From f684d791c682ef45a90058d0e8dab6e2a360891f Mon Sep 17 00:00:00 2001 From: Vadim Kurland Date: Thu, 13 Jan 2011 10:11:30 -0800 Subject: [PATCH] refs #1919 Fixed: do not put interface objects inside object-group for TSrc --- src/cisco_lib/ObjectGroupsSupport.cpp | 3 +++ test/pix/cluster1-1_pix1.fw.orig | 2 +- test/pix/cluster1-1_pix2.fw.orig | 2 +- test/pix/cluster1_pix1.fw.orig | 2 +- test/pix/cluster1_pix2.fw.orig | 2 +- test/pix/firewall.fw.orig | 2 +- test/pix/firewall1.fw.orig | 2 +- test/pix/firewall10.fw.orig | 2 +- test/pix/firewall11.fw.orig | 2 +- test/pix/firewall12.fw.orig | 2 +- test/pix/firewall13.fw.orig | 2 +- test/pix/firewall14.fw.orig | 2 +- test/pix/firewall2.fw.orig | 2 +- test/pix/firewall20.fw.orig | 2 +- test/pix/firewall21-1.fw.orig | 2 +- test/pix/firewall21.fw.orig | 2 +- test/pix/firewall22.fw.orig | 2 +- test/pix/firewall3.fw.orig | 2 +- test/pix/firewall33.fw.orig | 2 +- test/pix/firewall34.fw.orig | 2 +- test/pix/firewall4.fw.orig | 2 +- test/pix/firewall50.fw.orig | 2 +- test/pix/firewall6.fw.orig | 2 +- test/pix/firewall8.fw.orig | 2 +- test/pix/firewall80.fw.orig | 2 +- test/pix/firewall81.fw.orig | 3 ++- test/pix/firewall82.fw.orig | 3 ++- test/pix/firewall83.fw.orig | 2 +- test/pix/firewall9.fw.orig | 2 +- test/pix/firewall90.fw.orig | 15 +++++++-------- test/pix/firewall91.fw.orig | 3 ++- test/pix/firewall92.fw.orig | 3 ++- test/pix/fwsm1.fw.orig | 2 +- test/pix/fwsm2.fw.orig | 2 +- test/pix/pix515.fw.orig | 2 +- test/pix/real.fw.orig | 2 +- 36 files changed, 48 insertions(+), 42 deletions(-) diff --git a/src/cisco_lib/ObjectGroupsSupport.cpp b/src/cisco_lib/ObjectGroupsSupport.cpp index 13aee2476..21c6f1dcb 100644 --- a/src/cisco_lib/ObjectGroupsSupport.cpp +++ b/src/cisco_lib/ObjectGroupsSupport.cpp @@ -189,6 +189,9 @@ bool CreateObjectGroups::processNext() } re->clearChildren(false); //do not want to destroy children objects } + } else + { + re->clearChildren(false); //do not want to destroy children objects } re->addRef(obj_group); diff --git a/test/pix/cluster1-1_pix1.fw.orig b/test/pix/cluster1-1_pix1.fw.orig index 30df03268..16a81dbe4 100755 --- a/test/pix/cluster1-1_pix1.fw.orig +++ b/test/pix/cluster1-1_pix1.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3430 ! -! Generated Wed Jan 12 17:40:37 2011 PST by vadim +! Generated Thu Jan 13 10:09:34 2011 PST by vadim ! ! Compiled for pix 7.0 ! Outbound ACLs: supported diff --git a/test/pix/cluster1-1_pix2.fw.orig b/test/pix/cluster1-1_pix2.fw.orig index 09a7a9eec..7703dccb0 100755 --- a/test/pix/cluster1-1_pix2.fw.orig +++ b/test/pix/cluster1-1_pix2.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3430 ! -! Generated Wed Jan 12 17:40:38 2011 PST by vadim +! Generated Thu Jan 13 10:09:34 2011 PST by vadim ! ! Compiled for pix 7.0 ! Outbound ACLs: supported diff --git a/test/pix/cluster1_pix1.fw.orig b/test/pix/cluster1_pix1.fw.orig index 7bcb0cb37..fd67c4a70 100755 --- a/test/pix/cluster1_pix1.fw.orig +++ b/test/pix/cluster1_pix1.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3430 ! -! Generated Wed Jan 12 17:40:37 2011 PST by vadim +! Generated Thu Jan 13 10:09:33 2011 PST by vadim ! ! Compiled for pix 7.0 ! Outbound ACLs: supported diff --git a/test/pix/cluster1_pix2.fw.orig b/test/pix/cluster1_pix2.fw.orig index f1e293a15..944cea2fc 100755 --- a/test/pix/cluster1_pix2.fw.orig +++ b/test/pix/cluster1_pix2.