onkelbeh/fwbuilder
1
0
Fork 0
mirror of https://github.com/fwbuilder/fwbuilder synced 2026-09-10 23:22:33 +02:00
Code Issues Releases Wiki Activity
4,853 Commits 3 Branches 3 Tags
master
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Vadim Kurland ba40221b53 added copyright notice to scripts that build bundle and dmg on mac 2012-03-22 23:10:54 -07:00
Vadim Kurland a1af722d69 fixing unit tests for removed modules and rearranged INCLUDEPATH 2012-03-22 22:17:10 -07:00
Vadim Kurland 89a3288b0e hardcode path to rcs tools on windows in configure 2012-03-21 09:42:46 -07:00
Vadim Kurland 60c5faf491 hardcode path to rcs tools on windows in configure 2012-03-21 09:00:15 -07:00
Vadim Kurland 5ba2b54779 hardcoding some path variables for windows build 2012-03-20 23:24:27 -07:00
Vadim Kurland 7dd7d28714 renamed iptlib/utils to avoid problems causes by the name collision with libgui/utils 2012-03-20 21:40:58 -07:00
Vadim Kurland cf84830eae convert imports of "../../config.h" to "config.h", ensure config.h is imported first in more places 2012-03-20 17:04:02 -07:00
Vadim Kurland eca03748c8 making all #includes of fwbuilder/ and fwcompiler/ files use "" 2012-03-20 16:00:03 -07:00
Vadim Kurland 1c3d9fad69 need to define WINVER in config.h, also need to make sure this file is #included first; changes all #include of fwbuilder and fwcompile .h files to #include "" since they are not installed in system /include directory 2012-03-20 15:50:01 -07:00
Vadim Kurland 3d849c5388 removed more autogenerated files; need to set macro _WIN32_WINNT to make sure getaddrinfo is included. This means we support WinXP SP1 and later 2012-03-20 15:07:05 -07:00
Vadim Kurland 77fe7da636 eliminate duplicate macro definition and unnecessary -I 2012-03-20 14:17:37 -07:00
Vadim Kurland 9eb4c95a8d trying to run configure on windows 2012-03-20 11:00:18 -07:00
Vadim Kurland e9e002768d no snmp on win atm 2012-03-19 22:20:37 -07:00
Vadim Kurland 5998ae0103 no snmp on windows atm 2012-03-19 20:50:47 -07:00
Vadim Kurland 49ae170756 build 5.0.2.3597 2012-03-18 21:40:13 -07:00
Vadim Kurland 24416b751a removed test objects for secuwall 2012-03-18 21:32:32 -07:00
Vadim Kurland 3520002f56 merged previous changes, updated release notes 5.0.2 2012-03-18 21:21:30 -07:00
Vadim Kurland 0e9b904d1d fixes #2686 "automatic rules for heartbeat are not generated for 
vlan subinterfaces"

fixes #2685 "Clicking "Manage Members" in a vlan subinterface of a
cluster causes crash".
 2012-03-18 20:43:01 -07:00
Vadim Kurland 878f18d63f need to define macros for all OS 2012-02-13 21:40:03 -08:00
Vadim Kurland f97a1b50ba fix for SF bug #3468802. Define macro __STDC_FORMAT_MACROS. This still 
needs to be tested on all build machines.
