4 Commits

Author	SHA1	Message	Date
Vadim Kurland	344a22feed	see #2524 'avoid " {tcp udp icmp} " in place of protocol'. NAT ... compiler for PF does not need to generate protocol match "proto {tcp udp icmp}" when service object used in the NAT rule is "any". The reason this was done this way is lost in the mist of time; it's been like this since very early versions of fwbuilder.	2011-06-22 11:03:07 -07:00
Vadim Kurland	56f81407f1	fixes #2124 some error messages get multiplied when compiler splits rules	2011-02-20 21:32:58 -08:00
Vadim Kurland	78bb5a5ba7	fixes #2054 add support for load anchor command	2011-02-08 11:22:39 -08:00
Vadim Kurland	abf2b3b2be	checking in "golden" test files	2011-01-03 13:01:06 -08:00