Vadim Kurland
7e312722dc
added test case for a group of hosts with mac addresses in a nat rule (SF bug should be opened later); re-ran tests
2011-02-27 22:37:16 -08:00
Vadim Kurland
e84751e95c
see #2008 compiler avoids INPUT/OUTPUT chain if interface in the rule column "Interface" is a bridge port and firewall is bridging firewall (which means we are going to use --physdev-in or --physdev-out option for this rule)
2011-02-21 17:06:43 -08:00
Vadim Kurland
56f81407f1
fixes #2124 some error messages get multiplied when compiler splits rules
2011-02-20 21:32:58 -08:00
Vadim Kurland
2b342aa67d
see #2057 detection of loops in branching rules ; see #2124 some error messages appeared multiple times in generated script
2011-02-20 20:12:18 -08:00
Vadim Kurland
f817ddfe24
see #133 test case for SF feature request 1954286
2011-02-20 17:34:36 -08:00
Vadim Kurland
6f5f1ac075
fixes #153 Deprecate Rule::getInterfaceStr() fixes #2123 deprecate rule processor convertInterfaceIdToStr
2011-02-20 17:27:24 -08:00
Vadim Kurland
aea53d35eb
see #2116 "When CARP interface IP address cant be assigned error or warning should appear". Script should abort if command trying to add an ip address to an interface fails
2011-02-19 15:33:30 -08:00
Vadim Kurland
2542b082f3
see #153 #2097 got rid of getInterfaceStr and getInterfaceId in policy and nat compilers for iptables
2011-02-18 18:48:16 -08:00
Vadim Kurland
faece9e40c
see #2097 more test cases with negation and vlan interfaces
2011-02-17 18:39:17 -08:00
Vadim Kurland
581ccdc68e
see #2097 #133 additional test cases
2011-02-17 18:01:45 -08:00
Vadim Kurland
d0ae7bac01
* NATCompiler_ipt.cpp (processNext): see #2097 #133 "support for
...
inbound and outbound interface columns in iptables NAT
rules". This also addresses SF feature requests 1954286 "DNAT with
interface as condition not possible" and 621023 "manipulating
interface in NAT rule".
2011-02-17 17:47:42 -08:00
Vadim Kurland
4d9abebb64
new build, reran tests for ipt
2011-02-15 14:29:43 -08:00
Vadim Kurland
35749e782c
fixes #1999 using tool "command" to make sure utilities we need are available and can be accessed either by full path or using PATH env variable; this includes logger as requested in the ticket
2011-02-10 14:53:44 -08:00
Vadim Kurland
8d97c4ab6e
fixes SF bug 3102044 "Colon in (runtime) Address Table name"
2011-02-10 12:12:26 -08:00
Vadim Kurland
8459b6e061
see #2023 refactoring determineOutputFileNames()
2011-02-03 15:44:24 -08:00
Vadim Kurland
2995ee37f5
re-ran tests
2011-02-03 10:03:49 -08:00
Vadim Kurland
78e177f759
see #1890 re-ran tests
2011-01-31 18:38:08 -08:00
Vadim Kurland
d331ee7840
fixes #1966 IOSACL: object-group can get name that consists of only suffix
2011-01-24 18:28:48 -08:00
Vadim Kurland
15f8ba513c
fixes #1956 rule processor NATCompiler_ipt::splitServices is redundant
2011-01-18 14:44:53 -08:00
Vadim Kurland
104a1bc287
using common rule processor separateSrcAndDstPort instead of the one specifically implemented only for iptables; Added Makefile to ipt test files in order to be able to run tests in parallel
2011-01-17 19:26:30 -08:00
Vadim Kurland
24ac2b56ac
fixed #1905 , #1879
2011-01-10 16:43:43 -08:00
Vadim Kurland
83646b91fa
minor refactoring in NATCompiler::ExpandMultipleAddresses::processNext to include SDNAT rules; rerun tests
2011-01-07 13:27:37 -08:00
Vadim Kurland
00127aac9f
fixes #1892 move rule processor class separateServiceObject to PolicyCompiler
2011-01-04 12:00:09 -08:00
Vadim Kurland
d3bfdcf0f7
removed {{$build}} from top_comment configlets since we do not have build number variable anymore
2011-01-03 13:23:17 -08:00
Vadim Kurland
abf2b3b2be
checking in "golden" test files
2011-01-03 13:01:06 -08:00
Vadim Kurland
Vadim Kurland
Vadim Kurland