onkelbeh/fwbuilder
1
0
Fork 0
mirror of https://github.com/fwbuilder/fwbuilder synced 2026-09-12 16:13:13 +02:00
Code Issues Releases Wiki Activity
4,271 Commits 3 Branches 3 Tags
07e902e0ac3f3fac77728801cb1feef03adf2932
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Vadim Kurland 07e902e0ac new build 2011-06-09 17:36:59 -07:00
Vadim Kurland 9505e2dcd0 see #2492 properly disabling dialog controls for the read-only IPServcie object 2011-06-09 16:46:09 -07:00
Vadim Kurland 9740d4a703 see #2490 enable/disable widgets based on the "read-only status of the object after they were enabled/disabled for other reasons 2011-06-09 16:38:01 -07:00
Vadim Kurland d682785b63 see #2496 parsing, but not importing, "user" and "group" matches 2011-06-09 16:33:22 -07:00
Vadim Kurland c77796ebd0 see #2497 added an error on import of "include" word in pf.conf files 2011-06-09 16:15:36 -07:00
Vadim Kurland 677173e030 see #2487 fixed crash that happened when user created new cluster from member firewalls that had locked interfaces 
;
 2011-06-09 14:01:17 -07:00
Vadim Kurland e4cf4d6447 see #2494 crash happened because class ObjectSignature did not have virtual function to build signature from UserService object 2011-06-09 12:15:59 -07:00
Vadim Kurland 0b46b5c0b9 see #2468 clean up filter/ilbrary box; moved buttons "new object" and "back" to the top toolbar 2011-06-06 19:15:05 -07:00
Vadim Kurland bd5212e0c6 fixed crash introduced recently 2011-06-06 18:32:23 -07:00
Vadim Kurland 57e3c5b0d3 see #2478 always draw rule sets on top of interfaces in the tree 2011-06-06 15:23:46 -07:00
Vadim Kurland f0a0abb338 see #2486 centered firewall / policy text 2011-06-06 15:04:55 -07:00
Vadim Kurland 17a178b637 see #2482 now can import rules that match both source and destination ports, including cases where groups of ports are used on both sides 2011-06-06 14:55:00 -07:00
Vadim Kurland 9921fe8f78 see #2481 added an error message for port "!=" operation. Importer still tries to import the rule but marks it as "bad" 2011-06-06 13:32:22 -07:00
Vadim Kurland c9211157ff see #2463 implemented import of "scrub" commands in both old and new syntax 2011-06-02 19:02:09 -07:00
Vadim Kurland a0da65ddc9 see #2464 implemented import of PF "set timeout", 
"set limit" and other "set" commands. Known limitations:

 - commands "set ruleset-optimization", "set loginterface",
   "set block-policy", "set state-defaults", "set require-order",
   "set fingerprints", "set reassemble", "set hostid" are not supported.
 2011-06-02 17:18:37 -07:00
Vadim Kurland 68a29785da see #2394 matching icmp types and codes by name explicitly to avoid conflicts where the same keyword (e.g. "skip") is used in different rules of the grammar; see #2464 added test case for "set timeout" commands 2011-06-02 16:13:23 -07:00
Vadim Kurland b9dfdd5d2c split ifconfig.g to keep linux and bsd grammars separate 2011-06-01 16:55:52 -07:00
Vadim Kurland 68bc1ec263 see #2394 populating policy rules with services 2011-05-26 18:45:05 -07:00
Vadim Kurland cc7fb3c1b0 fixing typo 2011-05-26 14:42:18 -07:00
Vadim Kurland a814b38c0f Merge branch 'pf_import' into development 2011-05-26 14:29:45 -07:00
Vadim Kurland ca77bbb51c re-ran tests for iptables 2011-05-26 14:29:14 -07:00
Vadim Kurland a544492ced see #2434 "PF compiler should use 'self' keyword where 
appropriate". Compiler for PF now uses keyword 'self' in rules
where firewall object is used in Source or Destination.