 2012-02-13 20:59:26 -08:00
Vadim Kurland 24d8a8db3f fixed SF bug #3468358 "change in rule-compilation between 5.0.0 and 
5.0.1". Rule with cluster interface in "Destination" should compile
into matching ip addresses assigned to the cluster interface object
and corresponding member firewall's interface object, but in v5.0.1 it
only matched member interface address. This bug triggered when
iptables version was set to 1.2.11 or greater. This was a regression
from v5.0.0
 2012-01-02 16:55:25 -08:00
Vadim Kurland e80f2e0d47 v5.0.2 2012-01-02 14:59:54 -08:00
Vadim Kurland b89bf502d3 fixes #2678 Policy importer for PIX/ASA could not parse nat command 
with parameter "outside"
 2011-12-07 17:02:07 -08:00
Vadim Kurland eacdadc1b9 fixes #2679 import of PIX "nat exemptions" rules 2011-12-07 15:41:41 -08:00
Vadim Kurland b0dcb679dc fixes #2677 Policy importer for PIX/ASA could not parse command 
"nat (inside) 1 0 0"
 2011-12-07 14:56:56 -08:00
Vadim Kurland 7b45a1f8c8 v5.0.1.3592 2011-12-07 13:08:05 -08:00
Vadim Kurland 0aae126c00 fixed strings that should be translated 2011-12-07 12:54:59 -08:00
Vadim Kurland 739edc8c35 fixes #2674 NAT compiler for PF crashed when AttachedNetworks 
object was used in Translated Source of a NAT rule.
 2011-11-30 18:43:18 -08:00
Vadim Kurland bfb7ee6b05 v5.0.1.3591 2011-11-30 18:21:44 -08:00
Vadim Kurland 8eeef2186f see #2676 
partially reverted 3db31d6828 :

I should not trim strings coming out of QLineEdit in
DialogData::saveAll() because it affects various attributes that might
need trailing space, such as log prefix (see #2676).  However trailing
spaces in the output file name are still trimmed in other places by
the changes done in 3db31d6828
 2011-11-30 18:13:10 -08:00
Vadim Kurland e681556c0f see #2671, #2672 
group and addresses table object names" is in effect. This happened if
the same user-defined group was used in multiple rules or different
rule element of the same rule. In this case generated PF table would
have several copies of the same addresses.

not work right when the same object is used in several different
groups. If the same object was a member of multiple groups and these
groups were used in the same or different rules of the same PF
firewall, compiler used all groups in all rules.
 2011-11-21 17:55:53 -08:00
Vadim Kurland c7bfbfe2d2 build 5.0.13589 2011-11-21 12:23:14 -08:00
Vadim Kurland f5759fa905 SF bug #3439613. physdev module does not allow --physdev-out for 
non-bridged traffic anymore. We should add --physdev-is-bridged to
make sure this matches only bridged packets.
 2011-11-21 12:16:59 -08:00
Vadim Kurland 6f1c574633 v5.0.1.3587 2011-11-16 10:56:09 -08:00
Vadim Kurland 1c05e238db merge 5.0.1.3586 2011-11-16 10:51:05 -08:00
Vadim Kurland 734069f16f see #2667 
fixed bug (no number) introduced when I was working on #2667.
Setting broadcast address in the network object with netmask /31
to 255.255.255.255 broke rule shadowing algorithm.
 2011-11-16 10:47:21 -08:00
Vadim Kurland 0ba45e6569 fixed SF bug 3435004: "Empty lines in comment result in "Incomplete 
Command" in IOS".
 2011-11-08 08:42:56 -08:00
Vadim Kurland 20b974959b fixed SF bug 3428992: "PF: rules order problem with IPv4 and 
IPv6". Compiler for PF should group ipv4 and ipv6 NAT rules together,
before it generates ipv4 and ipv6 policy rules.
 2011-11-08 08:15:17 -08:00
Vadim Kurland aa49658c51 fixed SF bug #3429377 "PF: IPv6 rules are not added in IPv4/IPv6 
ruleset (anchor)". Compiler for PF did not inlcude rules generated for
IPv6 in generated PF anchor configuration files.
 2011-11-08 07:11:21 -08:00
Vadim Kurland 6df0cdb45e fixed SF bug #3433587 "Manual edit of new service Destination Port END 
value fails". This bug made it impossible to edit the value of the end
of the port range because as soon as the value became less than the
value of the beginning the range, the GUI would reset it to be equal
to the value of the beginning of the range. This affected both TCP and
UDP service object dialogs.
