = all_rulesets[real_addr_acl]; UnidirectionalRuleSet *rs = all_rulesets[real_addr_acl];
if (rs) if (rs)
{ {
RuleElement* tdst = rule->getTDst();
assert(tdst!=NULL);
PolicyRule *policy_rule = PolicyRule::cast( PolicyRule *policy_rule = PolicyRule::cast(
rs->ruleset->getFirstByType(PolicyRule::TYPENAME)); rs->ruleset->getFirstByType(PolicyRule::TYPENAME));
if (policy_rule) if (policy_rule)
{ {
RuleElement *src = policy_rule->getSrc();
for (FWObject::iterator it=src->begin(); it!=src->end(); ++it) RuleElement* osrc = rule->getOSrc();
{ RuleElement* osrv = rule->getOSrv();
FWObject *o = FWReference::getObject(*it); RuleElement* tdst = rule->getTDst();
tdst->addRef(o);
} /* copy objects from a policy rule into
* rule elements of a nat rule
*
* Src --> TDst
* Dst --> OSrc
* Srv --> OSrv
*/
RuleElement *re = policy_rule->getSrc();
for (FWObject::iterator it=re->begin(); it!=re->end(); ++it)
tdst->addRef(FWReference::getObject(*it));
re = policy_rule->getDst();
for (FWObject::iterator it=re->begin(); it!=re->end(); ++it)
osrc->addRef(FWReference::getObject(*it));
re = policy_rule->getSrv();
for (FWObject::iterator it=re->begin(); it!=re->end(); ++it)
osrv->addRef(FWReference::getObject(*it));
} }
rs->to_be_deleted = true; rs->to_be_deleted = true;
@@ -280,20 +294,33 @@ void PIXImporter::buildSNATRule()
UnidirectionalRuleSet *rs = all_rulesets[nat_acl]; UnidirectionalRuleSet *rs = all_rulesets[nat_acl];
if (rs) if (rs)
{ {
RuleElement* osrc = rule->getOSrc();
assert(osrc!=NULL);
PolicyRule *policy_rule = PolicyRule::cast( PolicyRule *policy_rule = PolicyRule::cast(
rs->ruleset->getFirstByType(PolicyRule::TYPENAME)); rs->ruleset->getFirstByType(PolicyRule::TYPENAME));
if (policy_rule) if (policy_rule)
{ {
RuleElement *src = policy_rule->getSrc(); RuleElement* osrc = rule->getOSrc();
for (FWObject::iterator it=src->begin(); it!=src->end(); ++it) RuleElement* odst = rule->getODst();
{ RuleElement* osrv = rule->getOSrv();
FWObject *o = FWReference::getObject(*it);
osrc->addRef(o); /* copy objects from a policy rule into "original"
} * rule elements of a nat rule
*
* Src --> OSrc
* Dst --> ODst
* Srv --> OSrv
*/
RuleElement *re = policy_rule->getSrc();
for (FWObject::iterator it=re->begin(); it!=re->end(); ++it)
osrc->addRef(FWReference::getObject(*it));
re = policy_rule->getDst();
for (FWObject::iterator it=re->begin(); it!=re->end(); ++it)
odst->addRef(FWReference::getObject(*it));
re = policy_rule->getSrv();
for (FWObject::iterator it=re->begin(); it!=re->end(); ++it)
osrv->addRef(FWReference::getObject(*it));
} }
rs->to_be_deleted = true; rs->to_be_deleted = true;
src/unit_tests/PIXImporterTest/test_data/pix7-nat.fwb
+597 -538
View File
@@ -1,6 +1,6 @@
<?xml version="1.0" encoding="utf-8"?> <?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE FWObjectDatabase SYSTEM "fwbuilder.dtd"> <!DOCTYPE FWObjectDatabase SYSTEM "fwbuilder.dtd">
<FWObjectDatabase xmlns="http://www.fwbuilder.org/1.0/" version="18" lastModified="1302056910" id="root"> <FWObjectDatabase xmlns="http://www.fwbuilder.org/1.0/" version="18" lastModified="1302058658" id="root">
<Library id="syslib000" color="#d4f8ff" name="Standard" comment="Standard objects" ro="True"> <Library id="syslib000" color="#d4f8ff" name="Standard" comment="Standard objects" ro="True">
<AnyNetwork id="sysid0" name="Any" comment="Any Network" ro="False" address="0.0.0.0" netmask="0.0.0.0"/> <AnyNetwork id="sysid0" name="Any" comment="Any Network" ro="False" address="0.0.0.0" netmask="0.0.0.0"/>
<AnyIPService id="sysid1" protocol_num="0" name="Any" comment="Any IP Service" ro="False"/> <AnyIPService id="sysid1" protocol_num="0" name="Any" comment="Any IP Service" ro="False"/>
@@ -441,198 +441,93 @@
<IPv4 id="id9" name="h-10.0.0.253" comment="Created during import of line 80" ro="False" address="10.0.0.253" netmask="255.255.255.255"/> <IPv4 id="id9" name="h-10.0.0.253" comment="Created during import of line 80" ro="False" address="10.0.0.253" netmask="255.255.255.255"/>
<IPv4 id="id10" name="h-10.0.0.254" comment="Created during import of line 81" ro="False" address="10.0.0.254" netmask="255.255.255.255"/> <IPv4 id="id10" name="h-10.0.0.254" comment="Created during import of line 81" ro="False" address="10.0.0.254" netmask="255.255.255.255"/>
<IPv4 id="id11" name="h-10.1.1.43" comment="Created during import of line 106" ro="False" address="10.1.1.43" netmask="255.255.255.255"/> <IPv4 id="id11" name="h-10.1.1.43" comment="Created during import of line 106" ro="False" address="10.1.1.43" netmask="255.255.255.255"/>
<IPv4 id="id12" name="h-10.1.1.1" comment="Created during import of line 141" ro="False" address="10.1.1.1" netmask="255.255.255.255"/> <IPv4 id="id12" name="h-4.2.2.1" comment="Created during import of line 109" ro="False" address="4.2.2.1" netmask="255.255.255.255"/>
<IPv4 id="id13" name="h-192.0.2.10" comment="Created during import of line 141" ro="False" address="192.0.2.10" netmask="255.255.255.255"/> <IPv4 id="id13" name="h-10.1.1.20" comment="Created during import of line 111" ro="False" address="10.1.1.20" netmask="255.255.255.255"/>
<IPv4 id="id14" name="h-10.1.1.16" comment="Created during import of line 145" ro="False" address="10.1.1.16" netmask="255.255.255.255"/> <IPv4 id="id14" name="h-10.1.1.1" comment="Created during import of line 146" ro="False" address="10.1.1.1" netmask="255.255.255.255"/>
<IPv4 id="id15" name="h-10.0.0.100" comment="Created during import of line 146" ro="False" address="10.0.0.100" netmask="255.255.255.255"/> <IPv4 id="id15" name="h-192.0.2.10" comment="Created during import of line 146" ro="False" address="192.0.2.10" netmask="255.255.255.255"/>
<IPv4 id="id16" name="h-10.1.1.100" comment="Created during import of line 146" ro="False" address="10.1.1.100" netmask="255.255.255.255"/> <IPv4 id="id16" name="h-10.1.1.16" comment="Created during import of line 151" ro="False" address="10.1.1.16" netmask="255.255.255.255"/>
<IPv4 id="id17" name="h-10.1.1.111" comment="Created during import of line 147" ro="False" address="10.1.1.111" netmask="255.255.255.255"/> <IPv4 id="id17" name="h-10.0.0.100" comment="Created during import of line 152" ro="False" address="10.0.0.100" netmask="255.255.255.255"/>
<IPv4 id="id18" name="h-10.5.80.200" comment="Created during import of line 149" ro="False" address="10.5.80.200" netmask="255.255.255.255"/> <IPv4 id="id18" name="h-10.1.1.100" comment="Created during import of line 152" ro="False" address="10.1.1.100" netmask="255.255.255.255"/>
<IPv4 id="id19" name="h-10.10.1.200" comment="Created during import of line 149" ro="False" address="10.10.1.200" netmask="255.255.255.255"/> <IPv4 id="id19" name="h-10.1.1.111" comment="Created during import of line 153" ro="False" address="10.1.1.111" netmask="255.255.255.255"/>
<IPv4 id="id20" name="h-192.0.2.100" comment="Created during import of line 202" ro="False" address="192.0.2.100" netmask="255.255.255.255"/> <IPv4 id="id20" name="h-10.5.80.200" comment="Created during import of line 155" ro="False" address="10.5.80.200" netmask="255.255.255.255"/>
<IPv4 id="id21" name="h-10.10.1.200" comment="Created during import of line 155" ro="False" address="10.10.1.200" netmask="255.255.255.255"/>
<IPv4 id="id22" name="h-192.0.2.15" comment="Created during import of line 161" ro="False" address="192.0.2.15" netmask="255.255.255.255"/>
<IPv4 id="id23" name="h-192.0.2.100" comment="Created during import of line 209" ro="False" address="192.0.2.100" netmask="255.255.255.255"/>
</ObjectGroup> </ObjectGroup>
<ObjectGroup id="id21" name="DNS Names" comment="" ro="False"/> <ObjectGroup id="id24" name="DNS Names" comment="" ro="False"/>
<ObjectGroup id="id22" name="Address Tables" comment="" ro="False"/> <ObjectGroup id="id25" name="Address Tables" comment="" ro="False"/>
<ObjectGroup id="id23" name="Groups" comment="" ro="False"> <ObjectGroup id="id26" name="Groups" comment="" ro="False">
<ObjectGroup id="id24" name="outside.id12051X6282.src.net.0" comment="Created during import of line 71" ro="False"> <ObjectGroup id="id27" name="outside.id12051X6282.src.net.0" comment="Created during import of line 71" ro="False">
<ObjectRef ref="id3"/> <ObjectRef ref="id3"/>
<ObjectRef ref="id4"/> <ObjectRef ref="id4"/>
</ObjectGroup> </ObjectGroup>
<ObjectGroup id="id27" name="outside.id12051X6282.src.net.1" comment="Created during import of line 74" ro="False"> <ObjectGroup id="id30" name="outside.id12051X6282.src.net.1" comment="Created during import of line 74" ro="False">
<ObjectRef ref="id5"/> <ObjectRef ref="id5"/>
<ObjectRef ref="id6"/> <ObjectRef ref="id6"/>