 2011-05-26 14:13:26 -07:00
Vadim Kurland 29bf29f892 see #2394 grammar clean-up; creating policy rules in the right ruleset and renumbering rule set in the end 2011-05-26 12:06:50 -07:00
Vadim Kurland ea9c28fda1 See #2394 grammar can parse most of the sample pf.conf files, including important ones 2011-05-25 18:57:44 -07:00
Vadim Kurland db8ae42ad1 grammar matches port ranges; better grammar for ipv6 2011-05-23 19:03:49 -07:00
Vadim Kurland af8031a87a building with mingw on windows 2011-05-19 19:22:58 -07:00
Vadim Kurland 8c4fd89855 upgraded large_policy_test.fwb, added test case for branch rules and Classify 2011-05-16 14:09:36 -07:00
Vadim Kurland 598b83cac3 fixes #2398 remove checkbox "make tag and classify actions terminating" 2011-05-12 18:48:11 -07:00
Vadim Kurland bcd860d889 see #2397 get rid of unnecessary chains and make sure terminating action (e.g. Accept) is added after targets generated for all non-terminating options (Tag, Classify and Route) 2011-05-12 18:43:31 -07:00
Vadim Kurland 40e08b70d1 added release notes 4.2.2 2011-05-11 14:02:03 -07:00
Vadim Kurland 38540cec7c merge from development 4.2.1.3540 2011-05-09 17:08:17 -07:00
Vadim Kurland ceb6904e06 build 3540 2011-05-09 11:47:09 -07:00
Vadim Kurland 4fde5344e9 fixes #2393 "broken link in the "Help / Firewall Builder Help" dialog" 
build number 3540
 2011-05-09 11:46:23 -07:00
Vadim Kurland 3b70160562 * FWCmdAddObject.cpp (redo): fixes #2391 "selecting 'new library' 
when editor panel not on 'editor' tab causes crash"
 2011-05-09 11:27:57 -07:00
Vadim Kurland 8773642198 see #2367 merge from development 2011-05-05 19:16:47 -07:00
Vadim Kurland 282102e03f Merge branch 'development' of ssh://vc.netcitadel.com:2222/var/git/fwbuilder into development 2011-05-05 18:50:59 -07:00
Vadim Kurland e24a73a560 see #2385 "PF action Classify uses 
wrong parameter". This change fixes a bug introduced in 4.2.0
that affects rules with action Classify in PF firewalls.
 2011-05-05 18:50:32 -07:00
Vadim Kurland 7232a2195b see #2385 bumped XML DTD version to 21 to make room for the transformation to fix bug #2385. That will be done in branch development 2011-05-05 12:01:18 -07:00
Vadim Kurland c096684c20 see #2367 merged latest changes from development branch; this merged transformation for v18->v19 XML file upgrades; upgraded test files for PF 2011-05-04 16:44:08 -07:00
Vadim Kurland afef4b39c1 bumped dtd version to 20 and renamed xslt upgrade script since dtd version increased to 19 in the development branch 2011-05-04 15:54:15 -07:00
Vadim Kurland d14a984f85 * FWObjectDatabase_18.xslt: XSLT transformation to upgrade data 
files from DTD v18 to DTD v19. This transformation finds
"PolicyRule" elements with missing "Itf" child elements and fixes
them by adding such element with a reference pointint to "any".
Fixes #2383

* fwbuilder.dtd.in: Element "Itf" (an interface) of "PolicyRule"
should be required. DTD version increment.
 2011-05-04 15:23:46 -07:00
Vadim Kurland 64e860a025 see #2367 attempt at iptables support for tag, classify and route options 2011-05-02 18:50:03 -07:00
Vadim Kurland 3c276bc40b see #2367 using QComboBox to choose between "none", "queue" and "pipe" for ipfw classification 2011-05-02 14:34:34 -07:00
Vadim Kurland 7feb2f4731 show tag service object name in the Options column 2011-05-02 13:39:14 -07:00
Vadim Kurland 4e6b10cbc9 draw text line aligned with the icon in action and direction columns 2011-05-02 13:36:15 -07:00
Vadim Kurland 629b0b31e2 see #2367 removed actions Tag, Classify, Route and added options instead; added functions to class PolicyRule to check and set these options; replaced checks for those actions with calls to the functions everywhere. 2011-04-27 18:44:38 -07:00
Vadim Kurland 339079da7b * instDialog_ui_ops.cpp (readInstallerOptionsFromDialog): 
tentative fix for SF bug 3169045 "Batch installer lists IPv4
address as management address". Built-in installer wanted to use
management interface address in batch mode even when alternative
address or putty session name was provided. This happens only in
batch mode install.
 2011-04-25 12:00:54 -07:00
Vadim Kurland 856126c1cc started 4.2.1 2011-04-25 11:58:14 -07:00
Vadim Kurland 50c7ca58f3 updated release notes 2011-04-19 17:25:44 -07:00
Vadim Kurland 752b2e3ae0 fixes #2358 should say "outbound interface" rather than "inbound" 2011-04-19 14:21:28 -07:00
Vadim Kurland 9ba2dc42ee * RoutingCompiler_ipt.cpp (compile): see #2359 "Crash when 
compiling single rule with IPv6 destination and IPv4 gateway or
interface". Routing compiler for iptables does not support ipv6 at
this time and will issue a warning when user tries to place ipv6
address or network in a routing rule. The warning does not appear
when ipv6 address is a member of a group used in the rule. Also
see #1575.
