3 Commits

Author	SHA1	Message	Date
Vadim Kurland	344a22feed	see #2524 'avoid " {tcp udp icmp} " in place of protocol'. NAT ... compiler for PF does not need to generate protocol match "proto {tcp udp icmp}" when service object used in the NAT rule is "any". The reason this was done this way is lost in the mist of time; it's been like this since very early versions of fwbuilder.	2011-06-22 11:03:07 -07:00
Vadim Kurland	15bab71f49	* NATCompiler_ipt.cpp (compile): see #2456 Added support for ... single object negation in "Inbound Interface" and "Outbound Interface" columns in compiler for iptables. * NATCompiler_pf.cpp (compile): see #2456 Added support for single object negation in "Interface" rule element of PF NAT rules. Now compiler can produce PF commands such as "nat on ! em0 ... " (for PF <4.7) or "match on ! em0 ..." (for PF >= 4.7) * Compiler.cpp (singleObjectNegation::processNext): moved rule processor that processes single object negation in any rule element to the base class Compiler.	2011-06-03 17:54:14 -07:00
Vadim Kurland	aea53d35eb	see #2116 "When CARP interface IP address cant be assigned error or warning should appear". Script should abort if command trying to add an ip address to an interface fails	2011-02-19 15:33:30 -08:00