onkelbeh/fwbuilder
1
0
Fork 0
mirror of https://github.com/fwbuilder/fwbuilder synced 2026-03-20 02:07:23 +01:00
Code Issues Releases Wiki Activity
3,710 Commits 3 Branches 3 Tags
Commit Graph

3710 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Vadim Kurland
2542b082f3 see #153 #2097 got rid of getInterfaceStr and getInterfaceId in policy and nat compilers for iptables 2011-02-18 18:48:16 -08:00
Vadim Kurland
df39b1d0fd new build 3481 2011-02-17 19:38:26 -08:00
Vadim Kurland
8c78deb9b9 fixes #2114 invalid XML is created when interface object is duplicated 2011-02-17 18:50:33 -08:00
Vadim Kurland
faece9e40c see #2097 more test cases with negation and vlan interfaces 2011-02-17 18:39:17 -08:00
Vadim Kurland
698286100a see #133 #2097 skip bridge ports while doing negation in interface column, unless firewall is a bridge 2011-02-17 18:33:44 -08:00
Vadim Kurland
581ccdc68e see #2097 #133 additional test cases 2011-02-17 18:01:45 -08:00
Vadim Kurland
6f30bc3446 * NATCompiler_ipt.cpp (processNext): see #2097 #133 "support for 
inbound and outbound interface columns in iptables NAT
rules". This also addresses SF feature requests 1954286 "DNAT with
interface as condition not possible" and 621023 "manipulating
interface in NAT rule".
 2011-02-17 17:48:04 -08:00
Vadim Kurland
d0ae7bac01 * NATCompiler_ipt.cpp (processNext): see #2097 #133 "support for 
inbound and outbound interface columns in iptables NAT
rules". This also addresses SF feature requests 1954286 "DNAT with
interface as condition not possible" and 621023 "manipulating
interface in NAT rule".
 2011-02-17 17:47:42 -08:00
Vadim Kurland
5162212073 see #2097 #133 : no need to replace cluster interfaces with member interfaces in NATCompiler_pf::AssignInterface::processNext() since it was already done in replaceClusterInterfaceInItfOutb 2011-02-17 15:36:28 -08:00
Vadim Kurland
cf17bb995c see #2097 showing "interface" columns in iptables NAT ruels 2011-02-17 15:27:37 -08:00
Vadim Kurland
f8b668e691 see #2101 setting master advskew to 10 and default advskew to 20 2011-02-17 15:02:45 -08:00
Vadim Kurland
b116a2ac23 see #2110 VLAN interfaces are disabled in new cluster configuration 2011-02-17 14:54:56 -08:00
Vadim Kurland
91f16fb85a documenting decision to stop making builds on Hardy. See #2107 2011-02-17 14:36:17 -08:00
Vadim Kurland
fdb899bdd2 * NATCompiler_ipf.cpp (processNext): see #133, fixes #2108 making 
nat compiler for ipfilter work with interface column, however the
column is not exposed to the user. Compiler behavior should be
backwards compatible with older versions of fwbuilder.
 2011-02-17 12:06:50 -08:00
Vadim Kurland
100dca74bb * NATCompiler_pf.cpp (processNext): see #133. MErged code from the 
branch, running tests. Making sure rules that have firewall
object in ODst and interface columnblank end up with rdr command
without "on interface" clause as before.
 2011-02-17 11:50:14 -08:00
Vadim Kurland
ee2204086e new build 3479a 2011-02-16 20:03:44 -08:00
Vadim Kurland
c042430cb2 merged from branch development; see #2095 "Support for interface groups in "nat" and "rdr" rules", see #2096 "support for negation in "Interface" column of PF NAT rules" 2011-02-16 19:55:07 -08:00
Vadim Kurland
59dc81c424 see #2100 carp password should be optional 2011-02-16 16:48:29 -08:00
Vadim Kurland
55973a585f fixes #2094 2011-02-16 16:38:36 -08:00
Vadim Kurland
8b158c0a74 * OSConfigurator_bsd_interfaces.cpp (configureInterfaces): make 
sure we print "ifconfig" commands for mtu and other parameters for
all interfaces, including those with no ip addresses and bridge
ports (unnumbered interfaces used to be skipped before)
 2011-02-16 16:23:54 -08:00
Vadim Kurland
8de52b3f06 fixes #2093 build failed because function QStringList::removeDuplicates() is only available in Qt 4.5 2011-02-16 15:49:02 -08:00
Vadim Kurland
174686d281 * ObjectTreeView.cpp (startDrag): fixes #2099 "Object list scrolls 
up to the last edited object". Object tree used to scroll
spontaneously when user started dragging an object from it to a
rule.
 2011-02-16 15:33:07 -08:00
Vadim Kurland
1f8363c84e * configlets/bsd/update_vlans: see #2105: generated script now 
supports vlan interfaces with names that do not match vlan IDs
(OpenBSD, FreeBSD, shell script format).
