onkelbeh/fwbuilder
1
0
Fork 0
mirror of https://github.com/fwbuilder/fwbuilder synced 2026-03-24 20:27:22 +01:00
Code Issues Releases Wiki Activity
3,991 Commits 3 Branches 3 Tags
Commit Graph

3991 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Vadim Kurland
30ee6d2f12 * PIXImporterNat.cpp (buildSNATRule): see #2319 "Imported nat 
rules with multi-line access-lists have only the first entry"
 2011-04-07 13:50:01 -07:00
Vadim Kurland
3af17b4404 * PIXImporterRun.cpp (run): see #2167 Implemented import of 
"names" and "name" commands in PIX/ASA configs.
 2011-04-07 12:53:31 -07:00
Vadim Kurland
3cb9ee856c using path "disk:" on FWSM to place generated config 2011-04-07 12:09:09 -07:00
Vadim Kurland
4d6302a4cc * CompilerDriver_pix_run.cpp (pixNetworkZoneChecks): see SF bug 
3213019 "FWSM Network zone and IPv6". Currently we do not support
ipv6 with PIX/ASA and FWSM. If user creates a group to be used as
network zone object and places ipv6 address in it, this address
should be ignored while compiling the policy but this should not
be an error.
 2011-04-07 11:05:46 -07:00
Vadim Kurland
c32da04d51 * FirewallInstaller.cpp (executeExternalInstallScript): see SF bug 
3212988 "external script makes getopt difficult". User-defined
parameters for the external script moved to the end of the command
line.
 2011-04-07 10:41:06 -07:00
Vadim Kurland
e541d4b1a1 updated activation path for FWSM; build 3519 2011-04-07 10:20:20 -07:00
Vadim Kurland
fdd5db5ded fixes #2317 fixed linking of PIXImport unit test 2011-04-05 21:23:01 -07:00
Vadim Kurland
b1ad1cbec1 fixes #2299 improvements in the log format of iptables and iosacl importers 2011-04-05 21:11:37 -07:00
Vadim Kurland
6f79c1d644 * pix.g (static_command_common_last_parameters): see #2314 "Import 
of static NAT statements drops netmask value and uses host
instead".  "Netmask" parameter of a "static" command applies to
the real address.
 2011-04-05 20:15:02 -07:00
Vadim Kurland
d5f95e0f2a * PIXImporterNat.cpp (buildDNATRule): see #2313 "NAT with 
access-list destination address and original service not set".
"Nat" and "static" commands that use access-list should import all
components of the access-list command (source, destination and
service/protocol).
 2011-04-05 19:59:13 -07:00
Vadim Kurland
e3383349b0 see #2312 During nat import extraneous address objects are created 2011-04-05 19:35:45 -07:00
Vadim Kurland
55da233d22 * PIXImporterNat.cpp (buildSNATRule): see #2310 "Imported global / 
nat rule has wrong interface defined". Importer mixed up inbound
and outbound interfaces in NAT commands created from combination
of "global" and "nat" PIX/ASA commands.
 2011-04-05 19:06:35 -07:00
Vadim Kurland
6fdbb3ecce using consistent warning announcement; updated unit test files see #2315 2011-04-05 18:59:56 -07:00
Vadim Kurland
e6e8455700 * pix.g (nat_new_top_level_command): since import of ASA8.3 
"new" nat commands is not implemented yet, importer should issue
a warning when such command is encountered. See #2315
 2011-04-05 18:55:53 -07:00
Vadim Kurland
327183c1f2 * FWObject.cpp (insert_before): see #2171 "Undoing delete of rule 
ends up with rules being created with duplicate rule
numbers". Also see #2172 "Crash when deleting rule - related to
#2171". When user deleted the last rule in a rule set, then used
Undo to restore it, the program lost track of rules in the rule
set and became unstable.
 2011-04-01 19:23:16 -07:00
Vadim Kurland
f6f28b983c see #2225 the GUI should open first non-standard library when user cereates new file 2011-04-01 18:57:24 -07:00
Vadim Kurland
8284337b2b some minor formatting 2011-04-01 18:39:06 -07:00
Vadim Kurland
b21a9b24ab * FWObject.cpp (shallowDuplicate): see #2286 "Crash when closing 
file". The GUI crashed if user imported iptables or pix
configuration, then deleted a rule and tried to close project
window.
 2011-04-01 18:38:48 -07:00
Vadim Kurland
73bf6aaee5 updated unit tests, fixed import of ssh commands, build 3617 2011-04-01 16:49:01 -07:00
Vadim Kurland
df7a58eb04 * PIXImporter.cpp (mirrorServiceObjectRecursively): see #2291 The 
same service object-group that matches some tcp or udp ports can
be used to match both source and destination ports in an
access-list command. Importer should recognize when such group
is used to match source ports and create mirrored group with
potentially mirrored service objects. This should work when group
includes other groups.