<ObjectRef ref="id7"/> <ObjectRef ref="id7"/>
<ObjectRef ref="id8"/> <ObjectRef ref="id8"/>
</ObjectGroup> </ObjectGroup>
<ObjectGroup id="id32" name="outside.id12051X6282.src.net.2" comment="Created during import of line 79" ro="False"> <ObjectGroup id="id35" name="outside.id12051X6282.src.net.2" comment="Created during import of line 79" ro="False">
<ObjectRef ref="id9"/> <ObjectRef ref="id9"/>
<ObjectRef ref="id10"/> <ObjectRef ref="id10"/>
</ObjectGroup> </ObjectGroup>
<ObjectGroup id="id35" name="network-zone-inside" comment="Created during import of line 83" ro="False"> <ObjectGroup id="id38" name="network-zone-inside" comment="Created during import of line 83" ro="False">
<ObjectRef ref="id41"/> <ObjectRef ref="id44"/>
</ObjectGroup> </ObjectGroup>
<ObjectGroup id="id37" name="network-zone-dmz20" comment="Created during import of line 85" ro="False"> <ObjectGroup id="id40" name="network-zone-dmz20" comment="Created during import of line 85" ro="False">
<ObjectRef ref="id42"/> <ObjectRef ref="id45"/>
</ObjectGroup> </ObjectGroup>
</ObjectGroup> </ObjectGroup>
<ObjectGroup id="id39" name="Hosts" comment="" ro="False"/> <ObjectGroup id="id42" name="Hosts" comment="" ro="False"/>
<ObjectGroup id="id40" name="Networks" comment="" ro="False"> <ObjectGroup id="id43" name="Networks" comment="" ro="False">
<Network id="id41" name="net-10.1.1.0/255.255.255.0" comment="Created during import of line 84" ro="False" address="10.1.1.0" netmask="255.255.255.0"/> <Network id="id44" name="net-10.1.1.0/255.255.255.0" comment="Created during import of line 84" ro="False" address="10.1.1.0" netmask="255.255.255.0"/>
<Network id="id42" name="net-10.0.0.0/255.255.255.0" comment="Created during import of line 86" ro="False" address="10.0.0.0" netmask="255.255.255.0"/> <Network id="id45" name="net-10.0.0.0/255.255.255.0" comment="Created during import of line 86" ro="False" address="10.0.0.0" netmask="255.255.255.0"/>
<Network id="id43" name="net-192.0.2.128/255.255.255.240" comment="Created during import of line 141" ro="False" address="192.0.2.128" netmask="255.255.255.240"/> <Network id="id46" name="net-192.0.2.128/255.255.255.240" comment="Created during import of line 146" ro="False" address="192.0.2.128" netmask="255.255.255.240"/>
<Network id="id44" name="net-10.0.0.128/255.255.255.240" comment="Created during import of line 141" ro="False" address="10.0.0.128" netmask="255.255.255.240"/> <Network id="id47" name="net-10.0.0.128/255.255.255.240" comment="Created during import of line 146" ro="False" address="10.0.0.128" netmask="255.255.255.240"/>
<Network id="id45" name="net-10.1.1.32/255.255.255.240" comment="Created during import of line 142" ro="False" address="10.1.1.32" netmask="255.255.255.240"/> <Network id="id48" name="net-10.1.1.32/255.255.255.240" comment="Created during import of line 147" ro="False" address="10.1.1.32" netmask="255.255.255.240"/>
<Network id="id46" name="net-10.0.0.16/255.255.255.240" comment="Created during import of line 145" ro="False" address="10.0.0.16" netmask="255.255.255.240"/> <Network id="id49" name="net-10.0.0.16/255.255.255.240" comment="Created during import of line 151" ro="False" address="10.0.0.16" netmask="255.255.255.240"/>
<Network id="id47" name="net-10.5.80.16/255.255.255.240" comment="Created during import of line 148" ro="False" address="10.5.80.16" netmask="255.255.255.240"/> <Network id="id50" name="net-10.5.80.16/255.255.255.240" comment="Created during import of line 154" ro="False" address="10.5.80.16" netmask="255.255.255.240"/>
<Network id="id48" name="net-10.1.2.0/255.255.255.0" comment="Created during import of line 201" ro="False" address="10.1.2.0" netmask="255.255.255.0"/> <Network id="id51" name="net-10.1.2.0/255.255.255.0" comment="Created during import of line 208" ro="False" address="10.1.2.0" netmask="255.255.255.0"/>
</ObjectGroup> </ObjectGroup>
<ObjectGroup id="id49" name="Address Ranges" comment="" ro="False"> <ObjectGroup id="id52" name="Address Ranges" comment="" ro="False">
<AddressRange id="id50" name="range-192.0.2.11-192.0.2.15" comment="Created during import of line 141" ro="False" start_address="192.0.2.11" end_address="192.0.2.15"/> <AddressRange id="id53" name="range-192.0.2.11-192.0.2.15" comment="Created during import of line 146" ro="False" start_address="192.0.2.11" end_address="192.0.2.15"/>
</ObjectGroup> </ObjectGroup>
</ObjectGroup> </ObjectGroup>
<ServiceGroup id="id51" name="Services" comment="" ro="False"> <ServiceGroup id="id54" name="Services" comment="" ro="False">
<ServiceGroup id="id52" name="Groups" comment="" ro="False"/> <ServiceGroup id="id55" name="Groups" comment="" ro="False"/>
<ServiceGroup id="id53" name="ICMP" comment="" ro="False"/> <ServiceGroup id="id56" name="ICMP" comment="" ro="False"/>
<ServiceGroup id="id54" name="IP" comment="" ro="False"> <ServiceGroup id="id57" name="IP" comment="" ro="False">
<IPService id="id55" any_opt="False" dscp="" fragm="False" lsrr="False" protocol_num="0" rr="False" rtralt="False" rtralt_value="False" short_fragm="False" ssrr="False" tos="" ts="False" name="ip" comment="Created during import of line 89" ro="False"/> <IPService id="id58" any_opt="False" dscp="" fragm="False" lsrr="False" protocol_num="0" rr="False" rtralt="False" rtralt_value="False" short_fragm="False" ssrr="False" tos="" ts="False" name="ip" comment="Created during import of line 89" ro="False"/>
</ServiceGroup> </ServiceGroup>
<ServiceGroup id="id56" name="TCP" comment="" ro="False"> <ServiceGroup id="id59" name="TCP" comment="" ro="False">
<TCPService id="id57" ack_flag="False" ack_flag_mask="False" established="False" fin_flag="False" fin_flag_mask="False" psh_flag="False" psh_flag_mask="False" rst_flag="False" rst_flag_mask="False" syn_flag="False" syn_flag_mask="False" urg_flag="False" urg_flag_mask="False" name="tcp 80:80 / 0:0" comment="Created during import of line 106" ro="False" src_range_start="80" src_range_end="80" dst_range_start="0" dst_range_end="0"/> <TCPService id="id60" ack_flag="False" ack_flag_mask="False" established="False" fin_flag="False" fin_flag_mask="False" psh_flag="False" psh_flag_mask="False" rst_flag="False" rst_flag_mask="False" syn_flag="False" syn_flag_mask="False" urg_flag="False" urg_flag_mask="False" name="tcp 80:80 / 0:0" comment="Created during import of line 106" ro="False" src_range_start="80" src_range_end="80" dst_range_start="0" dst_range_end="0"/>
<TCPService id="id58" ack_flag="False" ack_flag_mask="False" established="False" fin_flag="False" fin_flag_mask="False" psh_flag="False" psh_flag_mask="False" rst_flag="False" rst_flag_mask="False" syn_flag="False" syn_flag_mask="False" urg_flag="False" urg_flag_mask="False" name="tcp 0:0 / 80:80" comment="Created during import of line 148" ro="False" src_range_start="0" src_range_end="0" dst_range_start="80" dst_range_end="80"/> <TCPService id="id61" ack_flag="False" ack_flag_mask="False" established="False" fin_flag="False" fin_flag_mask="False" psh_flag="False" psh_flag_mask="False" rst_flag="False" rst_flag_mask="False" syn_flag="False" syn_flag_mask="False" urg_flag="False" urg_flag_mask="False" name="tcp 0:0 / 80:80" comment="Created during import of line 109" ro="False" src_range_start="0" src_range_end="0" dst_range_start="80" dst_range_end="80"/>
<TCPService id="id59" ack_flag="False" ack_flag_mask="False" established="False" fin_flag="False" fin_flag_mask="False" psh_flag="False" psh_flag_mask="False" rst_flag="False" rst_flag_mask="False" syn_flag="False" syn_flag_mask="False" urg_flag="False" urg_flag_mask="False" name="tcp 0:0 / 8080:8080" comment="Created during import of line 148" ro="False" src_range_start="0" src_range_end="0" dst_range_start="8080" dst_range_end="8080"/> <TCPService id="id62" ack_flag="False" ack_flag_mask="False" established="False" fin_flag="False" fin_flag_mask="False" psh_flag="False" psh_flag_mask="False" rst_flag="False" rst_flag_mask="False" syn_flag="False" syn_flag_mask="False" urg_flag="False" urg_flag_mask="False" name="tcp 0:0 / 8080:8080" comment="Created during import of line 154" ro="False" src_range_start="0" src_range_end="0" dst_range_start="8080" dst_range_end="8080"/>