 2011-04-19 14:18:33 -07:00
Vadim Kurland b2a0a511f3 fixed install of fwbedit on windows 2011-04-19 10:39:39 -07:00
Vadim Kurland 742754d0e2 remove redundant paragraph we both do not like 2011-04-18 16:50:06 -07:00
Vadim Kurland 299bb687cb fixes #2357 rules should be sorted in the "where used" output 2011-04-18 16:49:44 -07:00
Vadim Kurland 6ddcd212ad fixed #2357 "rules should be sorted in the "where used" output" 2011-04-18 15:18:56 -07:00
Vadim Kurland 2bde26e65a fixed dialog layout; see #2356 2011-04-18 15:00:14 -07:00
Vadim Kurland d066f567f5 * IPTImporter.cpp (pushPolicyRule): see #2338 "Empty Mangle Policy 
object created on import". Iptables rules in the table mangle
will be imported in the dedicated Policy rule set with name
"Mangle". Rules that use chains FORWARD and POSTROUTING in table
mangle can not be reproduced and will be marked as "bad" (color
red and corresponding comment).
 2011-04-13 19:09:30 -07:00
Vadim Kurland 457fcd1660 see #2344 disabled ntp configuraton when host os is FWSM 2011-04-13 17:24:55 -07:00
Vadim Kurland aa6be186da see #2345 updated test files 2011-04-13 17:11:43 -07:00
Vadim Kurland c93421f0e3 * OSConfigurator_pix_os.cpp (_printSysopt): see #2345 More fixes for 
FWSM 4.x: "service resetoutbound", "timeout xlate", "timeout sunrpc"
 2011-04-13 17:10:16 -07:00
Vadim Kurland 0e303fe444 see #2343 updated unit tests 2011-04-13 15:42:51 -07:00
Vadim Kurland 6cc059b91c * OSConfigurator_pix_os.cpp (_printInterfaceConfiguration): see #2343 
"Interface nameif error when installing generated config for FWSM".
Use correct  "nameif" command sytax  in FWSM 2.x and 4.x.
 2011-04-13 15:33:50 -07:00
Vadim Kurland 074aae6427 see #2341 
fixed XML error introduced with FWSM config  import; build 3525
 2011-04-13 15:18:09 -07:00
Vadim Kurland 5c07a81c7b * OSConfigurator_pix_os.cpp (_printSSHConfiguration): see #2344 
"FWSM install errors for clear commands". Using correct syntax for
"clear" commands for FWSM v4.x
 2011-04-13 12:27:52 -07:00
Vadim Kurland 909470a0bf see #1548 working on deduplication of network objects 2011-03-23 22:16:18 -07:00
Vadim Kurland 97061f54f0 fixes #2269 using non-versioned path in the settings .ini file for the GUID 2011-03-23 17:45:11 -07:00
Vadim Kurland ee35e66818 fixed SF bug 3238026: build 
failure on systems without net-snmp development libraries.
 2011-03-23 16:33:54 -07:00
Vadim Kurland 247d4efd61 commiting merge 2011-03-12 14:53:12 -08:00
Vadim Kurland d3bf44b4d5 re-ran tests for pix 2011-03-12 14:44:47 -08:00
Vadim Kurland 2fa922d8b2 re-ran tests for ipfw 2011-03-11 09:19:03 -08:00
Vadim Kurland 9b4edad92f re-ran tests for ipf 2011-03-11 09:17:49 -08:00
Vadim Kurland 984a84ea2f Merge branch 'development' of ssh://vc.netcitadel.com:2222/var/git/fwbuilder into development 2011-03-10 21:10:11 -08:00
Vadim Kurland 7986214d4d re-ran pf tests and updated files 2011-03-10 21:09:54 -08:00
Vadim Kurland f7fdf1fbc5 see #2163 converting snmp network discovery wizard 2011-03-02 15:48:10 -08:00
Vadim Kurland e1a91dfeac see #2163 refactored code that implements two-panel object selection to a separate widget so it can be reused in multiple wizards 2011-03-02 12:06:26 -08:00
Vadim Kurland 5f3900e07e better regexp to match /etc/hosts lines with multiple names 2011-03-02 11:10:23 -08:00
Vadim Kurland 98a2f51d52 see #2047 
Do not
pass full path to the output file as an argument of the "-o"
option when the GUI launches policy compiler. Since the "-d"
option passes directory path where files sould be saved, actual
file names do not need to be absolute path, except if the user
entered absolute path for the output file name in the firewall
settings dialog.