test cases in asa8.3-acl.test
 2011-04-01 16:24:33 -07:00
Vadim Kurland
a9b03dddad see #2306 fixed import of named service object description 2011-04-01 11:48:41 -07:00
Vadim Kurland
2ce8fd4444 fixes #2305 typo 2011-04-01 11:43:25 -07:00
Vadim Kurland
5c50ed0bfc see #2296 updated unit test files 2011-04-01 11:42:10 -07:00
Vadim Kurland
b4a8266b64 see #2296 added log records for access-list lines 2011-04-01 11:39:45 -07:00
Vadim Kurland
8a7ef98a4a fixes #2307 "GUI switches 
to another file after editor panel is closed"
 2011-04-01 11:28:30 -07:00
Vadim Kurland
46984edb42 fixing build on windows: "interface" is reserved word 2011-03-31 19:44:01 -07:00
Vadim Kurland
ace4ef025c fixing build on Ubuntu with older Qt 2011-03-31 18:19:21 -07:00
Vadim Kurland
3f07b14b02 delete rule sets created for acls used with nat and static commands 2011-03-31 18:13:04 -07:00
Vadim Kurland
0f9d714053 fixing windows build 2011-03-31 18:01:49 -07:00
Vadim Kurland
f04dc03fc6 see #2164 added import of http commands, import should not abort on "service" commands 2011-03-31 17:58:59 -07:00
Vadim Kurland
c126d30fca updated unit tests files 2011-03-31 15:09:33 -07:00
Vadim Kurland
1e72dc4085 fixes #2303 removed temporary warning saying import of pix rules is not simplemented 2011-03-31 15:08:10 -07:00
Vadim Kurland
6808fb5693 see #2302 logging errors instead of aborting 2011-03-31 15:05:17 -07:00
Vadim Kurland
aba4e28e9c see #2301 added test case 2011-03-31 14:00:43 -07:00
Vadim Kurland
83e1804872 see #2300 fix import of access list with both source and destination in-line port matches 2011-03-31 13:57:18 -07:00
Vadim Kurland
46cf58e1ff fixes #2296 added line numbers in front of importer progress log lines 2011-03-31 12:40:29 -07:00
Vadim Kurland
01e45b8915 see #2296 using addMessageToLog() everywhere 2011-03-31 12:34:27 -07:00
Vadim Kurland
05c24a4719 * PIXImporterNat.cpp (buildSNATRule): import of PIX/ASA "global" 
and "nat" commands works.
 2011-03-31 12:09:35 -07:00
Vadim Kurland
94060ff659 updated unit tests, started work on the grammar for "global" and "nat" commands 2011-03-31 10:37:40 -07:00
Vadim Kurland
5c42a61246 parsing "ssh version 2" 2011-03-30 19:34:41 -07:00
Vadim Kurland
2e7377bbf6 * PIXImporterNat.cpp (buildDNATRule): import of PIX/ASA "static" 
commands works for the most part. Needs more testing.
 2011-03-30 19:30:52 -07:00
Vadim Kurland
4f811091f5 split unit tests to keep all nat tests separate; first crack and pix grammar to import nat 2011-03-29 23:07:50 -07:00
Vadim Kurland
141e80f7c1 see #87 added unit tests for PIX import 2011-03-29 19:53:52 -07:00
Vadim Kurland
b4e4678c81 testing import with large real ASA config 2011-03-28 18:46:31 -07:00
Vadim Kurland
86e06e9071 pix grammar fixes to minimize nondeterminism warnings 2011-03-28 18:23:30 -07:00
Vadim Kurland
760400254c see #2225 never show deleted objects lib when user starts the GUI 2011-03-28 17:55:48 -07:00
Vadim Kurland
568e9c9912 * ObjectManipulator.cpp (getDeleteMenuState): see #2226 fixed GUI 
crash that happened when user tried to delete or cut an object
from locked library.
 2011-03-28 17:47:13 -07:00
Vadim Kurland
e4b711d178 * RuleOptionsDialog.cpp (loadFWObject): see #2230 the GUI should 
allow limit-burst values of up to 10000
 2011-03-28 17:39:35 -07:00
Vadim Kurland
a29ce3f54d see #2281 fixed import of log with or without log level, with or wiithout interval 2011-03-28 17:35:36 -07:00
Vadim Kurland
9da3ca447a see #2164 fixes import of ssh and telnet commands (source address or network should be recreated) 2011-03-27 23:17:00 -07:00