<TCPService id="id60" ack_flag="False" ack_flag_mask="False" established="False" fin_flag="False" fin_flag_mask="False" psh_flag="False" psh_flag_mask="False" rst_flag="False" rst_flag_mask="False" syn_flag="False" syn_flag_mask="False" urg_flag="False" urg_flag_mask="False" name="tcp 0:0 / 0:0" comment="Created during import of line 151" ro="False" src_range_start="0" src_range_end="0" dst_range_start="0" dst_range_end="0"/> <TCPService id="id63" ack_flag="False" ack_flag_mask="False" established="False" fin_flag="False" fin_flag_mask="False" psh_flag="False" psh_flag_mask="False" rst_flag="False" rst_flag_mask="False" syn_flag="False" syn_flag_mask="False" urg_flag="False" urg_flag_mask="False" name="tcp 0:0 / 0:0" comment="Created during import of line 157" ro="False" src_range_start="0" src_range_end="0" dst_range_start="0" dst_range_end="0"/>
<TCPService id="id61" ack_flag="False" ack_flag_mask="False" established="False" fin_flag="False" fin_flag_mask="False" psh_flag="False" psh_flag_mask="False" rst_flag="False" rst_flag_mask="False" syn_flag="False" syn_flag_mask="False" urg_flag="False" urg_flag_mask="False" name="tcp 0:0 / 22:22" comment="Created during import of line 200" ro="False" src_range_start="0" src_range_end="0" dst_range_start="22" dst_range_end="22"/> <TCPService id="id64" ack_flag="False" ack_flag_mask="False" established="False" fin_flag="False" fin_flag_mask="False" psh_flag="False" psh_flag_mask="False" rst_flag="False" rst_flag_mask="False" syn_flag="False" syn_flag_mask="False" urg_flag="False" urg_flag_mask="False" name="tcp 0:0 / 22:22" comment="Created during import of line 207" ro="False" src_range_start="0" src_range_end="0" dst_range_start="22" dst_range_end="22"/>
</ServiceGroup> </ServiceGroup>
<ServiceGroup id="id62" name="UDP" comment="" ro="False"> <ServiceGroup id="id65" name="UDP" comment="" ro="False">
<UDPService id="id63" name="udp 0:0 / 53:53" comment="Created during import of line 93" ro="False" src_range_start="0" src_range_end="0" dst_range_start="53" dst_range_end="53"/> <UDPService id="id66" name="udp 0:0 / 53:53" comment="Created during import of line 93" ro="False" src_range_start="0" src_range_end="0" dst_range_start="53" dst_range_end="53"/>
</ServiceGroup> </ServiceGroup>
<ServiceGroup id="id64" name="Users" comment="" ro="False"/> <ServiceGroup id="id67" name="Users" comment="" ro="False"/>
<ServiceGroup id="id65" name="Custom" comment="" ro="False"/> <ServiceGroup id="id68" name="Custom" comment="" ro="False"/>
<ServiceGroup id="id66" name="TagServices" comment="" ro="False"/> <ServiceGroup id="id69" name="TagServices" comment="" ro="False"/>
</ServiceGroup> </ServiceGroup>
<ObjectGroup id="id67" name="Firewalls" comment="" ro="False"> <ObjectGroup id="id70" name="Firewalls" comment="" ro="False">
<Firewall id="id68" host_OS="pix_os" lastCompiled="0" lastInstalled="0" lastModified="0" platform="pix" version="7.0" name="pix1" comment="Created during import of line 6" ro="False"> <Firewall id="id71" host_OS="pix_os" lastCompiled="0" lastInstalled="0" lastModified="0" platform="pix" version="7.0" name="pix1" comment="Created during import of line 6" ro="False">
<NAT id="id276" name="NAT" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="True"> <NAT id="id279" name="NAT" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="True">
<NATRule id="id279" disabled="False" group="" position="0" action="Translate" comment="Created during import of line 134"> <NATRule id="id282" disabled="False" group="" position="0" action="Translate" comment="Created during import of line 139">
<OSrc neg="False"> <OSrc neg="False">
<ObjectRef ref="id41"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="sysid0"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="sysid1"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="id589"/>
</TSrc>
<TDst neg="False">
<ObjectRef ref="sysid0"/>
</TDst>
<TSrv neg="False">
<ServiceRef ref="sysid1"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id595"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id589"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id297" disabled="False" group="" position="1" action="Translate" comment="Created during import of line 141">
<OSrc neg="False">
<ObjectRef ref="id12"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="sysid0"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="sysid1"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="id13"/>
</TSrc>
<TDst neg="False">
<ObjectRef ref="sysid0"/>
</TDst>
<TSrv neg="False">
<ServiceRef ref="sysid1"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id595"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id589"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id315" disabled="False" group="" position="2" action="Translate" comment="Created during import of line 141">
<OSrc neg="False">
<ObjectRef ref="id12"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="sysid0"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="sysid1"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="id50"/>
</TSrc>
<TDst neg="False">
<ObjectRef ref="sysid0"/>
</TDst>
<TSrv neg="False">
<ServiceRef ref="sysid1"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id595"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id589"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id333" disabled="False" group="" position="3" action="Translate" comment="Created during import of line 141">
<OSrc neg="False">
<ObjectRef ref="id12"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="sysid0"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="sysid1"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="id43"/>
</TSrc>
<TDst neg="False">
<ObjectRef ref="sysid0"/>
</TDst>
<TSrv neg="False">
<ServiceRef ref="sysid1"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id595"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id589"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id351" disabled="False" group="" position="4" action="Translate" comment="Created during import of line 141">
<OSrc neg="False">
<ObjectRef ref="id12"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="sysid0"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="sysid1"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="id44"/> <ObjectRef ref="id44"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="sysid0"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="id58"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="id630"/>
</TSrc> </TSrc>
<TDst neg="False"> <TDst neg="False">
<ObjectRef ref="sysid0"/> <ObjectRef ref="sysid0"/>
@@ -641,154 +536,262 @@
<ServiceRef ref="sysid1"/> <ServiceRef ref="sysid1"/>
</TSrv> </TSrv>
<ItfInb neg="False"> <ItfInb neg="False">
<ObjectRef ref="id595"/> <ObjectRef ref="id636"/>
</ItfInb> </ItfInb>
<ItfOutb neg="False"> <ItfOutb neg="False">
<ObjectRef ref="id592"/> <ObjectRef ref="id630"/>
</ItfOutb> </ItfOutb>
<NATRuleOptions/> <NATRuleOptions/>
</NATRule> </NATRule>
<NATRule id="id369" disabled="False" group="" position="5" action="Translate" comment="Created during import of line 142"> <NATRule id="id300" disabled="False" group="" position="1" action="Translate" comment="Created during import of line 146">
<OSrc neg="False"> <OSrc neg="False">
<ObjectRef ref="id45"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="sysid0"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="sysid1"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="id13"/>
</TSrc>
<TDst neg="False">
<ObjectRef ref="sysid0"/>
</TDst>
<TSrv neg="False">
<ServiceRef ref="sysid1"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id595"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id589"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id387" disabled="False" group="" position="6" action="Translate" comment="Created during import of line 142">
<OSrc neg="False">
<ObjectRef ref="id45"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="sysid0"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="sysid1"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="id50"/>
</TSrc>
<TDst neg="False">
<ObjectRef ref="sysid0"/>
</TDst>
<TSrv neg="False">
<ServiceRef ref="sysid1"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id595"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id589"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id405" disabled="False" group="" position="7" action="Translate" comment="Created during import of line 142">
<OSrc neg="False">
<ObjectRef ref="id45"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="sysid0"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="sysid1"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="id43"/>
</TSrc>
<TDst neg="False">
<ObjectRef ref="sysid0"/>
</TDst>
<TSrv neg="False">
<ServiceRef ref="sysid1"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id595"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id589"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id423" disabled="False" group="" position="8" action="Translate" comment="Created during import of line 142">