 2011-02-24 18:55:55 -08:00
Vadim Kurland 5b3160267d * configlets/freebsd/installer_commands_root: see #2143 "installer 
should run /etc/rc.d/pf script to reload PF rules on FreeBSD when
generated script is in rc.conf format"
 2011-02-24 17:28:57 -08:00
Vadim Kurland 98c9799584 see #2137 delete ip address first, then add new one, but only if the interface is a carp interface 2011-02-24 15:35:44 -08:00
Vadim Kurland 1767f5a86c see #2126 added regex for old PIX 2011-02-24 14:36:45 -08:00
Vadim Kurland 9882abbcd8 see #2136 change font used to show the name of the cluster object in the tree when it needs recompile 2011-02-24 14:18:22 -08:00
Vadim Kurland 5a1b9d3b15 upgraded unit test data files 2011-02-22 16:06:41 -08:00
Vadim Kurland 85dad674bf new build 3485 
* configlets/linux24/shell_functions: see #2130 "unnecessary
output when iptables script runs on the firewall". Ever since I
switched to using "command" to verify that various system
utilities generated script needs are present and can be used, the
scirpt produced extra lines in the log printing full path and
names to /usr/bin/logger, /sbin/ip etc. These lines are
unnecessary and should not be there. This problem was introduced
some time during the work on 4.2.0
 2011-02-22 15:26:06 -08:00
Vadim Kurland 7bf0f8a4f4 see #2129 
deprecate "test install" function. We have decided to deprecate test install because it is rather heavy-handed on Linux and PIX where it reboots the firewall and plain does not work on *BSD.
 2011-02-22 15:12:26 -08:00
Vadim Kurland 4adafeb105 fixes #2033 Clarify platform selection for ASA/PIX 2011-02-09 16:36:14 -08:00
Vadim Kurland 16a51265ec see #1931 added newlines between "PArser error" and other parts of the combined error message 2011-02-09 16:13:09 -08:00
Vadim Kurland 02ae23b197 fixes #1915 tooltip shown when mouse is over rule number should be added to the list of suppressed tooltips when "Advanced user mode" is in effect 2011-02-09 14:54:18 -08:00
Vadim Kurland 3c966ffc31 see #2064 CARP interfaces are not properly installed on FreeBSD cluster. Need to populate failover group objects with default values when they are created 2011-02-09 14:34:14 -08:00
Vadim Kurland 77ea506d63 * configlets/freebsd/installer_commands_root: fixes #2065 
"activation commands on FreeBSD and OpenBSD lose script exit
status". Sequence of commands ran by the built-in installer on
*BSD firewalls were losing exit status of the script which meant
installer always declared installation a "success" even when
there were errors.
 2011-02-09 12:33:34 -08:00
Vadim Kurland faa4147b68 new build 3463 2011-02-07 19:44:02 -08:00
Vadim Kurland 87c8fcb2ac fixes #1914 Address table object file name is not created properly if user clicks outside Editor panel 2011-02-07 17:50:22 -08:00
Vadim Kurland ee1ed26c14 fixes #2011 no screening on Firewall name characters: do not allow character "/" in firewall and cluster names 2011-02-07 17:35:58 -08:00
Vadim Kurland 954e12b1c5 fixes #2010 Compiled rule hidden by the output panel 2011-02-07 17:29:28 -08:00
Vadim Kurland d18427a9cc see #2048 PF compiler doesnt detect duplicate entries in Routing policy; added rule elements to catch and suppress duplicate routing commands 2011-02-07 17:06:42 -08:00
Vadim Kurland b244b5ff4d fixes #2045 static route IDs used in rc.conf file must be stable 2011-02-07 15:17:36 -08:00
Vadim Kurland bef9936ed5 making lists of interface configuration commands come out in a stable order, sorted by interface name; added test cases for vlan interfaces in shell and rc.conf formats; added vlan interfaces to cloned_interfaces line 2011-02-07 15:00:36 -08:00
Vadim Kurland e442d4521e see #1888 Added second input field for the conf file name, refatoring in CompilerDriver_pf to use QString mostly; The name of the generated .fw file is still taken from the -o option rather than output_file firewall option 2011-02-01 14:27:30 -08:00
Vadim Kurland e00c2cd41e build 3456 2011-01-31 18:49:08 -08:00
Vadim Kurland 78e177f759 see #1890 re-ran tests 2011-01-31 18:38:08 -08:00
Vadim Kurland dd86fcc5e2 see #1890 "Add 
support for configuring static routes on BSD". Implemented support
for simple static routing rules. ECMP and routing via interface
(routing to directly reachable subnets) are not
supported. Generated script preserves static routing entries that
existed before and attempts to recover in case of error. Needs
testing.
 2011-01-31 18:29:20 -08:00