onkelbeh/fwbuilder
1
0
Fork 0
mirror of https://github.com/fwbuilder/fwbuilder synced 2026-09-16 01:49:23 +02:00
Code Issues Releases Wiki Activity
3,766 Commits 3 Branches 3 Tags
30db079476409c12ef3ed35bf26ad8e2d16c361d
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Vadim Kurland 30db079476 fixes #2159; also using macros for discovery druid page numbers 2011-02-27 12:54:08 -08:00
Vadim Kurland 689e54005d see #2160 "Installer reports error "Generated script file 
<firewall>.fw not found."". The problem was intorduced earlier
while fixing #2047
 2011-02-27 12:39:22 -08:00
Vadim Kurland 73500e15c5 see #2153 Wizard shows 
additional page when user imports PIX/ASA config. This page
explains concept of network zones and offers UI to let them choose
network objects or groups as a network zone of each interface.
 2011-02-26 20:45:57 -08:00
Vadim Kurland 849482d15d see #2153 added page with network zones explanation and widget; not functional yet but wizard navigates to it 2011-02-26 20:26:51 -08:00
Vadim Kurland ff53d6bd07 see #2145 Vlan interfaces discovered in the process of PIX configuration 
import should be created as subinterfaces of the corresponding
parent with correct interface type and vlan id.
 2011-02-26 12:17:23 -08:00
Vadim Kurland 1714e27233 see #2146 Issue a warning when 
parser encounters "standby" parameter in an interface
configuration. We do not support import of PIX failover
configuration at this time.
 2011-02-26 11:09:38 -08:00
Vadim Kurland 1258c4580e new build 3488; see #2147 "ASA Import - some versions are not detected correctly". SEtting version in the created firewall object to the best match of the version found in imported config 2011-02-26 10:45:40 -08:00
Vadim Kurland 59562d852c see #87 tested parser on pix6, pix7 and asa8 configs, making sure it parses different interface configurations correctly 2011-02-25 20:40:04 -08:00
Vadim Kurland dfb9983a7c see #87 fixed unit tests 2011-02-25 17:52:32 -08:00
Vadim Kurland 3f3a9030b9 see #87 changing explanation text in discovery druid page when user selects PIX; using #define to refer to import platform choices; better fix for the crash on open of discover druid (see #2144) 2011-02-25 17:34:15 -08:00
Vadim Kurland ef575257f1 Merge branch 'development' into pix_import 2011-02-25 17:15:11 -08:00
Vadim Kurland e0ac139d78 fixes #2144 GUI crash when user clicks "Import firewall configuration" shortcut button; new build 3487 2011-02-25 17:14:53 -08:00
Vadim Kurland db4d501ece see #87 import of interfaces for pix6,7 and 8 works. PArsing inetrface name, label, security level, address 2011-02-25 16:43:25 -08:00
Vadim Kurland e799b24496 see #87 minimal grammar, importer classes 2011-02-25 14:02:32 -08:00
Vadim Kurland c1eff2c7f9 renamed class AddressTableEditor to TextFileEditor 2011-02-24 11:16:54 -08:00
Vadim Kurland d841231a28 * AddressTableDialog.cpp (browse): see #2140 "Attempting to create 
new Address Table file results in read-only error". Implemented
support for the workflow when user wants to create the file used
to feed addresses to the AddressTable object.
 2011-02-24 11:10:52 -08:00
Vadim Kurland da776105be see #2139 show warning dialog and offer choice: open file for veiwing read-only or cancel 2011-02-24 10:19:46 -08:00
Vadim Kurland 25fa09d626 see #2135 Editing table objects 2011-02-23 19:28:22 -08:00
Vadim Kurland 222ff26e14 fixed unit test 2011-02-22 16:49:09 -08:00
Vadim Kurland 1aa38dc375 fixed unit test 2011-02-22 16:32:27 -08:00
Vadim Kurland e84751e95c see #2008 compiler avoids INPUT/OUTPUT chain if interface in the rule column "Interface" is a bridge port and firewall is bridging firewall (which means we are going to use --physdev-in or --physdev-out option for this rule) 2011-02-21 17:06:43 -08:00
Vadim Kurland 8ee59ebbf8 * newFirewallDialog.cpp (monitor): see #2126 Using snmp sysDescr 
OID to guess version of the new firewall when it is created using
snmp polling.