 2011-11-08 06:52:07 -08:00
Vadim Kurland cdb4ee1f09 build 5.0.1.3584 2011-11-08 06:34:13 -08:00
Vadim Kurland 8da03a8783 fixed SF bug 3426843 "ipfw doesn't work for self-reference, in 
5.0.0.3568 version".
 2011-11-08 06:28:54 -08:00
Vadim Kurland 5aabf164a6 reset test files for iptables 2011-10-19 17:53:44 -07:00
Vadim Kurland 68cc6c1332 see #2662 "Crash when compiling ASA rule with IP range". Need to split 
address range if it is used in "source" of a rule that controls
telnet, ssh or http to the firewall itself and firewall's version is
>= 8.3.
 2011-10-19 17:49:36 -07:00
Vadim Kurland 3db31d6828 trim strings provided by the user in various dialogs to make sure we dont end up with file names and other parameters that end with a white space 2011-10-19 10:53:32 -07:00
Vadim Kurland 7f41116700 v5.0.1.3582 2011-10-02 15:46:44 -07:00
Vadim Kurland a27cccaba5 see SF bug #3416900 "Replace command with which". Generated 
script (Linux/iptables) used to use "command -v" to check if command
line tools it needs are present on the system. This was used to find
iptables, lsmod, modprobe, ifconfig, vconfig, logger and others. Some
embedded Linux distributions, notably TomatoUSB, come without support
for "command". Switching to "which" that is more ubuquitous and should
be available pretty much everywhere.
 2011-10-02 15:45:56 -07:00
Vadim Kurland 71df784112 fixed unit tests that broke when new objects were added to the StandardObjects library 2011-10-02 15:40:22 -07:00
Vadim Kurland 892f863523 v5.0.1.3580 2011-09-24 19:20:43 -07:00
Vadim Kurland ac28c2f84a fixes #2660 "compiler for IOSACL crashed when address range appears in 
a rule AND object-group option is turned ON"
 2011-09-24 19:14:28 -07:00
Vadim Kurland b68eac1f43 see #2656 "Generated Cisco ASA access-list has duplicate entry". 2011-09-19 16:08:34 -07:00
Vadim Kurland eaf71afcfa fixes #2658 "snmp network discovery creates duplicate address 
and network objects"
 2011-09-19 15:57:09 -07:00
Vadim Kurland 00f6188390 see #2657 snmp network discovery crashed if option "Confine scan 
to network" was used.
 2011-09-19 15:43:38 -07:00
Vadim Kurland 4c5bf811c6 see #2655 Interface names are not allowed to have dash "-" even with 
interface verification off. We should allow "-" in the interface name
for Cisco IOS
 2011-09-19 14:53:39 -07:00
Vadim Kurland 2a74bc273d see #2653 Importer for iptables checks that netfilter table used in 
the original iptables config is one of the tables we support.
Currently only "filter", "mangle" and "nat" are supported.

Also see #2651, #2652
 2011-09-04 20:29:02 -07:00
Vadim Kurland d45002faf9 new build 5.0.1.3578 2011-09-04 20:09:41 -07:00
Vadim Kurland ad2d088d67 see #2654 ChangeLog and release notes entries 2011-09-04 20:04:26 -07:00
Vadim Kurland 6908ca9aa7 see #2654 fixes GUI crash that occured if user copied a rule from file A to file B, then closed file B, opened file C and tried to copy the same rule from A to C 2011-09-04 20:02:26 -07:00
Vadim Kurland a78619ed46 see #2644 added check for netmask validity in the ip4 address dialog 
(when it is used to configure address of an interface and shows
netmask)
 2011-08-14 19:46:54 -07:00
Vadim Kurland e4491ccd51 function InetAddr::isValidV4Netmask() checks that netmask represented 
by the object consists of a sequence of "1" bits, followed by the
sequence of "0" bits and therefore does not have zeroes in the middle.

added check to the Network object dialog to make sure user does not
enter netmask with zeroes in the middle for the IPv4 network
object. Netmasks like that are not supported by fwbuilder.

