Vadim Kurland
599ab65492
fixed SF bug 2973137
2010-03-20 00:17:28 +00:00
Vadim Kurland
e308942369
fixed SF bug 2973221 "single rule compile (x) results in sigsegv".
2010-03-19 22:49:48 +00:00
Vadim Kurland
11d667ecf2
fixed #1347 : ssh cancel rule install sigsegv SF bug 2973136
2010-03-19 22:46:53 +00:00
Vadim Kurland
6c5b8b3b32
fixed SourceForge bug 2973121: Added support
...
for FWSM v4.x
2010-03-19 22:33:23 +00:00
Vadim Kurland
a25878ab6e
fixed SourceForge bug 2973079
2010-03-19 21:58:25 +00:00
Reto Buerki
165ebf427a
VRRP: Make IPsec AH a configurable option.
2010-03-19 17:16:11 +00:00
Reto Buerki
f718ed189c
Remove trailing whitespaces.
2010-03-19 15:36:30 +00:00
Adrian-Ken Rueegsegger
a3bc82d6e9
Secuwall: Revert to default fw script installation.
2010-03-19 15:27:39 +00:00
Adrian-Ken Rueegsegger
b254704718
Secuwall: Do not add generated files to manifest.
2010-03-19 15:27:36 +00:00
Adrian-Ken Rueegsegger
48c43b57c0
Secuwall: Omit inherited functions.
2010-03-19 15:27:33 +00:00
Adrian-Ken Rueegsegger
b319f05dcc
Secuwall: Rework interface file generation.
...
Patch contributed by Joerg Marx.
2010-03-19 15:27:30 +00:00
Adrian-Ken Rueegsegger
8c966aa710
Secuwall: Generate 2048 bit ssh keys.
...
Patch contributed by Joerg Marx.
2010-03-19 15:27:27 +00:00
Adrian-Ken Rueegsegger
341507d99e
Secuwall: Add rules for configured DNS servers.
...
Patch contributed by Joerg Marx.
2010-03-19 15:27:23 +00:00
Reto Buerki
149d96a75c
Add rule to allow IPsec AH protected VRRP traffic.
...
According to RFC 2338 section 5.3.6.3, VRRP exchanges can be
integrity protected using IPsec AH.
Patch contributed by Joerg Marx.
2010-03-19 14:09:04 +00:00
Vadim Kurland
b8f059fcf1
* fixed SourceForge bug #2972699 "fwsm/pix syslog name". The dialog
...
only accepts ip address for the syslog server.
2010-03-19 04:20:03 +00:00
Vadim Kurland
23d5ab4370
* configlets/ipfw/script_skeleton: fixed #1335 "Empty functions in
...
ipfw script". Under some circumstances shell functions in the
generated ipfw script could have no body; /bin/sh does not like
that.
2010-03-19 03:15:09 +00:00
Vadim Kurland
5c67aa08f1
fixes #1340
...
firewall object created from template does not inherit fw and host
os settings; set "stateless rule " option in template rules
where it makes sense; turned ip forwarding and "assume fw is part
of any" in the "web server" template object.
2010-03-18 21:24:55 +00:00
Roman Bovsunivskiy
9b2ef452fb
AddreessRangeDialog test
2010-03-18 18:51:13 +00:00
Vadim Kurland
a0e953a5b8
tests for anti-spoofing rules when ip forwarding and "assume fw is part of any" are turned off. See #1338
2010-03-18 18:27:39 +00:00
SVN User
ec251ede27
* RCS.cpp, FWWindow.cpp: Fixed #1334 Program failed to open data
...
file on Windows if it was stored on mounted network volume.
"File/Open" operation terminated with no error but did not load
the file. "File/Open Recent" ended with an error message that
quoted file path as somehting like this:
"Volume{3c50bdba-21b0-4ea5-b52f-aa5d9755f918}/test1.fwb"
which was obviously incorrect and the file could not be loaded.
2010-03-16 22:31:45 +00:00
Vadim Kurland
c69b8f3188
more debugging for #1334
2010-03-16 19:04:04 +00:00
Roman Bovsunivskiy
f4f0855bfc
Unit test for ObjectManipulator::editSelectedObject ( Fixed #1332 ).
...
QTest::mouseDClick does not work as it should, so i am calling om->editSelectedObject directly.
