Vadim Kurland
78bb5a5ba7
fixes #2054 add support for load anchor command
2011-02-08 11:22:39 -08:00
Vadim Kurland
99a0b3d412
fixes #2055 Compiler shows success, but there was a fatal error in the config; the problem affected compilers for all platforms, not only pix
2011-02-07 23:05:27 -08:00
Vadim Kurland
faa4147b68
new build 3463
2011-02-07 19:44:02 -08:00
Vadim Kurland
87c8fcb2ac
fixes #1914 Address table object file name is not created properly if user clicks outside Editor panel
2011-02-07 17:50:22 -08:00
Vadim Kurland
ee1ed26c14
fixes #2011 no screening on Firewall name characters: do not allow character "/" in firewall and cluster names
2011-02-07 17:35:58 -08:00
Vadim Kurland
954e12b1c5
fixes #2010 Compiled rule hidden by the output panel
2011-02-07 17:29:28 -08:00
Vadim Kurland
d18427a9cc
see #2048 PF compiler doesnt detect duplicate entries in Routing policy; added rule elements to catch and suppress duplicate routing commands
2011-02-07 17:06:42 -08:00
Vadim Kurland
b244b5ff4d
fixes #2045 static route IDs used in rc.conf file must be stable
2011-02-07 15:17:36 -08:00
Vadim Kurland
bef9936ed5
making lists of interface configuration commands come out in a stable order, sorted by interface name; added test cases for vlan interfaces in shell and rc.conf formats; added vlan interfaces to cloned_interfaces line
2011-02-07 15:00:36 -08:00
Vadim Kurland
e2f05c1e0a
see #2049 Installer reports success even if there was an error while creating static routes; new build 3462
2011-02-06 19:34:09 -08:00
Vadim Kurland
9ddfbe7f96
see #2000 updated text and diagram in the network zones page in new firewall wizard; new build number 3461
2011-02-06 15:37:27 -08:00
Vadim Kurland
aded90dfce
see #1888 fixed manifest parsing in FirewallInstaller::parseManifestLine() -- it was not getting remote file name properly
2011-02-06 15:30:03 -08:00
Vadim Kurland
ba8c15e31d
fixes #2040 rename functions in OSConfigurator_bsd
2011-02-06 15:09:44 -08:00
Vadim Kurland
242f0724c8
output ifconfig or update_addresses_of_interface lines in a stable order, sorted by interface name
2011-02-06 14:55:56 -08:00
Vadim Kurland
d3a0e604c2
fixes #2041 combined bridge and ip address configuration in rc.conf should be generated
2011-02-06 13:49:32 -08:00
Vadim Kurland
a28cdd359a
see #1889 , #2043
...
Added support for bridge interface configuration in BSD.
2011-02-06 13:10:46 -08:00
Vadim Kurland
8c4079051b
fixes #2029 windows build failure
2011-02-05 22:53:58 -08:00
Vadim Kurland
3cbd7a10f4
new build 3460
2011-02-05 20:49:03 -08:00
Vadim Kurland
e8d215534a
fixes #2036 Setting the routing rule option affects all routing rules; There are no options for the FreeBSD routing rules, the dialog was an abberation. fixes #2035 Setting routing rule option does not trigger need to recompile flag
2011-02-05 20:43:15 -08:00
Vadim Kurland
47dd932529
see #2039 Installer reports success even if pfctl cant load config file
2011-02-05 20:36:24 -08:00
Vadim Kurland
7532c769a6
see #2038 pfctl error when firewall settings include scrub option for reassembly
2011-02-05 20:23:39 -08:00
Vadim Kurland
06f77e587c
fixes #2030 FreeBSD Host OS Settings - duplicate entry for Packet Forwarding; new build 3459
2011-02-04 18:05:03 -08:00
Vadim Kurland
9d2eb88522
fixes #2032 (added dhcp inetrfaces to generated rc.conf.local); see #2028 tested basic static routees on FreeBSD in both shell and rc.conf formats
2011-02-04 17:57:01 -08:00
Vadim Kurland
ceb6fc8865
fixes #2031 FreeBSD - firewall script command to delete existing routes fails
2011-02-04 16:32:08 -08:00
Vadim Kurland
e56fc6971f
new build 3458
2011-02-03 16:51:06 -08:00
Vadim Kurland
e7083f157c
fixes #2026 Compiler can now generate static routing configuration
...
in rc.conf format for FreeBSD.