see #2644
 2011-08-14 19:41:14 -07:00
Vadim Kurland 23f488361c fixes #2643 "GUI crashes when user cuts a rule, then right-mouse click 
in any rule element of another"
 2011-08-14 18:56:50 -07:00
Vadim Kurland 3209044b22 see #2635 Object type AttachedNetworks is not allowed in the 
"interface" rule element.
 2011-08-05 20:58:37 -07:00
Vadim Kurland a96d6dfd8b v5.0.1.3572 2011-08-05 20:49:02 -07:00
Vadim Kurland 9dc5623722 see #2634 User cant duplicate or move MAC Address objects 2011-08-05 20:37:06 -07:00
Vadim Kurland a7584e4c17 moved "batch install" button from the main installer wizard to the 
dialog where user enters their password. Now user can start in a
non-batch install mode but continue in batch install mode at any time
if all their firewalls authenticate with the same user name and
password.
 2011-08-02 21:27:46 -07:00
Vadim Kurland 84a6dcbdf7 see #2425 no sprintf_s in mingw 2011-07-25 16:27:44 -07:00
Vadim Kurland 9372c1ffa9 fixes #2548 added dependency on libqt4-network 2011-07-25 14:59:35 -07:00
Vadim Kurland 19eb55cfa5 release notes 5.0.0 2011-07-25 14:52:57 -07:00
Vadim Kurland bb1c9f8d7d see #2622 "Remove Back and Forward buttons". We have decided behavior 
of the GUI was too complicated since user can both act on objects
directly and navigate backwards and forwards to the objects found in
their browsing history.  Navigation using browsing history was broken
when quick filter was in use, too. All in all, it feels the value of
"back" and "forward" buttons was relatively low.

New build 3568
 2011-07-22 15:57:54 -07:00
Vadim Kurland 31c5133fdc see #2577 Updated error message that appears when user tries to open 
.fwb file created by the future version of fwbuilder.
 2011-07-21 16:48:20 -07:00
Vadim Kurland a206d46cde fixes #2567 "If file doesn't exist when clicking 'edit file', then you 
have to hit save button twice".  The bug affected "edit file" function
in the Address Table object dialog.
 2011-07-21 16:37:00 -07:00
Vadim Kurland ff2dba8bab see #2507 fixed the issue with column "Type" width 2011-07-21 16:20:06 -07:00
Vadim Kurland 8fde504d83 see #2536 avoiding FormLayout since it seems to be broken in older Qt 2011-07-21 16:06:48 -07:00
Vadim Kurland 715a6c56ad build 3567 2011-07-21 15:27:29 -07:00
Vadim Kurland 1fd2ac3a95 fixes #2590 "PF: NAT compiler fails when run-time address table object 
is used in a rule"
 2011-07-21 14:22:40 -07:00
Vadim Kurland 2b54b4c49b fixes #2565 "Run-time dns name or address table in routing policy -> 
crash". Compiler for PF crashed if user placed run-time DNSName object
in "destination" of a routing rule.
 2011-07-21 14:17:48 -07:00
Vadim Kurland 04d5c68fb3 see #2563 fixed crash that occurred it user tried to edit interface object located in the Deleted Objects library 2011-07-21 14:01:52 -07:00
Vadim Kurland 6d26bfac90 see #2515 Expanded set of options the user can change to pre-set 
parameters in the new policy rules they create. Now user can set
default values for action ("Deny" or "Accept"), direction, the
"stateless" flag and logging.
 2011-07-21 13:20:59 -07:00
Vadim Kurland 2ce9852aeb see #2516 "Enhance Find to include searching for IP addresses in 
ranges". Function "find" now finds ip addresses inside address ranges.
