Vadim Kurland
6135cf8acb
see #133 added support for inbound and outbound interfaces in nat rules (DTD, libfwbuilder API); added support for an interface column in PF NAT rules (using outbound interface rule element): changes in GUI and compiler
2011-02-15 18:56:05 -08:00
Vadim Kurland
4d9abebb64
new build, reran tests for ipt
2011-02-15 14:29:43 -08:00
Vadim Kurland
0df4ae9abd
* ActionsDialog.cpp (setRule): see #1871 "PF Actions Tag and
...
Classify can be terminating or non-terminating". Added checkbox to
the action properties dialog for actions Tag and Classify for PF
that lets the user choose if these actions should be terminating
or not. Old behavior (Tag was non-terminating and Classify was
terminating) is reflected in default settings of the checkboxes.
Terminating rules generate "pass quick" commands, while
non-terminating rules generate "pass" commands (no "quick" option).
2011-02-15 14:20:27 -08:00
Vadim Kurland
bee424b3d0
fixes #2091 ethernet intrface options a used twice if the interface is a bridge port
2011-02-14 16:08:54 -08:00
Vadim Kurland
ec5bb2290d
fixes #2092 parameter "stp" is now optional and is controlled by a checkbox in the interface settings dialog
2011-02-14 15:53:55 -08:00
Vadim Kurland
b5d57a740b
fixes #2092 parameter "stp" is now optional and is controlled by a checkbox in the interface settings dialog
2011-02-14 15:15:23 -08:00
Vadim Kurland
d0dc616de5
Merge branch 'development' of ssh://git@vc.netcitadel.com:2222/var/git/fwbuilder into development
2011-02-14 12:10:44 -08:00
Vadim Kurland
c4d049a180
see #2087 "schedule reboot" controls should be disabled when test run install mode is turned off
2011-02-14 12:10:28 -08:00
Vadim Kurland
d9210e4678
fixes #1866 , #1868 , #1869 pf options set state-policy, set block-policy, set debug
2011-02-14 11:52:31 -08:00
Vadim Kurland
c5b9613cdd
fixes #1866 , 1868, 1869 pf options set state-policy, set block-policy, set debug
2011-02-14 11:52:09 -08:00
Vadim Kurland
40a2f20e24
fixes #1870 changed tooltips and checkboxes text to make it clear what these options do
2011-02-14 11:10:55 -08:00
Vadim Kurland
cae3a06876
see #2088 fixed in another place where putty_session could not be initialized properly when there is no matching putty session in registry
2011-02-14 10:49:04 -08:00
Vadim Kurland
143594ddc7
see 2058 fixed mtu configuration commands generated for FreeBSD in shell script mode
2011-02-14 10:44:04 -08:00
Vadim Kurland
9ae141c3ae
see #2074 on FreeBSD ifconfig does not understand parameter carpdev
2011-02-13 18:35:31 -08:00
Vadim Kurland
31bd33cfea
see #2082 Crash when deleting Policy object from cluster
2011-02-13 18:26:32 -08:00
Vadim Kurland
7de1edab4b
see #1867 Since action Tag is non-terminating, rules with
...
this action should not shadow other rules.
2011-02-13 18:03:12 -08:00
Vadim Kurland
d2217033a4
see @088 need to initialize putty_session and clear it in clear()
2011-02-13 16:57:20 -08:00
Vadim Kurland
014120e627
see #2084 we do not need to fetch routing tables while collecting interface data
2011-02-13 09:26:03 -08:00
Vadim Kurland
4da7c66463
see #2084 we do not need to fetch routing tables while collecting interface data
2011-02-13 09:21:00 -08:00
Vadim Kurland
da2c04e6f4
see #1895 added context menu item Expand/Collapse
2011-02-12 19:01:28 -08:00
Vadim Kurland
5e099e5c97
fixes #2083 additional services: rtmp, xmpp-client, xmpp-server, nrpe
2011-02-12 17:59:07 -08:00
Vadim Kurland
b1d6640303
fixes #2083 additional services: rtmp, xmpp-client, xmpp-server, nrpe
2011-02-12 17:56:34 -08:00
Vadim Kurland
5cce2d20ae
fixes #2081 upper limit for the mtu value for *BSD interfaces is now 9000
2011-02-12 17:20:22 -08:00
Vadim Kurland
dc67f7c36c
new build 3472
2011-02-11 14:59:02 -08:00
Vadim Kurland
0fb6031022
see #2037 I should get the list of firewalls that were compiled from compile_fw_list instead of install_fw_list because when I compile a cluster, its members appear in install_fw_list but they do not appear in compile_status
2011-02-11 14:48:41 -08:00
Vadim Kurland
ecdaa6f486
* instDialog_ui_ops.cpp (verifyManagementAddress): see #2073 "Add
...
additional information or workflow when no management inferface
configured". The error message shown to the user when no
interfaces has been marked as "management" is now more verbose and
provides instructions how to do this. Also, if user provided
alternative address to be used to communicate with the firewall,
the check for the management interface is not performed since it
is not needed.
