onkelbeh/fwbuilder
1
0
Fork 0
mirror of https://github.com/fwbuilder/fwbuilder synced 2026-09-16 01:49:23 +02:00
Code Issues Releases Wiki Activity
3,684 Commits 3 Branches 3 Tags
25c1ed5d6b7ab9a6fab704b2bbd9b8062981924d
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Vadim Kurland 25c1ed5d6b new build 3478 2011-02-16 13:29:09 -08:00
Vadim Kurland 9ae36f6632 see #2103 added checkbox to disable interface name validation checks and autoconfiguration of vlan interface IDs 2011-02-16 13:27:38 -08:00
Vadim Kurland 4d9abebb64 new build, reran tests for ipt 2011-02-15 14:29:43 -08:00
Vadim Kurland 0df4ae9abd * ActionsDialog.cpp (setRule): see #1871 "PF Actions Tag and 
Classify can be terminating or non-terminating". Added checkbox to
the action properties dialog for actions Tag and Classify for PF
that lets the user choose if these actions should be terminating
or not. Old behavior (Tag was non-terminating and Classify was
terminating) is reflected in default settings of the checkboxes.
Terminating rules generate "pass quick" commands, while
non-terminating rules generate "pass" commands (no "quick" option).
 2011-02-15 14:20:27 -08:00
Vadim Kurland bee424b3d0 fixes #2091 ethernet intrface options a used twice if the interface is a bridge port 2011-02-14 16:08:54 -08:00
Vadim Kurland ec5bb2290d fixes #2092 parameter "stp" is now optional and is controlled by a checkbox in the interface settings dialog 2011-02-14 15:53:55 -08:00
Vadim Kurland b5d57a740b fixes #2092 parameter "stp" is now optional and is controlled by a checkbox in the interface settings dialog 2011-02-14 15:15:23 -08:00
Vadim Kurland d0dc616de5 Merge branch 'development' of ssh://git@vc.netcitadel.com:2222/var/git/fwbuilder into development 2011-02-14 12:10:44 -08:00
Vadim Kurland c4d049a180 see #2087 "schedule reboot" controls should be disabled when test run install mode is turned off 2011-02-14 12:10:28 -08:00
Vadim Kurland d9210e4678 fixes #1866, #1868, #1869 pf options set state-policy, set block-policy, set debug 2011-02-14 11:52:31 -08:00
Vadim Kurland c5b9613cdd fixes #1866, 1868, 1869 pf options set state-policy, set block-policy, set debug 2011-02-14 11:52:09 -08:00
Vadim Kurland 40a2f20e24 fixes #1870 changed tooltips and checkboxes text to make it clear what these options do 2011-02-14 11:10:55 -08:00
Vadim Kurland cae3a06876 see #2088 fixed in another place where putty_session could not be initialized properly when there is no matching putty session in registry 2011-02-14 10:49:04 -08:00
Vadim Kurland 143594ddc7 see 2058 fixed mtu configuration commands generated for FreeBSD in shell script mode 2011-02-14 10:44:04 -08:00
Vadim Kurland 9ae141c3ae see #2074 on FreeBSD ifconfig does not understand parameter carpdev 2011-02-13 18:35:31 -08:00
Vadim Kurland 31bd33cfea see #2082 Crash when deleting Policy object from cluster 2011-02-13 18:26:32 -08:00
Vadim Kurland 7de1edab4b see #1867 Since action Tag is non-terminating, rules with 
this action should not shadow other rules.