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3430 ! -! Generated Wed Jan 12 17:40:37 2011 PST by vadim +! Generated Thu Jan 13 10:09:33 2011 PST by vadim ! ! Compiled for pix 7.0 ! Outbound ACLs: supported diff --git a/test/pix/firewall.fw.orig b/test/pix/firewall.fw.orig index 42c543169..a879ed49e 100755 --- a/test/pix/firewall.fw.orig +++ b/test/pix/firewall.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3430 ! -! Generated Wed Jan 12 17:40:04 2011 PST by vadim +! Generated Thu Jan 13 10:09:09 2011 PST by vadim ! ! Compiled for pix 6.2 ! Outbound ACLs: not supported diff --git a/test/pix/firewall1.fw.orig b/test/pix/firewall1.fw.orig index 7ac93db16..a088304a5 100755 --- a/test/pix/firewall1.fw.orig +++ b/test/pix/firewall1.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3430 ! -! Generated Wed Jan 12 17:40:05 2011 PST by vadim +! Generated Thu Jan 13 10:09:10 2011 PST by vadim ! ! Compiled for pix 6.1 ! Outbound ACLs: not supported diff --git a/test/pix/firewall10.fw.orig b/test/pix/firewall10.fw.orig index 3f48f44d3..b90a27da4 100755 --- a/test/pix/firewall10.fw.orig +++ b/test/pix/firewall10.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3430 ! -! Generated Wed Jan 12 17:40:06 2011 PST by vadim +! Generated Thu Jan 13 10:09:11 2011 PST by vadim ! ! Compiled for pix 6.3 ! Outbound ACLs: not supported diff --git a/test/pix/firewall11.fw.orig b/test/pix/firewall11.fw.orig index 8a8b6c02a..4f58fdbe1 100755 --- a/test/pix/firewall11.fw.orig +++ b/test/pix/firewall11.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3430 ! -! Generated Wed Jan 12 17:40:07 2011 PST by vadim +! Generated Thu Jan 13 10:09:11 2011 PST by vadim ! ! Compiled for pix 6.2 ! Outbound ACLs: not supported diff --git a/test/pix/firewall12.fw.orig b/test/pix/firewall12.fw.orig index 55bdfd546..b2318b5c0 100755 --- a/test/pix/firewall12.fw.orig +++ b/test/pix/firewall12.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3430 ! -! Generated Wed Jan 12 17:40:08 2011 PST by vadim +! Generated Thu Jan 13 10:09:12 2011 PST by vadim ! ! Compiled for pix 6.3 ! Outbound ACLs: not supported diff --git a/test/pix/firewall13.fw.orig b/test/pix/firewall13.fw.orig index 30e546dc3..7f48ed068 100755 --- a/test/pix/firewall13.fw.orig +++ b/test/pix/firewall13.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3430 ! -! Generated Wed Jan 12 17:40:09 2011 PST by vadim +! Generated Thu Jan 13 10:09:13 2011 PST by vadim ! ! Compiled for pix 6.3 ! Outbound ACLs: not supported diff --git a/test/pix/firewall14.fw.orig b/test/pix/firewall14.fw.orig index 076e174c7..22423d0b2 100755 --- a/test/pix/firewall14.fw.orig +++ b/test/pix/firewall14.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3430 ! -! Generated Wed Jan 12 17:40:10 2011 PST by vadim +! Generated Thu Jan 13 10:09:13 2011 PST by vadim ! ! Compiled for pix 6.3 ! Outbound ACLs: not supported diff --git a/test/pix/firewall2.fw.orig b/test/pix/firewall2.fw.orig index ef2e76041..8ffab0fe8 100755 --- a/test/pix/firewall2.fw.orig +++ b/test/pix/firewall2.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3430 ! -! Generated Wed Jan 12 17:40:11 2011 PST by vadim +! Generated Thu Jan 13 10:09:14 2011 PST by vadim ! ! Compiled for pix 6.3 ! Outbound ACLs: not supported diff --git a/test/pix/firewall20.fw.orig b/test/pix/firewall20.fw.orig index 2b1aa3f69..ed873c87e 100755 --- a/test/pix/firewall20.fw.orig +++ b/test/pix/firewall20.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3430 ! -! Generated Wed Jan 12 17:40:12 2011 PST by vadim +! Generated Thu Jan 13 10:09:15 2011 PST by vadim ! ! Compiled for pix 6.3 ! Outbound ACLs: not supported diff --git a/test/pix/firewall21-1.fw.orig b/test/pix/firewall21-1.fw.orig index 7bd9565f0..16a8e455b 100755 --- a/test/pix/firewall21-1.fw.orig +++ b/test/pix/firewall21-1.