<OSrc neg="False">
<ObjectRef ref="id45"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="sysid0"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="sysid1"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="id44"/>
</TSrc>
<TDst neg="False">
<ObjectRef ref="sysid0"/>
</TDst>
<TSrv neg="False">
<ServiceRef ref="sysid1"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id595"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id592"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id441" disabled="False" group="" position="9" action="Translate" comment="Created during import of line 145">
<OSrc neg="False">
<ObjectRef ref="sysid0"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="id46"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="sysid1"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="sysid0"/>
</TSrc>
<TDst neg="False">
<ObjectRef ref="id14"/> <ObjectRef ref="id14"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="sysid0"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="sysid1"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="id15"/>
</TSrc>
<TDst neg="False">
<ObjectRef ref="sysid0"/>
</TDst> </TDst>
<TSrv neg="False"> <TSrv neg="False">
<ServiceRef ref="sysid1"/> <ServiceRef ref="sysid1"/>
</TSrv> </TSrv>
<ItfInb neg="False"> <ItfInb neg="False">
<ObjectRef ref="id592"/> <ObjectRef ref="id636"/>
</ItfInb> </ItfInb>
<ItfOutb neg="False"> <ItfOutb neg="False">
<ObjectRef ref="id595"/> <ObjectRef ref="id630"/>
</ItfOutb> </ItfOutb>
<NATRuleOptions/> <NATRuleOptions/>
</NATRule> </NATRule>
<NATRule id="id459" disabled="False" group="" position="10" action="Translate" comment="Created during import of line 146"> <NATRule id="id318" disabled="False" group="" position="2" action="Translate" comment="Created during import of line 146">
<OSrc neg="False">
<ObjectRef ref="id14"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="sysid0"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="sysid1"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="id53"/>
</TSrc>
<TDst neg="False">
<ObjectRef ref="sysid0"/>
</TDst>
<TSrv neg="False">
<ServiceRef ref="sysid1"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id636"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id630"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id336" disabled="False" group="" position="3" action="Translate" comment="Created during import of line 146">
<OSrc neg="False">
<ObjectRef ref="id14"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="sysid0"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="sysid1"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="id46"/>
</TSrc>
<TDst neg="False">
<ObjectRef ref="sysid0"/>
</TDst>
<TSrv neg="False">
<ServiceRef ref="sysid1"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id636"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id630"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id354" disabled="False" group="" position="4" action="Translate" comment="Created during import of line 146">
<OSrc neg="False">
<ObjectRef ref="id14"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="sysid0"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="sysid1"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="id47"/>
</TSrc>
<TDst neg="False">
<ObjectRef ref="sysid0"/>
</TDst>
<TSrv neg="False">
<ServiceRef ref="sysid1"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id636"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id633"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id372" disabled="False" group="" position="5" action="Translate" comment="Created during import of line 147">
<OSrc neg="False">
<ObjectRef ref="id48"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="sysid0"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="sysid1"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="id15"/>
</TSrc>
<TDst neg="False">
<ObjectRef ref="sysid0"/>
</TDst>
<TSrv neg="False">
<ServiceRef ref="sysid1"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id636"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id630"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id390" disabled="False" group="" position="6" action="Translate" comment="Created during import of line 147">
<OSrc neg="False">
<ObjectRef ref="id48"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="sysid0"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="sysid1"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="id53"/>
</TSrc>
<TDst neg="False">
<ObjectRef ref="sysid0"/>
</TDst>
<TSrv neg="False">
<ServiceRef ref="sysid1"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id636"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id630"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id408" disabled="False" group="" position="7" action="Translate" comment="Created during import of line 147">
<OSrc neg="False">
<ObjectRef ref="id48"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="sysid0"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="sysid1"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="id46"/>
</TSrc>
<TDst neg="False">
<ObjectRef ref="sysid0"/>
</TDst>
<TSrv neg="False">
<ServiceRef ref="sysid1"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id636"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id630"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id426" disabled="False" group="" position="8" action="Translate" comment="Created during import of line 147">
<OSrc neg="False">
<ObjectRef ref="id48"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="sysid0"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="sysid1"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="id47"/>
</TSrc>
<TDst neg="False">
<ObjectRef ref="sysid0"/>
</TDst>
<TSrv neg="False">
<ServiceRef ref="sysid1"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id636"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id633"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id444" disabled="False" group="" position="9" action="Translate" comment="Created during import of line 149">
<OSrc neg="False">
<ObjectRef ref="id44"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="id12"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="id61"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="id630"/>
</TSrc>
<TDst neg="False">
<ObjectRef ref="sysid0"/>
</TDst>
<TSrv neg="False">
<ServiceRef ref="sysid1"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id636"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id630"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id462" disabled="False" group="" position="10" action="Translate" comment="Created during import of line 151">
<OSrc neg="False"> <OSrc neg="False">
<ObjectRef ref="sysid0"/> <ObjectRef ref="sysid0"/>
</OSrc> </OSrc>
<ODst neg="False"> <ODst neg="False">
<ObjectRef ref="id15"/> <ObjectRef ref="id49"/>
</ODst> </ODst>
<OSrv neg="False"> <OSrv neg="False">
<ServiceRef ref="sysid1"/> <ServiceRef ref="sysid1"/>
@@ -803,76 +806,49 @@
<ServiceRef ref="sysid1"/> <ServiceRef ref="sysid1"/>
</TSrv> </TSrv>
<ItfInb neg="False"> <ItfInb neg="False">
<ObjectRef ref="id592"/> <ObjectRef ref="id633"/>
</ItfInb> </ItfInb>
<ItfOutb neg="False"> <ItfOutb neg="False">
<ObjectRef ref="id595"/> <ObjectRef ref="id636"/>
</ItfOutb> </ItfOutb>
<NATRuleOptions/> <NATRuleOptions/>
</NATRule> </NATRule>
<NATRule id="id477" disabled="False" group="" position="11" action="Translate" comment="Created during import of line 147"> <NATRule id="id480" disabled="False" group="" position="11" action="Translate" comment="Created during import of line 152">
<OSrc neg="False"> <OSrc neg="False">
<ObjectRef ref="sysid0"/> <ObjectRef ref="sysid0"/>
</OSrc> </OSrc>
<ODst neg="False"> <ODst neg="False">
<ObjectRef ref="id592"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="sysid1"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="sysid0"/>
</TSrc>
<TDst neg="False">
<ObjectRef ref="id17"/> <ObjectRef ref="id17"/>
</TDst>
<TSrv neg="False">
<ServiceRef ref="sysid1"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id592"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id595"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id495" disabled="False" group="" position="12" action="Translate" comment="Created during import of line 148">
<OSrc neg="False">
<ObjectRef ref="sysid0"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="id47"/>