 2011-02-13 18:03:12 -08:00
Vadim Kurland d2217033a4 see @088 need to initialize putty_session and clear it in clear() 2011-02-13 16:57:20 -08:00
Vadim Kurland 014120e627 see #2084 we do not need to fetch routing tables while collecting interface data 2011-02-13 09:26:03 -08:00
Vadim Kurland 4da7c66463 see #2084 we do not need to fetch routing tables while collecting interface data 2011-02-13 09:21:00 -08:00
Vadim Kurland da2c04e6f4 see #1895 added context menu item Expand/Collapse 2011-02-12 19:01:28 -08:00
Vadim Kurland 5e099e5c97 fixes #2083 additional services: rtmp, xmpp-client, xmpp-server, nrpe 2011-02-12 17:59:07 -08:00
Vadim Kurland b1d6640303 fixes #2083 additional services: rtmp, xmpp-client, xmpp-server, nrpe 2011-02-12 17:56:34 -08:00
Vadim Kurland 5cce2d20ae fixes #2081 upper limit for the mtu value for *BSD interfaces is now 9000 2011-02-12 17:20:22 -08:00
Vadim Kurland dc67f7c36c new build 3472 2011-02-11 14:59:02 -08:00
Vadim Kurland 0fb6031022 see #2037 I should get the list of firewalls that were compiled from compile_fw_list instead of install_fw_list because when I compile a cluster, its members appear in install_fw_list but they do not appear in compile_status 2011-02-11 14:48:41 -08:00
Vadim Kurland ecdaa6f486 * instDialog_ui_ops.cpp (verifyManagementAddress): see #2073 "Add 
additional information or workflow when no management inferface
configured". The error message shown to the user when no
interfaces has been marked as "management" is now more verbose and
provides instructions how to do this. Also, if user provided
alternative address to be used to communicate with the firewall,
the check for the management interface is not performed since it
is not needed.
 2011-02-11 14:24:09 -08:00
Vadim Kurland bc81cad569 see #2077 Setting correct state sync group type 2011-02-11 14:13:23 -08:00
Vadim Kurland 19b9b2482b see #2078 added verbose error 
message in a situation when "ifconfig carp0 create" command fails
to create CARP interface.
 2011-02-11 13:53:39 -08:00
Vadim Kurland 8f5eb194c9 see #2072 fwb_pf crashes when trying to compile an individual firewall that is part of a cluster 2011-02-11 13:19:31 -08:00
Vadim Kurland be38fc57ba see #2058 Ability to configure mtu and metric of regular inetrfaces 2011-02-11 13:00:40 -08:00
Vadim Kurland a13600adba new build 3471 2011-02-10 15:26:17 -08:00
Vadim Kurland 895131a557 fixed unit test 2011-02-10 15:20:31 -08:00
Vadim Kurland 04ef96c5fa see #2060 using correct syntax for commands to clear objects and object-groups on PIX 6.3 and other versions 2011-02-10 15:08:32 -08:00
Vadim Kurland 35749e782c fixes #1999 using tool "command" to make sure utilities we need are available and can be accessed either by full path or using PATH env variable; this includes logger as requested in the ticket 2011-02-10 14:53:44 -08:00
Vadim Kurland 6dfb33b7b2 new build 3470 2011-02-10 12:55:17 -08:00
Vadim Kurland c2b41c1f4b see #2071 vlandev missing in the vlan definition (when using rc.conf.local ) 2011-02-10 12:45:49 -08:00
Vadim Kurland 8d97c4ab6e fixes SF bug 3102044 "Colon in (runtime) Address Table name" 2011-02-10 12:12:26 -08:00
Vadim Kurland c5a0883f32 see #2070 fixing SF bug 3169045 2011-02-10 11:38:44 -08:00
Vadim Kurland 383d9e41d9 see #2069 PF: allow multiple objects in ODst of redirecting nat rule 2011-02-10 11:25:52 -08:00
Vadim Kurland 04a118ac0a see #1979 avoid replacing references to 0/0 (=="any") with references to the newly created network 2011-02-10 11:09:39 -08:00
Vadim Kurland 938a4534f3 see #2067 the tree now shows interface name and label if the label is not empty 2011-02-10 10:55:50 -08:00
Vadim Kurland 2657d3aad6 see #2066 fixed configlet code that retrieves list of existing vlans 2011-02-10 10:09:56 -08:00
Vadim Kurland 755d0d3c83 see #1931 made snmp timeouts appear in blue. why not. 2011-02-09 22:41:23 -08:00
Vadim Kurland b6b881af96 see #1931 Made "Parser error" message appear in bold red font in the importer log 2011-02-09 22:15:07 -08:00
Vadim Kurland 9292895800 see #2037 
Compile/install wizard should disable "Next" button
after compile phase is done if all firewalls failed to compile
with no errors.

see #2061
Added
bunch of common shell error messages to make sure installer
recognizes them and mark install as a failure even if ssh fails
to pass termination code.
