1
0
mirror of https://github.com/fwbuilder/fwbuilder synced 2026-03-19 09:47:20 +01:00

66 Commits

Author SHA1 Message Date
Vadim Kurland
ff6f43b3e6 refs #1907 split converting to atomic rules in orer to be able to control it better 2011-01-11 10:27:10 -08:00
Vadim Kurland
8c7c07cfb9 fixes #1909 2011-01-11 09:44:13 -08:00
Vadim Kurland
e17c19a0a3 fixed #1862 "fwb_pix crash". 2011-01-10 17:32:57 -08:00
Vadim Kurland
5bd095a95c fixed #1906 ASA NAT - Address objects are not properly identified by network zone and have the wrong real interface 2011-01-10 17:17:47 -08:00
Vadim Kurland
24ac2b56ac fixed #1905, #1879 2011-01-10 16:43:43 -08:00
Vadim Kurland
62e7c778fe re-ran tests 2011-01-07 16:39:57 -08:00
Vadim Kurland
5313a94c86 * ASA8Object.cpp (ASA8Object): refs #1885 "named network and
service objects in pix8". So far, these objects are only used
for nat configuration.

* NATCompiler_asa8_writers.cpp (processNext): fixes #1903 "correct
order of clear commands for ASA 8.3"

* NATCompiler_asa8_writers.cpp (printSDNAT): refs #1886 "new nat
configuration in pix 8.3". Initial support for new style nat
configuation.
2011-01-07 16:29:09 -08:00
Vadim Kurland
62ea13f33e refs #1886 new nat configuration in pix 8.3; created new class NATCompiler_asa8, so far it does the same thing as NATCompiler_pix 2011-01-06 15:04:19 -08:00
Vadim Kurland
cb19348312 refs #1887 using real IPs in ACL instead of translated addresses in pix 8.3 ; turned on warning for pix 8.3 2011-01-06 13:24:49 -08:00
Vadim Kurland
d564fbb198 refs #1887 using real IPs in ACL instead of translated addresses in pix 8.3; refactored rule element that finds matching NAT rules and performs substitution for pix v<8.3 2011-01-06 12:54:36 -08:00
Vadim Kurland
b20a7843a6 refs #1883, #1893 FWSM 4.x does not have fixup command, we should use policy-map and class commands. 2011-01-04 19:08:19 -08:00
Vadim Kurland
b9a9d7a2c9 refs #1893 fixes #1882 "inspect ip options in pix8". Added support for
"policy-map type inspect ip-options" command in PIX v8.2 and later.
At this time, of all possible types of "policy-map type inspect"
command only "ip-options" is implemented.
2011-01-04 17:05:43 -08:00
Vadim Kurland
4a350d290a fixes #1891 problems with TCP and UDP services with source ports 2011-01-04 12:14:17 -08:00
Vadim Kurland
cd3c457971 refs #1882 Mixed service groups in PIX8; added pix versions 8.0 and 8.3, added support for mixed servcie groups in 8.0; source port matching does not work, see #1891 2011-01-03 17:17:56 -08:00
Vadim Kurland
d3bfdcf0f7 removed {{$build}} from top_comment configlets since we do not have build number variable anymore 2011-01-03 13:23:17 -08:00
Vadim Kurland
abf2b3b2be checking in "golden" test files 2011-01-03 13:01:06 -08:00