</ODst> </ODst>
<OSrv neg="False"> <OSrv neg="False">
<ServiceRef ref="id58"/> <ServiceRef ref="sysid1"/>
</OSrv> </OSrv>
<TSrc neg="False"> <TSrc neg="False">
<ObjectRef ref="sysid0"/> <ObjectRef ref="sysid0"/>
</TSrc> </TSrc>
<TDst neg="False"> <TDst neg="False">
<ObjectRef ref="id14"/> <ObjectRef ref="id18"/>
</TDst> </TDst>
<TSrv neg="False"> <TSrv neg="False">
<ServiceRef ref="id59"/> <ServiceRef ref="sysid1"/>
</TSrv> </TSrv>
<ItfInb neg="False"> <ItfInb neg="False">
<ObjectRef ref="id589"/> <ObjectRef ref="id633"/>
</ItfInb> </ItfInb>
<ItfOutb neg="False"> <ItfOutb neg="False">
<ObjectRef ref="id595"/> <ObjectRef ref="id636"/>
</ItfOutb> </ItfOutb>
<NATRuleOptions/> <NATRuleOptions/>
</NATRule> </NATRule>
<NATRule id="id513" disabled="False" group="" position="13" action="Translate" comment="Created during import of line 149"> <NATRule id="id498" disabled="False" group="" position="12" action="Translate" comment="Created during import of line 153">
<OSrc neg="False"> <OSrc neg="False">
<ObjectRef ref="sysid0"/> <ObjectRef ref="sysid0"/>
</OSrc> </OSrc>
<ODst neg="False"> <ODst neg="False">
<ObjectRef ref="id18"/> <ObjectRef ref="id633"/>
</ODst> </ODst>
<OSrv neg="False"> <OSrv neg="False">
<ServiceRef ref="id58"/> <ServiceRef ref="sysid1"/>
</OSrv> </OSrv>
<TSrc neg="False"> <TSrc neg="False">
<ObjectRef ref="sysid0"/> <ObjectRef ref="sysid0"/>
@@ -881,79 +857,135 @@
<ObjectRef ref="id19"/> <ObjectRef ref="id19"/>
</TDst> </TDst>
<TSrv neg="False"> <TSrv neg="False">
<ServiceRef ref="id59"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id589"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id595"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id531" disabled="False" group="" position="14" action="Translate" comment="Created during import of line 151">
<OSrc neg="False">
<ObjectRef ref="sysid0"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="id589"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="id58"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="sysid0"/>
</TSrc>
<TDst neg="False">
<ObjectRef ref="id11"/>
</TDst>
<TSrv neg="False">
<ServiceRef ref="id60"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id589"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id595"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id549" disabled="False" group="" position="15" action="Translate" comment="Created during import of line 152">
<OSrc neg="False">
<ObjectRef ref="sysid0"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="id589"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="id58"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="sysid0"/>
</TSrc>
<TDst neg="False">
<ObjectRef ref="id11"/>
</TDst>
<TSrv neg="False">
<ServiceRef ref="id60"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id589"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id595"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id567" disabled="False" group="" position="16" action="Translate" comment="Created during import of line 153">
<OSrc neg="False">
<ObjectRef ref="sysid0"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="id589"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="sysid1"/> <ServiceRef ref="sysid1"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id633"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id636"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id516" disabled="False" group="" position="13" action="Translate" comment="Created during import of line 154">
<OSrc neg="False">
<ObjectRef ref="sysid0"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="id50"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="id61"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="sysid0"/>
</TSrc>
<TDst neg="False">
<ObjectRef ref="id16"/>
</TDst>
<TSrv neg="False">
<ServiceRef ref="id62"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id630"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id636"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id534" disabled="False" group="" position="14" action="Translate" comment="Created during import of line 155">
<OSrc neg="False">
<ObjectRef ref="sysid0"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="id20"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="id61"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="sysid0"/>
</TSrc>
<TDst neg="False">
<ObjectRef ref="id21"/>
</TDst>
<TSrv neg="False">
<ServiceRef ref="id62"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id630"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id636"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id552" disabled="False" group="" position="15" action="Translate" comment="Created during import of line 157">
<OSrc neg="False">
<ObjectRef ref="sysid0"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="id630"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="id60"/>
<ServiceRef ref="id61"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="sysid0"/>
</TSrc>
<TDst neg="False">
<ObjectRef ref="id11"/>
</TDst>
<TSrv neg="False">
<ServiceRef ref="id63"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id630"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id636"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id571" disabled="False" group="" position="16" action="Translate" comment="Created during import of line 158">
<OSrc neg="False">
<ObjectRef ref="sysid0"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="id630"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="id60"/>
<ServiceRef ref="id61"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="sysid0"/>
</TSrc>
<TDst neg="False">
<ObjectRef ref="id11"/>
</TDst>
<TSrv neg="False">
<ServiceRef ref="id63"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id630"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id636"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id590" disabled="False" group="" position="17" action="Translate" comment="Created during import of line 159">
<OSrc neg="False">
<ObjectRef ref="sysid0"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="id630"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="id60"/>
</OSrv> </OSrv>
<TSrc neg="False"> <TSrc neg="False">
<ObjectRef ref="sysid0"/> <ObjectRef ref="sysid0"/>
@@ -965,28 +997,55 @@
<ServiceRef ref="sysid1"/> <ServiceRef ref="sysid1"/>
</TSrv> </TSrv>
<ItfInb neg="False"> <ItfInb neg="False">
<ObjectRef ref="id589"/> <ObjectRef ref="id630"/>
</ItfInb> </ItfInb>
<ItfOutb neg="False"> <ItfOutb neg="False">
<ObjectRef ref="id595"/> <ObjectRef ref="id636"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id608" disabled="False" group="" position="18" action="Translate" comment="Created during import of line 161">
<OSrc neg="False">
<ObjectRef ref="id12"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="id22"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="id58"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="sysid0"/>
</TSrc>
<TDst neg="False">
<ObjectRef ref="id13"/>
</TDst>
<TSrv neg="False">
<ServiceRef ref="sysid1"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id630"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id636"/>
</ItfOutb> </ItfOutb>
<NATRuleOptions/> <NATRuleOptions/>
</NATRule> </NATRule>
<RuleSetOptions/> <RuleSetOptions/>
</NAT> </NAT>
<Policy id="id70" name="Policy" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="True"> <Policy id="id73" name="Policy" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="True">
<PolicyRule id="id72" disabled="False" group="" log="False" position="0" action="Accept" direction="Inbound" comment="Imported from ssh_commands_outside&#10;Created during import of line 202"> <PolicyRule id="id75" disabled="False" group="" log="False" position="0" action="Accept" direction="Inbound" comment="Imported from ssh_commands_outside&#10;Created during import of line 209">
<Src neg="False"> <Src neg="False">
<ObjectRef ref="id20"/> <ObjectRef ref="id23"/>
</Src> </Src>
<Dst neg="False"> <Dst neg="False">
<ObjectRef ref="id68"/> <ObjectRef ref="id71"/>
</Dst> </Dst>
<Srv neg="False"> <Srv neg="False">
<ServiceRef ref="id61"/> <ServiceRef ref="id64"/>
</Srv> </Srv>
<Itf neg="False"> <Itf neg="False">
<ObjectRef ref="id589"/> <ObjectRef ref="id630"/>
</Itf> </Itf>
<When neg="False"> <When neg="False">
<IntervalRef ref="sysid2"/> <IntervalRef ref="sysid2"/>
@@ -995,18 +1054,18 @@
<Option name="stateless">False</Option> <Option name="stateless">False</Option>
</PolicyRuleOptions> </PolicyRuleOptions>