 2011-02-08 20:20:01 -08:00
Vadim Kurland abcafdd4b3 still working on windows build failure; names for the items in BaseCompiler::termination_status shuld be unique; new build number 3466 2011-02-08 15:26:31 -08:00
Vadim Kurland 9ed6889906 fixing build on windows 2011-02-08 14:51:22 -08:00
Vadim Kurland 69896936ba see #2042 re-ran tests 2011-02-08 14:13:04 -08:00
Vadim Kurland 1460fef57f fixes #2042 add configlet and shell functions to manage bridge interfaces via shell script on OpenBSD and FreeBSD 2011-02-08 14:10:33 -08:00
Vadim Kurland 8d7fb06891 fixed unit test; new build number 3465 2011-02-08 12:00:11 -08:00
Vadim Kurland 78bb5a5ba7 fixes #2054 add support for load anchor command 2011-02-08 11:22:39 -08:00
Vadim Kurland 99a0b3d412 fixes #2055 Compiler shows success, but there was a fatal error in the config; the problem affected compilers for all platforms, not only pix 2011-02-07 23:05:27 -08:00
Vadim Kurland e2f05c1e0a see #2049 Installer reports success even if there was an error while creating static routes; new build 3462 2011-02-06 19:34:09 -08:00
Vadim Kurland 9ddfbe7f96 see #2000 updated text and diagram in the network zones page in new firewall wizard; new build number 3461 2011-02-06 15:37:27 -08:00
Vadim Kurland aded90dfce see #1888 fixed manifest parsing in FirewallInstaller::parseManifestLine() -- it was not getting remote file name properly 2011-02-06 15:30:03 -08:00
Vadim Kurland ba8c15e31d fixes #2040 rename functions in OSConfigurator_bsd 2011-02-06 15:09:44 -08:00
Vadim Kurland 242f0724c8 output ifconfig or update_addresses_of_interface lines in a stable order, sorted by interface name 2011-02-06 14:55:56 -08:00
Vadim Kurland d3a0e604c2 fixes #2041 combined bridge and ip address configuration in rc.conf should be generated 2011-02-06 13:49:32 -08:00
Vadim Kurland a28cdd359a see #1889, #2043 
Added support for bridge interface configuration in BSD.
 2011-02-06 13:10:46 -08:00
Vadim Kurland 8c4079051b fixes #2029 windows build failure 2011-02-05 22:53:58 -08:00
Vadim Kurland 3cbd7a10f4 new build 3460 2011-02-05 20:49:03 -08:00
Vadim Kurland e8d215534a fixes #2036 Setting the routing rule option affects all routing rules; There are no options for the FreeBSD routing rules, the dialog was an abberation. fixes #2035 Setting routing rule option does not trigger need to recompile flag 2011-02-05 20:43:15 -08:00
Vadim Kurland 47dd932529 see #2039 Installer reports success even if pfctl cant load config file 2011-02-05 20:36:24 -08:00
Vadim Kurland 7532c769a6 see #2038 pfctl error when firewall settings include scrub option for reassembly 2011-02-05 20:23:39 -08:00
Vadim Kurland 06f77e587c fixes #2030 FreeBSD Host OS Settings - duplicate entry for Packet Forwarding; new build 3459 2011-02-04 18:05:03 -08:00
Vadim Kurland 9d2eb88522 fixes #2032 (added dhcp inetrfaces to generated rc.conf.local); see #2028 tested basic static routees on FreeBSD in both shell and rc.conf formats 2011-02-04 17:57:01 -08:00
Vadim Kurland ceb6fc8865 fixes #2031 FreeBSD - firewall script command to delete existing routes fails 2011-02-04 16:32:08 -08:00
Vadim Kurland e56fc6971f new build 3458 2011-02-03 16:51:06 -08:00
Vadim Kurland e7083f157c fixes #2026 Compiler can now generate static routing configuration 
in rc.conf format for FreeBSD.