 2011-07-21 12:42:51 -07:00
Vadim Kurland 0132087bb4 ported fix for #2617 from fortress to fwbuilder-oss; see #2617 2011-07-21 11:43:08 -07:00
Vadim Kurland 5993fd7574 see #2619 "Attempting to copy-and-paste a tag service results in an 
error". Pasting of a TagService object to the "Tag Services" group did
not work.
 2011-07-20 23:52:30 -07:00
Vadim Kurland ddd45fb426 fixes #2566, #2618 Fix for the regression introduced when I worked on 
empty editor pane".  Double click on the rule number should not do
anything, but double click on rule options, comment and other fields
should open the editor. Change done for #2566 broke this.
 2011-07-20 23:39:11 -07:00
Vadim Kurland 8a47a44a3e fixes #2586 new address table object icons, all sizes and all badges 2011-07-20 21:18:25 -07:00
Vadim Kurland b4f4a59767 fixes #2564 complete set of new "negated" icons 2011-07-20 21:15:06 -07:00
Vadim Kurland e8a87b16fb new build 3565 2011-07-19 19:46:21 -07:00
Vadim Kurland 83514e728b fixes #2566 Double-clicking on rule when program first starts results in empty editor pane 2011-07-19 19:41:27 -07:00
Vadim Kurland e553360d24 see #2609 additional checks to make sure we do not allow drag and drop between different instances of the program 2011-07-19 19:35:54 -07:00
Vadim Kurland d966ac1eb0 see #2564 added more negated icons 2011-07-19 19:15:01 -07:00
Vadim Kurland a47d102c30 fixed SF bug 3371301 "Error compiling with VLAN and 
masquerade". Iptables NAT rules with vlan interface configured as
"dynamic" and no ip address in Translated Source caused compiler
crash.
 2011-07-19 19:07:56 -07:00
Vadim Kurland 739a76ffd0 see #2564 new "negated" icons 2011-07-19 18:26:56 -07:00
Vadim Kurland 08f1b604a5 ported fixes in AttachedNetworks from fortress 2011-07-17 17:06:04 -07:00
Vadim Kurland 792a783612 see #2568 "Group name not preserved if group contains host object"; new build 3563 2011-07-11 23:18:17 -07:00
Vadim Kurland b850545eab see #2551 Importer should parse PF rules that use "route-to", 
"reply-to" and "dup-to" options in both pre-4.7 and 4.7 formats. In PF
4.7 these parameters moved to the end of the rule and are now part of
the "filteropts" block of parameters.
 2011-07-09 21:41:04 -07:00
Vadim Kurland 8a8e9577fb see #2551 Importer should correctly import "pool type" parameter that 
follows source routing rule options "route-to", "reply-to" and
"dup-to". Also, since currently fwbuilder does not support source
routing rules with multiple different interface-gateway pairs (only
one interface in combination with one or multiple gateway addresses
are supported), importer displays warning and marks rules as "broken"
when it encounters this configuration.
 2011-07-09 21:30:54 -07:00
Vadim Kurland bbf03ad49c see #2561 operation of making an interface a subinterface should be 
performed using undo/redo command. Also, this should take care of
inconvenient scrolling of the object tree after this operation.
 2011-07-09 16:42:37 -07:00
Vadim Kurland 433b845837 new build 3561 2011-07-09 14:42:46 -07:00
Vadim Kurland 7e2cdbb030 see #2562 "Crash when making an interface that has subinterfaces a 
subinterface of another interfrace". If an interface has
subinterfaces, it should not be allowed to become subinterface of
another interface.
 2011-07-09 14:33:00 -07:00
Vadim Kurland 0237f694d9 fixed yet another unit test that did not create FWObjectClipboard object and crashed because of that 2011-07-08 20:54:14 -07:00
Vadim Kurland e4c31fa623 fixed broken unit tests 2011-07-08 19:12:50 -07:00
Vadim Kurland 8158519a06 see #2561 "Add context menu to move an interface to be a child of 
another interface". New context menu (submenu) allows user to move an
interface in the tree to make it a subinterface of another interface.
 2011-07-08 17:33:30 -07:00