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3430 ! -! Generated Wed Jan 12 17:40:14 2011 PST by vadim +! Generated Thu Jan 13 10:09:16 2011 PST by vadim ! ! Compiled for pix 6.3 ! Outbound ACLs: not supported diff --git a/test/pix/firewall21.fw.orig b/test/pix/firewall21.fw.orig index f093072f2..f60810366 100755 --- a/test/pix/firewall21.fw.orig +++ b/test/pix/firewall21.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3430 ! -! Generated Wed Jan 12 17:40:13 2011 PST by vadim +! Generated Thu Jan 13 10:09:15 2011 PST by vadim ! ! Compiled for pix 7.0 ! Outbound ACLs: supported diff --git a/test/pix/firewall22.fw.orig b/test/pix/firewall22.fw.orig index 6847c37b9..9e258164c 100755 --- a/test/pix/firewall22.fw.orig +++ b/test/pix/firewall22.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3430 ! -! Generated Wed Jan 12 17:40:15 2011 PST by vadim +! Generated Thu Jan 13 10:09:17 2011 PST by vadim ! ! Compiled for pix 7.0 ! Outbound ACLs: supported diff --git a/test/pix/firewall3.fw.orig b/test/pix/firewall3.fw.orig index ebace3173..d15d3a086 100755 --- a/test/pix/firewall3.fw.orig +++ b/test/pix/firewall3.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3430 ! -! Generated Wed Jan 12 17:40:16 2011 PST by vadim +! Generated Thu Jan 13 10:09:17 2011 PST by vadim ! ! Compiled for pix 6.2 ! Outbound ACLs: not supported diff --git a/test/pix/firewall33.fw.orig b/test/pix/firewall33.fw.orig index 493d67f73..a6198b281 100755 --- a/test/pix/firewall33.fw.orig +++ b/test/pix/firewall33.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3430 ! -! Generated Wed Jan 12 17:40:17 2011 PST by vadim +! Generated Thu Jan 13 10:09:18 2011 PST by vadim ! ! Compiled for pix 6.3 ! Outbound ACLs: not supported diff --git a/test/pix/firewall34.fw.orig b/test/pix/firewall34.fw.orig index 35035b3dd..91233c0d6 100755 --- a/test/pix/firewall34.fw.orig +++ b/test/pix/firewall34.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3430 ! -! Generated Wed Jan 12 17:40:18 2011 PST by vadim +! Generated Thu Jan 13 10:09:19 2011 PST by vadim ! ! Compiled for pix 6.3 ! Outbound ACLs: not supported diff --git a/test/pix/firewall4.fw.orig b/test/pix/firewall4.fw.orig index 894c72c5d..e49cacaa1 100755 --- a/test/pix/firewall4.fw.orig +++ b/test/pix/firewall4.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3430 ! -! Generated Wed Jan 12 17:40:19 2011 PST by vadim +! Generated Thu Jan 13 10:09:20 2011 PST by vadim ! ! Compiled for pix 6.2 ! Outbound ACLs: not supported diff --git a/test/pix/firewall50.fw.orig b/test/pix/firewall50.fw.orig index 39cdb7fba..b24ae1ce0 100755 --- a/test/pix/firewall50.fw.orig +++ b/test/pix/firewall50.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3430 ! -! Generated Wed Jan 12 17:40:20 2011 PST by vadim +! Generated Thu Jan 13 10:09:21 2011 PST by vadim ! ! Compiled for pix 7.0 ! Outbound ACLs: supported diff --git a/test/pix/firewall6.fw.orig b/test/pix/firewall6.fw.orig index 6e97d61ab..61cb5c212 100755 --- a/test/pix/firewall6.fw.orig +++ b/test/pix/firewall6.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3430 ! -! Generated Wed Jan 12 17:40:21 2011 PST by vadim +! Generated Thu Jan 13 10:09:21 2011 PST by vadim ! ! Compiled for pix 6.2 ! Outbound ACLs: not supported diff --git a/test/pix/firewall8.fw.orig b/test/pix/firewall8.fw.orig index 1f4708583..969ee520d 100755 --- a/test/pix/firewall8.fw.orig +++ b/test/pix/firewall8.