 2011-02-03 16:46:46 -08:00
Vadim Kurland 8fbb48b280 fixes #2021 since rc.conf format is only supported for FreeBSD, the option in the dialog should not be available for other OS 2011-02-03 16:06:13 -08:00
Vadim Kurland 8459b6e061 see #2023 refactoring determineOutputFileNames() 2011-02-03 15:44:24 -08:00
Vadim Kurland 424b6d0604 re-ran tests 2011-02-03 10:07:55 -08:00
Vadim Kurland 58ed0f4df2 re-ran tests 2011-02-03 10:06:20 -08:00
Vadim Kurland 2995ee37f5 re-ran tests 2011-02-03 10:03:49 -08:00
Vadim Kurland 5420f21ce1 re-ran tests 2011-02-03 09:56:08 -08:00
Vadim Kurland 129db6881c re-ran tests 2011-02-03 09:55:19 -08:00
Vadim Kurland 3d88c4ce46 fixes #2019 Cluster name is not prepended to the name of generated pf.conf file 2011-02-03 09:52:37 -08:00
Vadim Kurland 39eaf40722 see #1888, #2020, #2018 rc.conf format of the init script for PF on FreeBSD, includes inetrfaes. addresses, CARP, pfsync and pf initialization 2011-02-02 17:45:36 -08:00
Vadim Kurland 5f9e82fda1 fixes #2014 : I should add network_zone addttribute only if it is not empty, empty attribute violates DTD 2011-02-02 10:18:13 -08:00
Vadim Kurland 2b2d1e81a9 see #2015 ability to set the name of the initalizatio and .conf files for PF 2011-02-01 20:35:33 -08:00
Vadim Kurland bffebde77c see #2000 New dialog window in New Firewall wizard for ASA / PIX - Network Zone explanation; when network zone is set to "None", set attribute network_zone to an empty string 2011-01-30 16:23:12 -08:00
Vadim Kurland 83bfab658c see #1983 ASA multiple interfaces have the same security level; dialog used to show network address instead of the actual address assigned to interface in security level and network zone tables 2011-01-30 16:12:11 -08:00
Vadim Kurland 1fcd2b6128 see #2004 Crash when using Find-and-Replace on locked library; checking if object where I should make replacement is read-only 2011-01-30 15:59:26 -08:00
Vadim Kurland 7b0573c478 see #2006 clearing editor panel when data file panel is closed; new build 3455 2011-01-30 14:46:07 -08:00
Vadim Kurland 6bd9f1ca15 new build 3454 2011-01-28 16:48:26 -08:00
Vadim Kurland 93b3b12bab see #2000 Added page to the new firewall wizard to let the 
user configure network zones of interfaces when chosen firewall
platform supports network zones (only PIX/ASA right now).
 2011-01-28 16:43:13 -08:00
Vadim Kurland 670c6094de new build 3453 2011-01-28 13:19:04 -08:00
Vadim Kurland a8dd192bec see #1983 ASA multiple interfaces have the same security level; using QTableWidget with QSpinBox widgets in the last column to let the user edit secrity levels directly 2011-01-28 13:13:14 -08:00
Vadim Kurland e66f654a8a see #1983 "ASA multiple interfaces have the same security level". Algorithm that guesses security level recognizes interface labels that contain word "dmz". Interfaces that could not be recognized by their label and that have ip addresses not in RFC1918 ranges still get security level 0 2011-01-28 12:13:01 -08:00
Vadim Kurland 5ec0e428dd see #1998 update ChangeLog to reflect latest change 2011-01-28 09:58:25 -08:00
Vadim Kurland af349bf0f7 see #1998 instead of closing editor panel completely, I try to clear "find object" and "where used" subpanels. This is more compatible with previous behavior 2011-01-28 09:43:30 -08:00
Vadim Kurland eb984a4e39 new build 3452 2011-01-27 22:12:27 -08:00
Vadim Kurland 67c486194a see #1998 : closing editor panel when user closes project panel, it seems gui crashes on mac only if editor panel is open at the time when user coses project panel 2011-01-27 22:00:22 -08:00
Vadim Kurland 2d2267222b see #1998 some additional debug logging 2011-01-27 20:40:26 -08:00
Vadim Kurland 266bf34ecb see #1998 an attempt to make sure signals that we use to update state of the tree panel are disconnected when user closes project panel 2011-01-27 20:31:41 -08:00
Vadim Kurland 8e0159f197 see #1996 2011-01-27 19:23:53 -08:00
Vadim Kurland 9c5d492ed6 new build 3450 2011-01-27 13:19:02 -08:00
Vadim Kurland a67aaacb26 * IOSImporterRun.cpp (run): see #1931 "Update failed import 
behavior". Added meaningful error messages for when policy
importer fails to create firewall object or does not create
interface objects or any rules.
 2011-01-27 13:09:06 -08:00
Vadim Kurland b3f34b06ac * Rule.cpp (removeRef): fixes #1997 "add removeRef and addRef 
methods to class NATRule". Now undo and redo correctly remove and
restore references to NAT rule sets in NAT rules with action
Branch.
 2011-01-27 11:58:02 -08:00