</PolicyRule> </PolicyRule>
<PolicyRule id="id84" disabled="False" group="" log="False" position="1" action="Accept" direction="Inbound" comment="Imported from ssh_commands_inside&#10;Created during import of line 200"> <PolicyRule id="id87" disabled="False" group="" log="False" position="1" action="Accept" direction="Inbound" comment="Imported from ssh_commands_inside&#10;Created during import of line 207">
<Src neg="False"> <Src neg="False">
<ObjectRef ref="id41"/> <ObjectRef ref="id44"/>
</Src> </Src>
<Dst neg="False"> <Dst neg="False">
<ObjectRef ref="id68"/> <ObjectRef ref="id71"/>
</Dst> </Dst>
<Srv neg="False"> <Srv neg="False">
<ServiceRef ref="id61"/> <ServiceRef ref="id64"/>
</Srv> </Srv>
<Itf neg="False"> <Itf neg="False">
<ObjectRef ref="id595"/> <ObjectRef ref="id636"/>
</Itf> </Itf>
<When neg="False"> <When neg="False">
<IntervalRef ref="sysid2"/> <IntervalRef ref="sysid2"/>
@@ -1015,18 +1074,18 @@
<Option name="stateless">False</Option> <Option name="stateless">False</Option>
</PolicyRuleOptions> </PolicyRuleOptions>
</PolicyRule> </PolicyRule>
<PolicyRule id="id96" disabled="False" group="" log="False" position="2" action="Accept" direction="Inbound" comment="Imported from ssh_commands_inside&#10;Created during import of line 201"> <PolicyRule id="id99" disabled="False" group="" log="False" position="2" action="Accept" direction="Inbound" comment="Imported from ssh_commands_inside&#10;Created during import of line 208">
<Src neg="False"> <Src neg="False">
<ObjectRef ref="id48"/> <ObjectRef ref="id51"/>
</Src> </Src>
<Dst neg="False"> <Dst neg="False">
<ObjectRef ref="id68"/> <ObjectRef ref="id71"/>
</Dst> </Dst>
<Srv neg="False"> <Srv neg="False">
<ServiceRef ref="id61"/> <ServiceRef ref="id64"/>
</Srv> </Srv>
<Itf neg="False"> <Itf neg="False">
<ObjectRef ref="id595"/> <ObjectRef ref="id636"/>
</Itf> </Itf>
<When neg="False"> <When neg="False">
<IntervalRef ref="sysid2"/> <IntervalRef ref="sysid2"/>
@@ -1035,28 +1094,7 @@
<Option name="stateless">False</Option> <Option name="stateless">False</Option>
</PolicyRuleOptions> </PolicyRuleOptions>
</PolicyRule> </PolicyRule>
<PolicyRule id="id108" disabled="False" group="" log="True" position="3" action="Deny" direction="Inbound" comment="Imported from inside_in&#10;Created during import of line 98"> <PolicyRule id="id111" disabled="False" group="" log="True" position="3" action="Deny" direction="Inbound" comment="Imported from inside_in&#10;Created during import of line 98">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
<Dst neg="False">
<ObjectRef ref="id24"/>
</Dst>
<Srv neg="False">
<ServiceRef ref="id55"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id595"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="log_level">warning</Option>
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id120" disabled="False" group="" log="True" position="4" action="Deny" direction="Inbound" comment="Imported from inside_in&#10;Created during import of line 99">
<Src neg="False"> <Src neg="False">
<ObjectRef ref="sysid0"/> <ObjectRef ref="sysid0"/>
</Src> </Src>
@@ -1064,10 +1102,10 @@
<ObjectRef ref="id27"/> <ObjectRef ref="id27"/>
</Dst> </Dst>
<Srv neg="False"> <Srv neg="False">
<ServiceRef ref="id55"/> <ServiceRef ref="id58"/>
</Srv> </Srv>
<Itf neg="False"> <Itf neg="False">
<ObjectRef ref="id595"/> <ObjectRef ref="id636"/>
</Itf> </Itf>
<When neg="False"> <When neg="False">
<IntervalRef ref="sysid2"/> <IntervalRef ref="sysid2"/>
@@ -1077,18 +1115,18 @@
<Option name="stateless">True</Option> <Option name="stateless">True</Option>
</PolicyRuleOptions> </PolicyRuleOptions>
</PolicyRule> </PolicyRule>
<PolicyRule id="id132" disabled="False" group="" log="True" position="5" action="Deny" direction="Inbound" comment="Imported from inside_in&#10;Created during import of line 100"> <PolicyRule id="id123" disabled="False" group="" log="True" position="4" action="Deny" direction="Inbound" comment="Imported from inside_in&#10;Created during import of line 99">
<Src neg="False"> <Src neg="False">
<ObjectRef ref="sysid0"/> <ObjectRef ref="sysid0"/>
</Src> </Src>
<Dst neg="False"> <Dst neg="False">
<ObjectRef ref="id32"/> <ObjectRef ref="id30"/>
</Dst> </Dst>
<Srv neg="False"> <Srv neg="False">
<ServiceRef ref="id55"/> <ServiceRef ref="id58"/>
</Srv> </Srv>
<Itf neg="False"> <Itf neg="False">
<ObjectRef ref="id595"/> <ObjectRef ref="id636"/>
</Itf> </Itf>
<When neg="False"> <When neg="False">
<IntervalRef ref="sysid2"/> <IntervalRef ref="sysid2"/>
@@ -1098,18 +1136,39 @@
<Option name="stateless">True</Option> <Option name="stateless">True</Option>
</PolicyRuleOptions> </PolicyRuleOptions>
</PolicyRule> </PolicyRule>
<PolicyRule id="id144" disabled="False" group="" log="False" position="6" action="Accept" direction="Inbound" comment="Imported from inside_in&#10;Created during import of line 101"> <PolicyRule id="id135" disabled="False" group="" log="True" position="5" action="Deny" direction="Inbound" comment="Imported from inside_in&#10;Created during import of line 100">
<Src neg="False"> <Src neg="False">
<ObjectRef ref="id41"/> <ObjectRef ref="sysid0"/>
</Src>
<Dst neg="False">
<ObjectRef ref="id35"/>
</Dst>
<Srv neg="False">
<ServiceRef ref="id58"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id636"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="log_level">warning</Option>
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id147" disabled="False" group="" log="False" position="6" action="Accept" direction="Inbound" comment="Imported from inside_in&#10;Created during import of line 101">
<Src neg="False">
<ObjectRef ref="id44"/>
</Src> </Src>
<Dst neg="False"> <Dst neg="False">
<ObjectRef ref="sysid0"/> <ObjectRef ref="sysid0"/>
</Dst> </Dst>
<Srv neg="False"> <Srv neg="False">
<ServiceRef ref="id55"/> <ServiceRef ref="id58"/>
</Srv> </Srv>
<Itf neg="False"> <Itf neg="False">
<ObjectRef ref="id595"/> <ObjectRef ref="id636"/>
</Itf> </Itf>
<When neg="False"> <When neg="False">
<IntervalRef ref="sysid2"/> <IntervalRef ref="sysid2"/>
@@ -1118,7 +1177,7 @@
<Option name="stateless">False</Option> <Option name="stateless">False</Option>
</PolicyRuleOptions> </PolicyRuleOptions>
</PolicyRule> </PolicyRule>
<PolicyRule id="id156" disabled="False" group="" log="True" position="7" action="Deny" direction="Inbound" comment="Imported from inside_in&#10;Created during import of line 102"> <PolicyRule id="id159" disabled="False" group="" log="True" position="7" action="Deny" direction="Inbound" comment="Imported from inside_in&#10;Created during import of line 102">
<Src neg="False"> <Src neg="False">
<ObjectRef ref="sysid0"/> <ObjectRef ref="sysid0"/>
</Src> </Src>
@@ -1126,10 +1185,10 @@
<ObjectRef ref="sysid0"/> <ObjectRef ref="sysid0"/>
</Dst> </Dst>
<Srv neg="False"> <Srv neg="False">
<ServiceRef ref="id55"/> <ServiceRef ref="id58"/>
</Srv> </Srv>
<Itf neg="False"> <Itf neg="False">
<ObjectRef ref="id595"/> <ObjectRef ref="id636"/>
</Itf> </Itf>
<When neg="False"> <When neg="False">
<IntervalRef ref="sysid2"/> <IntervalRef ref="sysid2"/>
@@ -1139,39 +1198,18 @@
<Option name="stateless">True</Option> <Option name="stateless">True</Option>
</PolicyRuleOptions> </PolicyRuleOptions>
</PolicyRule> </PolicyRule>
<PolicyRule id="id168" disabled="False" group="" log="True" position="8" action="Accept" direction="Outbound" comment="Imported from inside_out&#10;Created during import of line 93"> <PolicyRule id="id171" disabled="False" group="" log="True" position="8" action="Accept" direction="Outbound" comment="Imported from inside_out&#10;Created during import of line 93">
<Src neg="False">
<ObjectRef ref="id24"/>
</Src>
<Dst neg="False">
<ObjectRef ref="id41"/>
</Dst>
<Srv neg="False">
<ServiceRef ref="id63"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id595"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="log_level">warning</Option>
<Option name="stateless">False</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id180" disabled="False" group="" log="True" position="9" action="Accept" direction="Outbound" comment="Imported from inside_out&#10;Created during import of line 94">
<Src neg="False"> <Src neg="False">
<ObjectRef ref="id27"/> <ObjectRef ref="id27"/>
</Src> </Src>
<Dst neg="False"> <Dst neg="False">
<ObjectRef ref="id41"/> <ObjectRef ref="id44"/>
</Dst> </Dst>
<Srv neg="False"> <Srv neg="False">
<ServiceRef ref="id63"/> <ServiceRef ref="id66"/>
</Srv> </Srv>
<Itf neg="False"> <Itf neg="False">
<ObjectRef ref="id595"/> <ObjectRef ref="id636"/>
</Itf> </Itf>
<When neg="False"> <When neg="False">