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3430 ! -! Generated Wed Jan 12 17:40:22 2011 PST by vadim +! Generated Thu Jan 13 10:09:23 2011 PST by vadim ! ! Compiled for pix 6.2 ! Outbound ACLs: not supported diff --git a/test/pix/firewall80.fw.orig b/test/pix/firewall80.fw.orig index dc18d1dab..9861c0f5e 100755 --- a/test/pix/firewall80.fw.orig +++ b/test/pix/firewall80.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3430 ! -! Generated Wed Jan 12 17:40:23 2011 PST by vadim +! Generated Thu Jan 13 10:09:23 2011 PST by vadim ! ! Compiled for pix 8.2 ! Outbound ACLs: supported diff --git a/test/pix/firewall81.fw.orig b/test/pix/firewall81.fw.orig index 5408f534c..37aeabfdf 100755 --- a/test/pix/firewall81.fw.orig +++ b/test/pix/firewall81.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3430 ! -! Generated Wed Jan 12 17:40:24 2011 PST by vadim +! Generated Thu Jan 13 10:09:24 2011 PST by vadim ! ! Compiled for pix 8.3 ! Outbound ACLs: supported @@ -142,6 +142,7 @@ quit object network hostA:eth0 host 192.168.1.10 quit + ! ! Rule 0 (NAT) nat (outside,inside) source static any any destination static interface hostA:eth0 service http http diff --git a/test/pix/firewall82.fw.orig b/test/pix/firewall82.fw.orig index 23bf2616d..561e8791f 100755 --- a/test/pix/firewall82.fw.orig +++ b/test/pix/firewall82.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3430 ! -! Generated Wed Jan 12 17:40:25 2011 PST by vadim +! Generated Thu Jan 13 10:09:25 2011 PST by vadim ! ! Compiled for pix 8.3 ! Outbound ACLs: supported @@ -142,6 +142,7 @@ quit object network hostA:eth0 host 192.168.1.10 quit + ! ! Rule 0 (NAT) nat (outside,inside) source static any any destination static interface hostA:eth0 service http http diff --git a/test/pix/firewall83.fw.orig b/test/pix/firewall83.fw.orig index 7387798c5..31416ac9b 100755 --- a/test/pix/firewall83.fw.orig +++ b/test/pix/firewall83.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3430 ! -! Generated Wed Jan 12 17:40:26 2011 PST by vadim +! Generated Thu Jan 13 00:02:09 2011 PST by vadim ! ! Compiled for pix 8.3 ! Outbound ACLs: supported diff --git a/test/pix/firewall9.fw.orig b/test/pix/firewall9.fw.orig index f960dd558..ed3f78f51 100755 --- a/test/pix/firewall9.fw.orig +++ b/test/pix/firewall9.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3430 ! -! Generated Wed Jan 12 17:40:27 2011 PST by vadim +! Generated Thu Jan 13 10:09:26 2011 PST by vadim ! ! Compiled for pix 6.3 ! Outbound ACLs: not supported diff --git a/test/pix/firewall90.fw.orig b/test/pix/firewall90.fw.orig index fa84e06ca..05873d258 100755 --- a/test/pix/firewall90.fw.orig +++ b/test/pix/firewall90.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3430 ! -! Generated Wed Jan 12 17:40:28 2011 PST by vadim +! Generated Thu Jan 13 10:09:26 2011 PST by vadim ! ! Compiled for pix 8.3 ! Outbound ACLs: supported @@ -130,9 +130,6 @@ quit object service smtp service tcp destination eq 25 quit -object network firewall90:FastEthernet1:ip-1 - host 22.22.22.23 -quit object network internal_subnet_1 subnet 192.168.1.0 255.255.255.192 quit @@ -152,6 +149,10 @@ object service squid service tcp destination eq 3128 quit +object network firewall90:FastEthernet1:ip-1 + host 22.22.22.23 +quit + object-group network outside.id130599X29063.tsrc.net.0 network-object host 22.22.22.21 network-object host 22.22.22.22 @@ -173,14 +174,12 @@ object-group network outside.id241772X29764.tsrc.net.0 object-group