2011-02-03 16:46:46 -08:00
Vadim Kurland
8fbb48b280
fixes #2021 since rc.conf format is only supported for FreeBSD, the option in the dialog should not be available for other OS
2011-02-03 16:06:13 -08:00
Vadim Kurland
8459b6e061
see #2023 refactoring determineOutputFileNames()
2011-02-03 15:44:24 -08:00
Vadim Kurland
424b6d0604
re-ran tests
2011-02-03 10:07:55 -08:00
Vadim Kurland
58ed0f4df2
re-ran tests
2011-02-03 10:06:20 -08:00
Vadim Kurland
2995ee37f5
re-ran tests
2011-02-03 10:03:49 -08:00
Vadim Kurland
5420f21ce1
re-ran tests
2011-02-03 09:56:08 -08:00
Vadim Kurland
129db6881c
re-ran tests
2011-02-03 09:55:19 -08:00
Vadim Kurland
3d88c4ce46
fixes #2019 Cluster name is not prepended to the name of generated pf.conf file
2011-02-03 09:52:37 -08:00
Vadim Kurland
39eaf40722
see #1888 , #2020 , #2018 rc.conf format of the init script for PF on FreeBSD, includes inetrfaes. addresses, CARP, pfsync and pf initialization
2011-02-02 17:45:36 -08:00
Vadim Kurland
5f9e82fda1
fixes #2014 : I should add network_zone addttribute only if it is not empty, empty attribute violates DTD
2011-02-02 10:18:13 -08:00
Vadim Kurland
2b2d1e81a9
see #2015 ability to set the name of the initalizatio and .conf files for PF
2011-02-01 20:35:33 -08:00
Vadim Kurland
e442d4521e
see #1888 Added second input field for the conf file name, refatoring in CompilerDriver_pf to use QString mostly; The name of the generated .fw file is still taken from the -o option rather than output_file firewall option
2011-02-01 14:27:30 -08:00
Vadim Kurland
e00c2cd41e
build 3456
2011-01-31 18:49:08 -08:00
Vadim Kurland
78e177f759
see #1890 re-ran tests
2011-01-31 18:38:08 -08:00
Vadim Kurland
dd86fcc5e2
see #1890 "Add
...
support for configuring static routes on BSD". Implemented support
for simple static routing rules. ECMP and routing via interface
(routing to directly reachable subnets) are not
supported. Generated script preserves static routing entries that
existed before and attempts to recover in case of error. Needs
testing.
2011-01-31 18:29:20 -08:00
Vadim Kurland
bffebde77c
see #2000 New dialog window in New Firewall wizard for ASA / PIX - Network Zone explanation; when network zone is set to "None", set attribute network_zone to an empty string
2011-01-30 16:23:12 -08:00
Vadim Kurland
83bfab658c
see #1983 ASA multiple interfaces have the same security level; dialog used to show network address instead of the actual address assigned to interface in security level and network zone tables
2011-01-30 16:12:11 -08:00
Vadim Kurland
1fcd2b6128
see #2004 Crash when using Find-and-Replace on locked library; checking if object where I should make replacement is read-only
2011-01-30 15:59:26 -08:00
Vadim Kurland
7b0573c478
see #2006 clearing editor panel when data file panel is closed; new build 3455
2011-01-30 14:46:07 -08:00
Vadim Kurland
6bd9f1ca15
new build 3454
2011-01-28 16:48:26 -08:00
Vadim Kurland
93b3b12bab
see #2000 Added page to the new firewall wizard to let the
...
user configure network zones of interfaces when chosen firewall
platform supports network zones (only PIX/ASA right now).
2011-01-28 16:43:13 -08:00
Vadim Kurland
670c6094de
new build 3453
2011-01-28 13:19:04 -08:00
Vadim Kurland
a8dd192bec
see #1983 ASA multiple interfaces have the same security level; using QTableWidget with QSpinBox widgets in the last column to let the user edit secrity levels directly
2011-01-28 13:13:14 -08:00
Vadim Kurland
e66f654a8a
see #1983 "ASA multiple interfaces have the same security level". Algorithm that guesses security level recognizes interface labels that contain word "dmz". Interfaces that could not be recognized by their label and that have ip addresses not in RFC1918 ranges still get security level 0
2011-01-28 12:13:01 -08:00