<IntervalRef ref="sysid2"/> <IntervalRef ref="sysid2"/>
@@ -1181,18 +1219,18 @@
<Option name="stateless">False</Option> <Option name="stateless">False</Option>
</PolicyRuleOptions> </PolicyRuleOptions>
</PolicyRule> </PolicyRule>
<PolicyRule id="id192" disabled="False" group="" log="True" position="10" action="Accept" direction="Outbound" comment="Imported from inside_out&#10;Created during import of line 95"> <PolicyRule id="id183" disabled="False" group="" log="True" position="9" action="Accept" direction="Outbound" comment="Imported from inside_out&#10;Created during import of line 94">
<Src neg="False"> <Src neg="False">
<ObjectRef ref="id32"/> <ObjectRef ref="id30"/>
</Src> </Src>
<Dst neg="False"> <Dst neg="False">
<ObjectRef ref="id41"/> <ObjectRef ref="id44"/>
</Dst> </Dst>
<Srv neg="False"> <Srv neg="False">
<ServiceRef ref="id63"/> <ServiceRef ref="id66"/>
</Srv> </Srv>
<Itf neg="False"> <Itf neg="False">
<ObjectRef ref="id595"/> <ObjectRef ref="id636"/>
</Itf> </Itf>
<When neg="False"> <When neg="False">
<IntervalRef ref="sysid2"/> <IntervalRef ref="sysid2"/>
@@ -1202,18 +1240,39 @@
<Option name="stateless">False</Option> <Option name="stateless">False</Option>
</PolicyRuleOptions> </PolicyRuleOptions>
</PolicyRule> </PolicyRule>
<PolicyRule id="id204" disabled="False" group="" log="False" position="11" action="Accept" direction="Outbound" comment="Imported from inside_out&#10;Created during import of line 96"> <PolicyRule id="id195" disabled="False" group="" log="True" position="10" action="Accept" direction="Outbound" comment="Imported from inside_out&#10;Created during import of line 95">
<Src neg="False"> <Src neg="False">
<ObjectRef ref="id41"/> <ObjectRef ref="id35"/>
</Src>
<Dst neg="False">
<ObjectRef ref="id44"/>
</Dst>
<Srv neg="False">
<ServiceRef ref="id66"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id636"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="log_level">warning</Option>
<Option name="stateless">False</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id207" disabled="False" group="" log="False" position="11" action="Accept" direction="Outbound" comment="Imported from inside_out&#10;Created during import of line 96">
<Src neg="False">
<ObjectRef ref="id44"/>
</Src> </Src>
<Dst neg="False"> <Dst neg="False">
<ObjectRef ref="sysid0"/> <ObjectRef ref="sysid0"/>
</Dst> </Dst>
<Srv neg="False"> <Srv neg="False">
<ServiceRef ref="id55"/> <ServiceRef ref="id58"/>
</Srv> </Srv>
<Itf neg="False"> <Itf neg="False">
<ObjectRef ref="id595"/> <ObjectRef ref="id636"/>
</Itf> </Itf>
<When neg="False"> <When neg="False">
<IntervalRef ref="sysid2"/> <IntervalRef ref="sysid2"/>
@@ -1222,7 +1281,7 @@
<Option name="stateless">False</Option> <Option name="stateless">False</Option>
</PolicyRuleOptions> </PolicyRuleOptions>
</PolicyRule> </PolicyRule>
<PolicyRule id="id216" disabled="False" group="" log="True" position="12" action="Deny" direction="Outbound" comment="Imported from inside_out&#10;Created during import of line 97"> <PolicyRule id="id219" disabled="False" group="" log="True" position="12" action="Deny" direction="Outbound" comment="Imported from inside_out&#10;Created during import of line 97">
<Src neg="False"> <Src neg="False">
<ObjectRef ref="sysid0"/> <ObjectRef ref="sysid0"/>
</Src> </Src>
@@ -1230,10 +1289,10 @@
<ObjectRef ref="sysid0"/> <ObjectRef ref="sysid0"/>
</Dst> </Dst>
<Srv neg="False"> <Srv neg="False">
<ServiceRef ref="id55"/> <ServiceRef ref="id58"/>
</Srv> </Srv>
<Itf neg="False"> <Itf neg="False">
<ObjectRef ref="id595"/> <ObjectRef ref="id636"/>
</Itf> </Itf>
<When neg="False"> <When neg="False">
<IntervalRef ref="sysid2"/> <IntervalRef ref="sysid2"/>
@@ -1243,28 +1302,7 @@
<Option name="stateless">True</Option> <Option name="stateless">True</Option>
</PolicyRuleOptions> </PolicyRuleOptions>
</PolicyRule> </PolicyRule>
<PolicyRule id="id228" disabled="False" group="" log="True" position="13" action="Deny" direction="Inbound" comment="Imported from outside_in&#10;Created during import of line 89"> <PolicyRule id="id231" disabled="False" group="" log="True" position="13" action="Deny" direction="Inbound" comment="Imported from outside_in&#10;Created during import of line 89">
<Src neg="False">
<ObjectRef ref="id24"/>
</Src>
<Dst neg="False">
<ObjectRef ref="sysid0"/>
</Dst>
<Srv neg="False">
<ServiceRef ref="id55"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id589"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="log_level">warning</Option>
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id240" disabled="False" group="" log="True" position="14" action="Deny" direction="Inbound" comment="Imported from outside_in&#10;Created during import of line 90">
<Src neg="False"> <Src neg="False">
<ObjectRef ref="id27"/> <ObjectRef ref="id27"/>
</Src> </Src>
@@ -1272,10 +1310,10 @@
<ObjectRef ref="sysid0"/> <ObjectRef ref="sysid0"/>
</Dst> </Dst>
<Srv neg="False"> <Srv neg="False">
<ServiceRef ref="id55"/> <ServiceRef ref="id58"/>
</Srv> </Srv>
<Itf neg="False"> <Itf neg="False">
<ObjectRef ref="id589"/> <ObjectRef ref="id630"/>
</Itf> </Itf>
<When neg="False"> <When neg="False">
<IntervalRef ref="sysid2"/> <IntervalRef ref="sysid2"/>
@@ -1285,18 +1323,18 @@
<Option name="stateless">True</Option> <Option name="stateless">True</Option>
</PolicyRuleOptions> </PolicyRuleOptions>
</PolicyRule> </PolicyRule>
<PolicyRule id="id252" disabled="False" group="" log="True" position="15" action="Deny" direction="Inbound" comment="Imported from outside_in&#10;Created during import of line 91"> <PolicyRule id="id243" disabled="False" group="" log="True" position="14" action="Deny" direction="Inbound" comment="Imported from outside_in&#10;Created during import of line 90">
<Src neg="False"> <Src neg="False">
<ObjectRef ref="id32"/> <ObjectRef ref="id30"/>
</Src> </Src>
<Dst neg="False"> <Dst neg="False">
<ObjectRef ref="sysid0"/> <ObjectRef ref="sysid0"/>
</Dst> </Dst>
<Srv neg="False"> <Srv neg="False">
<ServiceRef ref="id55"/> <ServiceRef ref="id58"/>
</Srv> </Srv>
<Itf neg="False"> <Itf neg="False">
<ObjectRef ref="id589"/> <ObjectRef ref="id630"/>
</Itf> </Itf>
<When neg="False"> <When neg="False">
<IntervalRef ref="sysid2"/> <IntervalRef ref="sysid2"/>
@@ -1306,18 +1344,39 @@
<Option name="stateless">True</Option> <Option name="stateless">True</Option>
</PolicyRuleOptions> </PolicyRuleOptions>
</PolicyRule> </PolicyRule>
<PolicyRule id="id264" disabled="False" group="" log="True" position="16" action="Deny" direction="Inbound" comment="Imported from outside_in&#10;Created during import of line 92"> <PolicyRule id="id255" disabled="False" group="" log="True" position="15" action="Deny" direction="Inbound" comment="Imported from outside_in&#10;Created during import of line 91">
<Src neg="False"> <Src neg="False">
<ObjectRef ref="id41"/> <ObjectRef ref="id35"/>
</Src> </Src>
<Dst neg="False"> <Dst neg="False">
<ObjectRef ref="sysid0"/> <ObjectRef ref="sysid0"/>
</Dst> </Dst>
<Srv neg="False"> <Srv neg="False">
<ServiceRef ref="id55"/> <ServiceRef ref="id58"/>
</Srv> </Srv>
<Itf neg="False"> <Itf neg="False">
<ObjectRef ref="id589"/> <ObjectRef ref="id630"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="log_level">warning</Option>
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id267" disabled="False" group="" log="True" position="16" action="Deny" direction="Inbound" comment="Imported from outside_in&#10;Created during import of line 92">
<Src neg="False">
<ObjectRef ref="id44"/>
</Src>
<Dst neg="False">
<ObjectRef ref="sysid0"/>
</Dst>
<Srv neg="False">
<ServiceRef ref="id58"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id630"/>
</Itf> </Itf>
<When neg="False"> <When neg="False">
<IntervalRef ref="sysid2"/> <IntervalRef ref="sysid2"/>
@@ -1329,28 +1388,28 @@
</PolicyRule> </PolicyRule>
<RuleSetOptions/> <RuleSetOptions/>
</Policy> </Policy>
<Routing id="id585" name="Routing" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="True"> <Routing id="id626" name="Routing" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="True">
<RuleSetOptions/> <RuleSetOptions/>
</Routing> </Routing>
<Interface id="id587" dedicated_failover="False" dyn="False" security_level="0" unnum="True" unprotected="False" name="Ethernet0" comment="Created during import of line 16" ro="False"> <Interface id="id628" dedicated_failover="False" dyn="False" security_level="0" unnum="True" unprotected="False" name="Ethernet0" comment="Created during import of line 16" ro="False">
<InterfaceOptions/> <InterfaceOptions/>