 2011-02-21 16:34:29 -08:00
Vadim Kurland cdbd1e35c3 see #1990 newly created PIX/ASA firewalls now have "generate outbound acl" option turned on by default 2011-02-21 15:11:47 -08:00
Vadim Kurland b42fe3e802 see #1678 When creating a firewall from template it appears that a default template is selected 2011-02-21 13:52:09 -08:00
Vadim Kurland cc509571f3 upgraded templartes.xml 2011-02-21 13:42:44 -08:00
Vadim Kurland 264d6bc3ee see #1971 dialog does not let user enter range end address lower than range start address 2011-02-21 13:35:13 -08:00
Vadim Kurland 0c1031aebf see #2085 modify platform name for Cisco IOS ACL 2011-02-21 13:21:41 -08:00
Vadim Kurland 886cfbea86 see #2113 removed unused function guessSecurityLevel (the second form that takes list of InterfaceData) 2011-02-21 13:21:17 -08:00
Vadim Kurland 49e79663a8 see #2113 looks like I need to support at least three patterns to cver different versions of PIX and ASA software. Moving routines that guess label and security level to platforms.cpp so I can use QString 2011-02-21 13:04:11 -08:00
Vadim Kurland f909d073eb see #2113 added pattern for ASA interface descriptions which is different from PIX interface descirptions 2011-02-21 12:20:21 -08:00
Vadim Kurland 966533a672 see #2113 added pattern for ASA interface descriptions which is different from PIX interface descirptions 2011-02-21 11:33:25 -08:00
Vadim Kurland 56f81407f1 fixes #2124 some error messages get multiplied when compiler splits rules 2011-02-20 21:32:58 -08:00
Vadim Kurland 2b342aa67d see #2057 detection of loops in branching rules ; see #2124 some error messages appeared multiple times in generated script 2011-02-20 20:12:18 -08:00
Vadim Kurland 344010c873 see #1920 Setting host interface to unnumbered after it has been assigned IP address doesnt have desired effect 2011-02-20 18:11:16 -08:00
Vadim Kurland e9e7f89cf2 see #1920 Setting host interface to unnumbered after it has been assigned IP address doesnt have desired effect 2011-02-20 18:03:21 -08:00
Vadim Kurland 37ab989922 see #1877 added test case for this 2011-02-20 17:45:46 -08:00
Vadim Kurland f817ddfe24 see #133 test case for SF feature request 1954286 2011-02-20 17:34:36 -08:00
Vadim Kurland 6f5f1ac075 fixes #153 Deprecate Rule::getInterfaceStr() fixes #2123 deprecate rule processor convertInterfaceIdToStr 2011-02-20 17:27:24 -08:00
Vadim Kurland 926db9b942 see #153 deprecating getInterfaceStr: eliminated use of this function in policy compiler for PIX and IOS ACL 2011-02-20 16:11:29 -08:00
Vadim Kurland c272997b6b see #2098 support for interfaces in PIX/ASA NAT rules; see #153 deprecating Rule::getInterfaceStr() 2011-02-19 19:15:54 -08:00
Vadim Kurland 4136d63957 see #2098 support for interfaces in PIX/ASA NAT rules; see #153 deprecating Rule::getInterfaceStr() 2011-02-19 19:13:01 -08:00
Vadim Kurland ccbe413c22 upgraded regression tests data fles 2011-02-19 16:29:43 -08:00
Vadim Kurland ad5a140932 see #2087 disabling "reboot" checkbox when "test run" is unchecked 2011-02-19 16:21:04 -08:00
Vadim Kurland 73c31a589f see #2117 CARP interfaces in cluster that use VLAN interaces have no interface set to MASTER 2011-02-19 16:17:25 -08:00
Vadim Kurland aea53d35eb see #2116 "When CARP interface IP address cant be assigned error or warning should appear". Script should abort if command trying to add an ip address to an interface fails 2011-02-19 15:33:30 -08:00
Vadim Kurland 3a871d5f06 getting rid of sprintf where I can 2011-02-18 22:25:52 -08:00
Vadim Kurland a8b65e6506 getting rid of sprintf where I can 2011-02-18 22:09:50 -08:00
Vadim Kurland 66681b9695 see #153 #133 got rid of getInterfaceStr and getInterfaceId in policy and nat compilers for PF 2011-02-18 18:54:21 -08:00
Vadim Kurland 2542b082f3 see #153 #2097 got rid of getInterfaceStr and getInterfaceId in policy and nat compilers for iptables 2011-02-18 18:48:16 -08:00
Vadim Kurland df39b1d0fd new build 3481 2011-02-17 19:38:26 -08:00
Vadim Kurland 8c78deb9b9 fixes #2114 invalid XML is created when interface object is duplicated 2011-02-17 18:50:33 -08:00
Vadim Kurland faece9e40c see #2097 more test cases with negation and vlan interfaces 2011-02-17 18:39:17 -08:00
Vadim Kurland 698286100a see #133 #2097 skip bridge ports while doing negation in interface column, unless firewall is a bridge 2011-02-17 18:33:44 -08:00
Vadim Kurland 581ccdc68e see #2097 #133 additional test cases 2011-02-17 18:01:45 -08:00
Vadim Kurland 6f30bc3446 * NATCompiler_ipt.cpp (processNext): see #2097 #133 "support for 
inbound and outbound interface columns in iptables NAT
rules". This also addresses SF feature requests 1954286 "DNAT with
interface as condition not possible" and 621023 "manipulating
interface in NAT rule".