 2011-02-16 15:22:47 -08:00
Vadim Kurland
f4858bfc83 fixes #2106 avoid adding pfsync_enable line if it is not needed in rc.conf format 2011-02-16 14:47:10 -08:00
Vadim Kurland
a58445ed16 see #1807, #2104 arrange interface configuration commands in the 
generated scritpt in such order that bridge and carp interfaces
are configured after all other interfaces are done.
 2011-02-16 14:42:06 -08:00
Vadim Kurland
25c1ed5d6b new build 3478 2011-02-16 13:29:09 -08:00
Vadim Kurland
9ae36f6632 see #2103 added checkbox to disable interface name validation checks and autoconfiguration of vlan interface IDs 2011-02-16 13:27:38 -08:00
Vadim Kurland
6135cf8acb see #133 added support for inbound and outbound interfaces in nat rules (DTD, libfwbuilder API); added support for an interface column in PF NAT rules (using outbound interface rule element): changes in GUI and compiler 2011-02-15 18:56:05 -08:00
Vadim Kurland
4d9abebb64 new build, reran tests for ipt 2011-02-15 14:29:43 -08:00
Vadim Kurland
0df4ae9abd * ActionsDialog.cpp (setRule): see #1871 "PF Actions Tag and 
Classify can be terminating or non-terminating". Added checkbox to
the action properties dialog for actions Tag and Classify for PF
that lets the user choose if these actions should be terminating
or not. Old behavior (Tag was non-terminating and Classify was
terminating) is reflected in default settings of the checkboxes.
Terminating rules generate "pass quick" commands, while
non-terminating rules generate "pass" commands (no "quick" option).
 2011-02-15 14:20:27 -08:00
Vadim Kurland
bee424b3d0 fixes #2091 ethernet intrface options a used twice if the interface is a bridge port 2011-02-14 16:08:54 -08:00
Vadim Kurland
ec5bb2290d fixes #2092 parameter "stp" is now optional and is controlled by a checkbox in the interface settings dialog 2011-02-14 15:53:55 -08:00
Vadim Kurland
b5d57a740b fixes #2092 parameter "stp" is now optional and is controlled by a checkbox in the interface settings dialog 2011-02-14 15:15:23 -08:00
Vadim Kurland
d0dc616de5 Merge branch 'development' of ssh://git@vc.netcitadel.com:2222/var/git/fwbuilder into development 2011-02-14 12:10:44 -08:00
Vadim Kurland
c4d049a180 see #2087 "schedule reboot" controls should be disabled when test run install mode is turned off 2011-02-14 12:10:28 -08:00
Vadim Kurland
d9210e4678 fixes #1866, #1868, #1869 pf options set state-policy, set block-policy, set debug 2011-02-14 11:52:31 -08:00
Vadim Kurland
c5b9613cdd fixes #1866, 1868, 1869 pf options set state-policy, set block-policy, set debug 2011-02-14 11:52:09 -08:00
Vadim Kurland
40a2f20e24 fixes #1870 changed tooltips and checkboxes text to make it clear what these options do 2011-02-14 11:10:55 -08:00
Vadim Kurland
cae3a06876 see #2088 fixed in another place where putty_session could not be initialized properly when there is no matching putty session in registry 2011-02-14 10:49:04 -08:00
Vadim Kurland
143594ddc7 see 2058 fixed mtu configuration commands generated for FreeBSD in shell script mode 2011-02-14 10:44:04 -08:00
Vadim Kurland
9ae141c3ae see #2074 on FreeBSD ifconfig does not understand parameter carpdev 2011-02-13 18:35:31 -08:00
Vadim Kurland
31bd33cfea see #2082 Crash when deleting Policy object from cluster 2011-02-13 18:26:32 -08:00
Vadim Kurland
7de1edab4b see #1867 Since action Tag is non-terminating, rules with 
this action should not shadow other rules.
 2011-02-13 18:03:12 -08:00
Vadim Kurland
d2217033a4 see @088 need to initialize putty_session and clear it in clear() 2011-02-13 16:57:20 -08:00
Vadim Kurland
014120e627 see #2084 we do not need to fetch routing tables while collecting interface data 2011-02-13 09:26:03 -08:00
Vadim Kurland
4da7c66463 see #2084 we do not need to fetch routing tables while collecting interface data 2011-02-13 09:21:00 -08:00
Vadim Kurland
da2c04e6f4 see #1895 added context menu item Expand/Collapse 2011-02-12 19:01:28 -08:00
Vadim Kurland
5e099e5c97 fixes #2083 additional services: rtmp, xmpp-client, xmpp-server, nrpe 2011-02-12 17:59:07 -08:00
Vadim Kurland
b1d6640303 fixes #2083 additional services: rtmp, xmpp-client, xmpp-server, nrpe 2011-02-12 17:56:34 -08:00
Vadim Kurland
5cce2d20ae fixes #2081 upper limit for the mtu value for *BSD interfaces is now 9000 2011-02-12 17:20:22 -08:00