<Interface id="id589" dedicated_failover="False" dyn="False" label="outside" security_level="0" unnum="False" unprotected="False" name="Ethernet0.101" comment="Created during import of line 21" ro="False"> <Interface id="id630" dedicated_failover="False" dyn="False" label="outside" security_level="0" unnum="False" unprotected="False" name="Ethernet0.101" comment="Created during import of line 21" ro="False">
<IPv4 id="id591" name="pix1:Ethernet0.101:ip" comment="Created during import of line 24" ro="False" address="192.0.2.253" netmask="255.255.255.0"/> <IPv4 id="id632" name="pix1:Ethernet0.101:ip" comment="Created during import of line 24" ro="False" address="192.0.2.253" netmask="255.255.255.0"/>
<InterfaceOptions> <InterfaceOptions>
<Option name="type">8021q</Option> <Option name="type">8021q</Option>
<Option name="vlan_id">101</Option> <Option name="vlan_id">101</Option>
</InterfaceOptions> </InterfaceOptions>
</Interface> </Interface>
<Interface id="id592" dedicated_failover="False" dyn="False" label="dmz20" security_level="20" unnum="False" unprotected="False" name="Ethernet0.102" comment="Created during import of line 27" ro="False"> <Interface id="id633" dedicated_failover="False" dyn="False" label="dmz20" security_level="20" unnum="False" unprotected="False" name="Ethernet0.102" comment="Created during import of line 27" ro="False">
<IPv4 id="id594" name="pix1:Ethernet0.102:ip" comment="Created during import of line 30" ro="False" address="10.0.0.253" netmask="255.255.255.0"/> <IPv4 id="id635" name="pix1:Ethernet0.102:ip" comment="Created during import of line 30" ro="False" address="10.0.0.253" netmask="255.255.255.0"/>
<InterfaceOptions> <InterfaceOptions>
<Option name="type">8021q</Option> <Option name="type">8021q</Option>
<Option name="vlan_id">102</Option> <Option name="vlan_id">102</Option>
</InterfaceOptions> </InterfaceOptions>
</Interface> </Interface>
</Interface> </Interface>
<Interface id="id595" dedicated_failover="False" dyn="False" label="inside" security_level="100" unnum="False" unprotected="False" name="Ethernet1" comment="Created during import of line 33" ro="False"> <Interface id="id636" dedicated_failover="False" dyn="False" label="inside" security_level="100" unnum="False" unprotected="False" name="Ethernet1" comment="Created during import of line 33" ro="False">
<IPv4 id="id596" name="pix1:Ethernet1:ip" comment="Created during import of line 37" ro="False" address="10.1.1.206" netmask="255.255.255.0"/> <IPv4 id="id637" name="pix1:Ethernet1:ip" comment="Created during import of line 37" ro="False" address="10.1.1.206" netmask="255.255.255.0"/>
<InterfaceOptions/> <InterfaceOptions/>
</Interface> </Interface>
<FirewallOptions> <FirewallOptions>
@@ -1371,7 +1430,7 @@
</FirewallOptions> </FirewallOptions>
</Firewall> </Firewall>
</ObjectGroup> </ObjectGroup>
<ObjectGroup id="id598" name="Clusters" comment="" ro="False"/> <ObjectGroup id="id639" name="Clusters" comment="" ro="False"/>
<IntervalGroup id="id599" name="Time" comment="" ro="False"/> <IntervalGroup id="id640" name="Time" comment="" ro="False"/>
</Library> </Library>
</FWObjectDatabase> </FWObjectDatabase>
src/unit_tests/PIXImporterTest/test_data/pix7-nat.output
+26 -22
View File
@@ -49,28 +49,32 @@ Warning: interface Ethernet6 was not imported because it is in "shutdown" mode
102: access list rule, action deny 102: access list rule, action deny
104: access list rule, action permit 104: access list rule, action permit
106: access list rule, action permit 106: access list rule, action permit
133: Global address pool: number 1, interface outside, address range interface-interface, netmask 255.255.255.255 109: access list rule, action permit
134: Source translation rule ("nat" command) 111: access list rule, action permit
136: Global address pool: number 2, interface outside, address range 192.0.2.10-192.0.2.10, netmask 255.255.255.255 138: Global address pool: number 1, interface outside, address range interface-interface, netmask 255.255.255.255
137: Global address pool: number 2, interface outside, address range 192.0.2.11-192.0.2.15, netmask 255.255.255.255 139: Source translation rule ("nat" command)
138: Global address pool: number 2, interface outside, address range 192.0.2.128-192.0.2.128, netmask 255.255.255.240 141: Global address pool: number 2, interface outside, address range 192.0.2.10-192.0.2.10, netmask 255.255.255.255
139: Global address pool: number 2, interface dmz20, address range 10.0.0.128-10.0.0.128, netmask 255.255.255.240 142: Global address pool: number 2, interface outside, address range 192.0.2.11-192.0.2.15, netmask 255.255.255.255
141: Source translation rule ("nat" command) 143: Global address pool: number 2, interface outside, address range 192.0.2.128-192.0.2.128, netmask 255.255.255.240
142: Source translation rule ("nat" command) 144: Global address pool: number 2, interface dmz20, address range 10.0.0.128-10.0.0.128, netmask 255.255.255.240
145: Destination translation rule ("static" command) 146: Source translation rule ("nat" command)
146: Destination translation rule ("static" command) 147: Source translation rule ("nat" command)
147: Destination translation rule ("static" command) 149: Source translation rule ("nat" command)
148: Destination translation rule ("static" command)
149: Destination translation rule ("static" command)
151: Destination translation rule ("static" command) 151: Destination translation rule ("static" command)
152: Destination translation rule ("static" command) 152: Destination translation rule ("static" command)
153: Destination translation rule ("static" command) 153: Destination translation rule ("static" command)
157: Interface Ethernet0.101 ruleset outside_in direction 'in' 154: Destination translation rule ("static" command)
158: Interface Ethernet1 ruleset inside_in direction 'in' 155: Destination translation rule ("static" command)
159: Interface Ethernet1 ruleset inside_out direction 'out' 157: Destination translation rule ("static" command)
200: Interface Ethernet1 ruleset ssh_commands_inside direction 'in' 158: Destination translation rule ("static" command)
200: access list rule, action permit 159: Destination translation rule ("static" command)
201: Interface Ethernet1 ruleset ssh_commands_inside direction 'in' 161: Destination translation rule ("static" command)
201: access list rule, action permit 164: Interface Ethernet0.101 ruleset outside_in direction 'in'
202: Interface Ethernet0.101 ruleset ssh_commands_outside direction 'in' 165: Interface Ethernet1 ruleset inside_in direction 'in'
202: access list rule, action permit 166: Interface Ethernet1 ruleset inside_out direction 'out'
207: Interface Ethernet1 ruleset ssh_commands_inside direction 'in'
207: access list rule, action permit
208: Interface Ethernet1 ruleset ssh_commands_inside direction 'in'
208: access list rule, action permit
209: Interface Ethernet0.101 ruleset ssh_commands_outside direction 'in'
209: access list rule, action permit
src/unit_tests/PIXImporterTest/test_data/pix7-nat.test
+7
View File
@@ -105,6 +105,11 @@ access-list id12251X6282.0 extended permit ip 10.1.1.0 255.255.255.0 any
access-list id12594X2458.0 permit tcp host 10.1.1.43 eq www any access-list id12594X2458.0 permit tcp host 10.1.1.43 eq www any
! example from cisco docs, see also nat command below
access-list WEB permit tcp 10.1.1.0 255.255.255.0 4.2.2.1 255.255.255.255 eq 80
access-list NET1 permit ip host 10.1.1.20 host 4.2.2.1
pager lines 24 pager lines 24
logging enable logging enable
logging emblem logging emblem
@@ -141,6 +146,7 @@ global (dmz20) 2 10.0.0.128 netmask 255.255.255.240
nat (inside) 2 10.1.1.1 255.255.255.255 nat (inside) 2 10.1.1.1 255.255.255.255
nat (inside) 2 10.1.1.32 255.255.255.240 nat (inside) 2 10.1.1.32 255.255.255.240
nat (inside) 1 access-list WEB
static (inside,dmz20) 10.0.0.16 10.1.1.16 netmask 255.255.255.240 static (inside,dmz20) 10.0.0.16 10.1.1.16 netmask 255.255.255.240
static (inside,dmz20) 10.0.0.100 10.1.1.100 netmask 255.255.255.255 static (inside,dmz20) 10.0.0.100 10.1.1.100 netmask 255.255.255.255
@@ -152,6 +158,7 @@ static (inside,outside) tcp interface www access-list id12594X2458.0 0 0
static (inside,outside) tcp interface 80 access-list id12594X2458.0 0 0 static (inside,outside) tcp interface 80 access-list id12594X2458.0 0 0
static (inside,outside) interface access-list id12594X2458.0 0 0 static (inside,outside) interface access-list id12594X2458.0 0 0
static (inside,outside) 192.0.2.15 access-list NET1
access-group outside_in in interface outside access-group outside_in in interface outside