 2011-02-17 17:48:04 -08:00
Vadim Kurland d0ae7bac01 * NATCompiler_ipt.cpp (processNext): see #2097 #133 "support for 
inbound and outbound interface columns in iptables NAT
rules". This also addresses SF feature requests 1954286 "DNAT with
interface as condition not possible" and 621023 "manipulating
interface in NAT rule".
 2011-02-17 17:47:42 -08:00
Vadim Kurland 5162212073 see #2097 #133 : no need to replace cluster interfaces with member interfaces in NATCompiler_pf::AssignInterface::processNext() since it was already done in replaceClusterInterfaceInItfOutb 2011-02-17 15:36:28 -08:00
Vadim Kurland cf17bb995c see #2097 showing "interface" columns in iptables NAT ruels 2011-02-17 15:27:37 -08:00
Vadim Kurland f8b668e691 see #2101 setting master advskew to 10 and default advskew to 20 2011-02-17 15:02:45 -08:00
Vadim Kurland b116a2ac23 see #2110 VLAN interfaces are disabled in new cluster configuration 2011-02-17 14:54:56 -08:00
Vadim Kurland 91f16fb85a documenting decision to stop making builds on Hardy. See #2107 2011-02-17 14:36:17 -08:00
Vadim Kurland fdb899bdd2 * NATCompiler_ipf.cpp (processNext): see #133, fixes #2108 making 
nat compiler for ipfilter work with interface column, however the
column is not exposed to the user. Compiler behavior should be
backwards compatible with older versions of fwbuilder.
 2011-02-17 12:06:50 -08:00
Vadim Kurland 100dca74bb * NATCompiler_pf.cpp (processNext): see #133. MErged code from the 
branch, running tests. Making sure rules that have firewall
object in ODst and interface columnblank end up with rdr command
without "on interface" clause as before.
 2011-02-17 11:50:14 -08:00
Vadim Kurland ee2204086e new build 3479a 2011-02-16 20:03:44 -08:00
Vadim Kurland c042430cb2 merged from branch development; see #2095 "Support for interface groups in "nat" and "rdr" rules", see #2096 "support for negation in "Interface" column of PF NAT rules" 2011-02-16 19:55:07 -08:00
Vadim Kurland 59dc81c424 see #2100 carp password should be optional 2011-02-16 16:48:29 -08:00
Vadim Kurland 55973a585f fixes #2094 2011-02-16 16:38:36 -08:00
Vadim Kurland 8b158c0a74 * OSConfigurator_bsd_interfaces.cpp (configureInterfaces): make 
sure we print "ifconfig" commands for mtu and other parameters for
all interfaces, including those with no ip addresses and bridge
ports (unnumbered interfaces used to be skipped before)
 2011-02-16 16:23:54 -08:00
Vadim Kurland 8de52b3f06 fixes #2093 build failed because function QStringList::removeDuplicates() is only available in Qt 4.5 2011-02-16 15:49:02 -08:00
Vadim Kurland 174686d281 * ObjectTreeView.cpp (startDrag): fixes #2099 "Object list scrolls 
up to the last edited object". Object tree used to scroll
spontaneously when user started dragging an object from it to a
rule.
 2011-02-16 15:33:07 -08:00
Vadim Kurland 1f8363c84e * configlets/bsd/update_vlans: see #2105: generated script now 
supports vlan interfaces with names that do not match vlan IDs
(OpenBSD, FreeBSD, shell script format).
 2011-02-16 15:22:47 -08:00
Vadim Kurland f4858bfc83 fixes #2106 avoid adding pfsync_enable line if it is not needed in rc.conf format 2011-02-16 14:47:10 -08:00
Vadim Kurland a58445ed16 see #1807, #2104 arrange interface configuration commands in the 
generated scritpt in such order that bridge and carp interfaces
are configured after all other interfaces are done.