network outside.id21121X3710.tsrc.net.0 - network-object host 22.22.22.22 network-object host 22.22.22.30 network-object host 22.22.22.100 exit object-group network outside.id21177X3720.tsrc.net.0 - network-object host 22.22.22.22 network-object 22.22.22.128 255.255.255.224 exit @@ -246,12 +245,12 @@ nat (inside,outside) source dynamic hostA:eth0 outside_range ! for #1908 "static" vs "dynamic" ! for #1885 "named object" - create ! network object to define address range, then add it to object-group -nat (inside,outside) source dynamic hostA:eth0 outside.id21121X3710.tsrc.net.0 +nat (inside,outside) source dynamic hostA:eth0 outside.id21121X3710.tsrc.net.0 interface ! ! Rule 15 (NAT) ! for #1908, #1916 ! "static" vs "dynamic" -nat (inside,outside) source dynamic hostA:eth0 outside.id21177X3720.tsrc.net.0 +nat (inside,outside) source dynamic hostA:eth0 outside.id21177X3720.tsrc.net.0 interface ! ! Rule 16 (NAT) ! for #1908 diff --git a/test/pix/firewall91.fw.orig b/test/pix/firewall91.fw.orig index 7bb641374..343777d6d 100755 --- a/test/pix/firewall91.fw.orig +++ b/test/pix/firewall91.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3430 ! -! Generated Wed Jan 12 17:40:29 2011 PST by vadim +! Generated Thu Jan 13 10:09:27 2011 PST by vadim ! ! Compiled for pix 8.3 ! Outbound ACLs: supported @@ -121,6 +121,7 @@ quit object service https service tcp destination eq 443 quit + ! ! Rule 0 (NAT) nat (outside,inside) source static any any destination static interface hostA:eth0 diff --git a/test/pix/firewall92.fw.orig b/test/pix/firewall92.fw.orig index ad24aea4d..c96e5f5a8 100755 --- a/test/pix/firewall92.fw.orig +++ b/test/pix/firewall92.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3430 ! -! Generated Wed Jan 12 17:40:30 2011 PST by vadim +! Generated Thu Jan 13 10:09:28 2011 PST by vadim ! ! Compiled for pix 8.3 ! Outbound ACLs: supported @@ -129,6 +129,7 @@ quit object network test_range_1 range 192.168.1.11 192.168.1.15 quit + ! ! Rule 0 (NAT) nat (inside,outside) source static Internal_net Internal_net service http http diff --git a/test/pix/fwsm1.fw.orig b/test/pix/fwsm1.fw.orig index 982f14d56..7b3e28f70 100755 --- a/test/pix/fwsm1.fw.orig +++ b/test/pix/fwsm1.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3430 ! -! Generated Wed Jan 12 17:40:31 2011 PST by vadim +! Generated Thu Jan 13 10:09:29 2011 PST by vadim ! ! Compiled for fwsm 2.3 ! Outbound ACLs: supported diff --git a/test/pix/fwsm2.fw.orig b/test/pix/fwsm2.fw.orig index 885c248ef..28bee5e72 100755 --- a/test/pix/fwsm2.fw.orig +++ b/test/pix/fwsm2.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3430 ! -! Generated Wed Jan 12 17:40:32 2011 PST by vadim +! Generated Thu Jan 13 10:09:30 2011 PST by vadim ! ! Compiled for fwsm 4.x ! Outbound ACLs: supported diff --git a/test/pix/pix515.fw.orig b/test/pix/pix515.fw.orig index 6b5b9dae7..143130391 100755 --- a/test/pix/pix515.fw.orig +++ b/test/pix/pix515.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3430 ! -! Generated Wed Jan 12 17:40:34 2011 PST by vadim +! Generated Thu Jan 13 10:09:31 2011 PST by vadim ! ! Compiled for pix 7.0 ! Outbound ACLs: supported diff --git a/test/pix/real.fw.orig b/test/pix/real.fw.orig index 205689050..05eaa5b8c 100755 --- a/test/pix/real.fw.orig +++ b/test/pix/real.fw.orig @@ -3,7 +3,7 @@ ! ! Firewall Builder fwb_pix v4.2.0.3430 ! -! Generated Wed Jan 12 17:40:35 2011 PST by vadim +! Generated Thu Jan 13 10:09:31 2011 PST by vadim ! ! Compiled for pix 6.3 ! Outbound ACLs: not supported