2011-02-11 14:24:09 -08:00
Vadim Kurland
bc81cad569
see #2077 Setting correct state sync group type
2011-02-11 14:13:23 -08:00
Vadim Kurland
19b9b2482b
see #2078 added verbose error
...
message in a situation when "ifconfig carp0 create" command fails
to create CARP interface.
2011-02-11 13:53:39 -08:00
Vadim Kurland
8f5eb194c9
see #2072 fwb_pf crashes when trying to compile an individual firewall that is part of a cluster
2011-02-11 13:19:31 -08:00
Vadim Kurland
be38fc57ba
see #2058 Ability to configure mtu and metric of regular inetrfaces
2011-02-11 13:00:40 -08:00
Vadim Kurland
a13600adba
new build 3471
2011-02-10 15:26:17 -08:00
Vadim Kurland
895131a557
fixed unit test
2011-02-10 15:20:31 -08:00
Vadim Kurland
04ef96c5fa
see #2060 using correct syntax for commands to clear objects and object-groups on PIX 6.3 and other versions
2011-02-10 15:08:32 -08:00
Vadim Kurland
35749e782c
fixes #1999 using tool "command" to make sure utilities we need are available and can be accessed either by full path or using PATH env variable; this includes logger as requested in the ticket
2011-02-10 14:53:44 -08:00
Vadim Kurland
6dfb33b7b2
new build 3470
2011-02-10 12:55:17 -08:00
Vadim Kurland
c2b41c1f4b
see #2071 vlandev missing in the vlan definition (when using rc.conf.local )
2011-02-10 12:45:49 -08:00
Vadim Kurland
8d97c4ab6e
fixes SF bug 3102044 "Colon in (runtime) Address Table name"
2011-02-10 12:12:26 -08:00
Vadim Kurland
c5a0883f32
see #2070 fixing SF bug 3169045
2011-02-10 11:38:44 -08:00
Vadim Kurland
383d9e41d9
see #2069 PF: allow multiple objects in ODst of redirecting nat rule
2011-02-10 11:25:52 -08:00
Vadim Kurland
04a118ac0a
see #1979 avoid replacing references to 0/0 (=="any") with references to the newly created network
2011-02-10 11:09:39 -08:00
Vadim Kurland
938a4534f3
see #2067 the tree now shows interface name and label if the label is not empty
2011-02-10 10:55:50 -08:00
Vadim Kurland
2657d3aad6
see #2066 fixed configlet code that retrieves list of existing vlans
2011-02-10 10:09:56 -08:00
Vadim Kurland
755d0d3c83
see #1931 made snmp timeouts appear in blue. why not.
2011-02-09 22:41:23 -08:00
Vadim Kurland
b6b881af96
see #1931 Made "Parser error" message appear in bold red font in the importer log
2011-02-09 22:15:07 -08:00
Vadim Kurland
4adafeb105
fixes #2033 Clarify platform selection for ASA/PIX
2011-02-09 16:36:14 -08:00
Vadim Kurland
16a51265ec
see #1931 added newlines between "PArser error" and other parts of the combined error message
2011-02-09 16:13:09 -08:00
Vadim Kurland
02ae23b197
fixes #1915 tooltip shown when mouse is over rule number should be added to the list of suppressed tooltips when "Advanced user mode" is in effect
2011-02-09 14:54:18 -08:00
Vadim Kurland
3c966ffc31
see #2064 CARP interfaces are not properly installed on FreeBSD cluster. Need to populate failover group objects with default values when they are created
2011-02-09 14:34:14 -08:00
Vadim Kurland
77ea506d63
* configlets/freebsd/installer_commands_root: fixes #2065
...
"activation commands on FreeBSD and OpenBSD lose script exit
status". Sequence of commands ran by the built-in installer on
*BSD firewalls were losing exit status of the script which meant
installer always declared installation a "success" even when
there were errors.
2011-02-09 12:33:34 -08:00
Vadim Kurland
9292895800
see #2037
...
Compile/install wizard should disable "Next" button
after compile phase is done if all firewalls failed to compile
with no errors.
see #2061
Added
bunch of common shell error messages to make sure installer
recognizes them and mark install as a failure even if ssh fails
to pass termination code.
2011-02-08 20:20:01 -08:00