 2011-02-16 14:42:06 -08:00
Vadim Kurland 25c1ed5d6b new build 3478 2011-02-16 13:29:09 -08:00
Vadim Kurland 9ae36f6632 see #2103 added checkbox to disable interface name validation checks and autoconfiguration of vlan interface IDs 2011-02-16 13:27:38 -08:00
Vadim Kurland 6135cf8acb see #133 added support for inbound and outbound interfaces in nat rules (DTD, libfwbuilder API); added support for an interface column in PF NAT rules (using outbound interface rule element): changes in GUI and compiler 2011-02-15 18:56:05 -08:00
Vadim Kurland 4d9abebb64 new build, reran tests for ipt 2011-02-15 14:29:43 -08:00
Vadim Kurland 0df4ae9abd * ActionsDialog.cpp (setRule): see #1871 "PF Actions Tag and 
Classify can be terminating or non-terminating". Added checkbox to
the action properties dialog for actions Tag and Classify for PF
that lets the user choose if these actions should be terminating
or not. Old behavior (Tag was non-terminating and Classify was
terminating) is reflected in default settings of the checkboxes.
Terminating rules generate "pass quick" commands, while
non-terminating rules generate "pass" commands (no "quick" option).
 2011-02-15 14:20:27 -08:00
Vadim Kurland bee424b3d0 fixes #2091 ethernet intrface options a used twice if the interface is a bridge port 2011-02-14 16:08:54 -08:00
Vadim Kurland ec5bb2290d fixes #2092 parameter "stp" is now optional and is controlled by a checkbox in the interface settings dialog 2011-02-14 15:53:55 -08:00
Vadim Kurland b5d57a740b fixes #2092 parameter "stp" is now optional and is controlled by a checkbox in the interface settings dialog 2011-02-14 15:15:23 -08:00
Vadim Kurland d0dc616de5 Merge branch 'development' of ssh://git@vc.netcitadel.com:2222/var/git/fwbuilder into development 2011-02-14 12:10:44 -08:00
Vadim Kurland c4d049a180 see #2087 "schedule reboot" controls should be disabled when test run install mode is turned off 2011-02-14 12:10:28 -08:00
Vadim Kurland d9210e4678 fixes #1866, #1868, #1869 pf options set state-policy, set block-policy, set debug 2011-02-14 11:52:31 -08:00
Vadim Kurland c5b9613cdd fixes #1866, 1868, 1869 pf options set state-policy, set block-policy, set debug 2011-02-14 11:52:09 -08:00
Vadim Kurland 40a2f20e24 fixes #1870 changed tooltips and checkboxes text to make it clear what these options do 2011-02-14 11:10:55 -08:00
Vadim Kurland cae3a06876 see #2088 fixed in another place where putty_session could not be initialized properly when there is no matching putty session in registry 2011-02-14 10:49:04 -08:00
Vadim Kurland 143594ddc7 see 2058 fixed mtu configuration commands generated for FreeBSD in shell script mode 2011-02-14 10:44:04 -08:00
Vadim Kurland 9ae141c3ae see #2074 on FreeBSD ifconfig does not understand parameter carpdev 2011-02-13 18:35:31 -08:00
Vadim Kurland 31bd33cfea see #2082 Crash when deleting Policy object from cluster 2011-02-13 18:26:32 -08:00
Vadim Kurland 7de1edab4b see #1867 Since action Tag is non-terminating, rules with 
this action should not shadow other rules.
 2011-02-13 18:03:12 -08:00
Vadim Kurland d2217033a4 see @088 need to initialize putty_session and clear it in clear() 2011-02-13 16:57:20 -08:00
Vadim Kurland 014120e627 see #2084 we do not need to fetch routing tables while collecting interface data 2011-02-13 09:26:03 -08:00
Vadim Kurland 4da7c66463 see #2084 we do not need to fetch routing tables while collecting interface data 2011-02-13 09:21:00 -08:00
Vadim Kurland da2c04e6f4 see #1895 added context menu item Expand/Collapse 2011-02-12 19:01:28 -08:00
Vadim Kurland 5e099e5c97 fixes #2083 additional services: rtmp, xmpp-client, xmpp-server, nrpe 2011-02-12 17:59:07 -08:00
Vadim Kurland b1d6640303 fixes #2083 additional services: rtmp, xmpp-client, xmpp-server, nrpe 2011-02-12 17:56:34 -08:00
Vadim Kurland 5cce2d20ae fixes #2081 upper limit for the mtu value for *BSD interfaces is now 9000 2011-02-12 17:20:22 -08:00
Vadim Kurland dc67f7c36c new build 3472 2011-02-11 14:59:02 -08:00
Vadim Kurland 0fb6031022 see #2037 I should get the list of firewalls that were compiled from compile_fw_list instead of install_fw_list because when I compile a cluster, its members appear in install_fw_list but they do not appear in compile_status 2011-02-11 14:48:41 -08:00