2010-03-16 17:32:18 +00:00
Vadim Kurland
8068056ae0
added a comment
2010-03-16 16:53:10 +00:00
Vadim Kurland
5764378004
renaming variable management_address see #1333
2010-03-15 23:05:17 +00:00
Vadim Kurland
365f9d9154
changelog record
2010-03-15 21:10:57 +00:00
Vadim Kurland
3169f643c5
* PolicyCompiler_PrintRule.cpp (PrintRule::_printOptionalGlobalRules):
...
fixes #1333 "Add variable management_interface for the
automatic_rules configlet"
2010-03-15 21:10:16 +00:00
Vadim Kurland
fca8316205
changelog records
2010-03-15 16:07:40 +00:00
Vadim Kurland
c1d8901854
* ObjectManipulator.cpp (ObjectManipulator::editSelectedObject):
...
change in the behavior of double click in the tree. Open rule set
object in the editor if it is already opened in RuleSetView. If we
just opened it in RuleSetView, check if the editor is visible and
if yes, open the object in the editor right away. Fixes #1331
2010-03-15 16:05:34 +00:00
Vadim Kurland
6c06a6523d
fixes #1326 MDI subwindow title is left "Untitled" when GUI starts with a file on the command line
2010-03-13 17:43:29 +00:00
Vadim Kurland
5a1aa6ceb3
using file name for the floating tree panel title. See #2714
2010-03-13 17:37:24 +00:00
Roman Bovsunivskiy
4c625cdd7d
Object tree now has title when it is deatached ( Fixed #1317 )
2010-03-13 17:04:05 +00:00
Adrian-Ken Rueegsegger
127d675b0d
Secuwall: Skip SSH key generation if disabled.
2010-03-12 14:21:00 +00:00
Reto Buerki
e4b3646884
Only append unique iface names to interfaces_to_check.
...
This is needed to avoid duplicate names when compiling a cluster
which uses the same interface names as the firewall members.
2010-03-12 11:39:26 +00:00
Reto Buerki
e439483def
Update cluster README.
2010-03-12 11:39:22 +00:00
Reto Buerki
09f24b917a
Rename cluster vrrpX interfaces to ethX in example.
2010-03-12 11:39:20 +00:00
Reto Buerki
592e77cdc6
Update os default options in cluster example file.
2010-03-12 11:39:16 +00:00
Reto Buerki
16cdc5967c
Update secunet wall os default options.
2010-03-12 11:39:10 +00:00
Roman Bovsunivskiy
4ecc219890
Added and fixed headers
2010-03-10 18:22:19 +00:00
Roman Bovsunivskiy
2250a653f0
RCS test works again ( Fixed #1319 )
2010-03-10 17:11:26 +00:00
Roman Bovsunivskiy
06397fe6de
FWWindow::checkForUpgrade test ( Fixed #1312 )
2010-03-10 16:58:59 +00:00
Vadim Kurland
9671591ded
fixes #1323 show startup tip after the file is loaded
2010-03-09 16:48:42 +00:00
Adrian-Ken Rueegsegger
70f9b6ac50
Secuwall: Use configlets to generate script ( Fixes #510 ).
...
Patch contributed by Joerg Marx.
2010-03-09 15:09:39 +00:00
Adrian-Ken Rueegsegger
ecb8ca2bd6
Secuwall: Add getMgmtInterfaces() function.
...
This function returns the names of all management interfaces in
a string vector.
Patch contributed by Joerg Marx.
2010-03-09 15:09:35 +00:00
Adrian-Ken Rueegsegger
85bc476880
OSConfigurator_secuwall: Multi-interface support.
...
Patch contributed by Joerg Marx.
2010-03-09 15:09:32 +00:00
Adrian-Ken Rueegsegger
a46dc53bf2
OSConfigurator_Secuwall: Delete stale interface files.
...
Patch contributed by Joerg Marx.
2010-03-09 15:09:29 +00:00
Adrian-Ken Rueegsegger
6bf2216571
OSConfigurator_Secuwall: Truncate files per default.
...
Patch contributed by Joerg Marx.
2010-03-09 15:09:26 +00:00
Adrian-Ken Rueegsegger
f18d4fcd8a
Use Boolean as second argument in setBool() calls.
...
Patch contributed by Joerg Marx.
2010-03-09 15:09:23 +00:00
Reto Buerki
de90ae3474
Refs #1305 : Display warning in bold letters.
2010-03-09 10:11:53 +00:00
Reto Buerki
cd90b0dfbc
Minor: Fix typo.
2010-03-09 09:55:24 +00:00
Illya Yalovoy
26496865a8
changelog update
2010-03-08 20:18:36 +00:00
